ca-certificates.crt is empty

[Octoate]

Hi,
thanks a lot for your work on this Docker container. I am currently trying to use it for a build automation system, but have faced the problem, that the "ca-certificates.crt" file in "/etc/ssl/certs" of your Docker image is empty. The files in "/etc/ca-certificates" are also empty and so I am not able to clone a Git repository without switching SSL checks off or download e.g. the kernel sources to build a new kernel package with it.

Updating the image with "pacman -Syu" doesn't help. Do you have an idea what might be wrong?

UPDATE: I am using the arm32v7 image.

Best regards,
Tim

[agners]

Hi, thanks for reporting the issue.

It seems that there is a relevant package missing, ca-certificates-mozilla in this case. However, something seems to be wrong with p11-kit too, I have to reinstall it:

pacman -Syu ca-certificates-mozilla p11-kit

Then rebuilding the certificate stores takes a moment, and seems to fix the issue you are seeing, at least cloning seems to work:

pacman -S git
git clone https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git

Really not sure why reinstalling of p11-kit is necessary, I need to look into that more closely.

Maybe the Mozilla certificates should be there by default?
https://wiki.archlinux.org/index.php/Transport_Layer_Security#Certificate_authorities