AIX Open Source

AIX Open Source

Share your experiences and connect with fellow developers to discover how to build and manage open source software for the AIX operating system

 View Only
Back to discussions
Expand all | Collapse all

YUM unusable after ca-certificates upgrade to 2021.2.52-1, breaks chain of trust

  • 1.  YUM unusable after ca-certificates upgrade to 2021.2.52-1, breaks chain of trust

    Posted Tue May 17, 2022 10:28 AM

    Hello!

    When I update to the newest ca-certificates the post-install throws the following messages:

    Transaction ID : 18
Begin time     : Mon May 16 05:25:09 2022
Begin rpmdb    : 75:efe729d81eb0a76dbeff4a75b41a289216f3f51c
End time       :            05:25:10 2022 (1 seconds)
End rpmdb      : 75:cd17380a815161619cb997a69d9578c050d4810a
User           : System <unset>
Return-Code    : Success
Command Line   : upgrade -y
Transaction performed with:
    Installed     yum-3.4.3-8.noarch @AIX_Toolbox_noarch
Packages Altered:
    Updated ca-certificates-2020.06.01-2.ppc @?AIX_Toolbox
    Update                  2021.2.52-1.ppc  @AIX_Toolbox
    Updated libpng-1.6.27-3.ppc              @?AIX_Toolbox
    Update         1.6.37-1.ppc              @AIX_Toolbox
Scriptlet output:
   1 Doing /var/ssl/certs
   2 WARNING: objsign-ca-bundle.pem does not contain a certificate or CRL: skipping
   3 email-ca-bundle.pem => a94d09e5.0
   4 WARNING: Skipping duplicate certificate tls-ca-bundle.pem
   5 Doing /var/ssl/64/certs
   6 WARNING: objsign-ca-bundle.pem does not contain a certificate or CRL: skipping
   7 email-ca-bundle.pem => a94d09e5.0
   8 WARNING: Skipping duplicate certificate tls-ca-bundle.pem
   9 /var/ssl/certs exists. Save it as /var/ssl/certs.orig.
  10 warning: file /var/ssl/certs/tls-ca-bundle.pem: remove failed: A file or directory in the path name does not exist.
  11 warning: file /var/ssl/certs/objsign-ca-bundle.pem: remove failed: A file or directory in the path name does not exist.
  12 warning: file /var/ssl/certs/email-ca-bundle.pem: remove failed: A file or directory in the path name does not exist.
  13 warning: file /var/ssl/certs/cacerts: remove failed: A file or directory in the path name does not exist.
  14 warning: file /opt/freeware/etc/ssl/certs/thawte_Primary_Root_CA_-_G3.crt: remove failed: A file or directory in the path name does not exist.
  15 warning: file /opt/freeware/etc/ssl/certs/thawte_Primary_Root_CA_-_G2.crt: remove failed: A file or directory in the path name does not exist.
  16 warning: file /opt/freeware/etc/ssl/certs/thawte_Primary_Root_CA.crt: remove failed: A file or directory in the path name does not exist.
  17 warning: file /opt/freeware/etc/ssl/certs/Verisign_Class_3_Public_Primary_Certification_Authority_-_G3.crt: remove failed: A file or directory in the path name does not exist.
  18 warning: file /opt/freeware/etc/ssl/certs/VeriSign_Universal_Root_Certification_Authority.crt: remove failed: A file or directory in the path name does not exist.
  19 warning: file /opt/freeware/etc/ssl/certs/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.crt: remove failed: A file or directory in the path name does not exist.
  20 warning: file /opt/freeware/etc/ssl/certs/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.crt: remove failed: A file or directory in the path name does not exist.
  21 warning: file /opt/freeware/etc/ssl/certs/Trustis_FPS_Root_CA.crt: remove failed: A file or directory in the path name does not exist.
  22 warning: file /opt/freeware/etc/ssl/certs/Taiwan_GRCA.crt: remove failed: A file or directory in the path name does not exist.
  23 warning: file /opt/freeware/etc/ssl/certs/Staat_der_Nederlanden_Root_CA_-_G3.crt: remove failed: A file or directory in the path name does not exist.
  24 warning: file /opt/freeware/etc/ssl/certs/Staat_der_Nederlanden_Root_CA_-_G2.crt: remove failed: A file or directory in the path name does not exist.
  25 warning: file /opt/freeware/etc/ssl/certs/Sonera_Class_2_Root_CA.crt: remove failed: A file or directory in the path name does not exist.
  26 warning: file /opt/freeware/etc/ssl/certs/QuoVadis_Root_CA.crt: remove failed: A file or directory in the path name does not exist.
  27 warning: file /opt/freeware/etc/ssl/certs/OISTE_WISeKey_Global_Root_GA_CA.crt: remove failed: A file or directory in the path name does not exist.
  28 warning: file /opt/freeware/etc/ssl/certs/NetLock_Arany_=Class_Gold=_F?tan�s�tv�ny.crt: remove failed: A file or directory in the path name does not exist.
  29 warning: file /opt/freeware/etc/ssl/certs/LuxTrust_Global_Root_2.crt: remove failed: A file or directory in the path name does not exist.
  30 warning: file /opt/freeware/etc/ssl/certs/Global_Chambersign_Root_-_2008.crt: remove failed: A file or directory in the path name does not exist.
  31 warning: file /opt/freeware/etc/ssl/certs/GeoTrust_Universal_CA_2.crt: remove failed: A file or directory in the path name does not exist.
  32 warning: file /opt/freeware/etc/ssl/certs/GeoTrust_Universal_CA.crt: remove failed: A file or directory in the path name does not exist.
  33 warning: file /opt/freeware/etc/ssl/certs/GeoTrust_Primary_Certification_Authority_-_G3.crt: remove failed: A file or directory in the path name does not exist.
  34 warning: file /opt/freeware/etc/ssl/certs/GeoTrust_Primary_Certification_Authority_-_G2.crt: remove failed: A file or directory in the path name does not exist.
  35 warning: file /opt/freeware/etc/ssl/certs/GeoTrust_Primary_Certification_Authority.crt: remove failed: A file or directory in the path name does not exist.
  36 warning: file /opt/freeware/etc/ssl/certs/GeoTrust_Global_CA.crt: remove failed: A file or directory in the path name does not exist.
  37 warning: file /opt/freeware/etc/ssl/certs/EE_Certification_Centre_Root_CA.crt: remove failed: A file or directory in the path name does not exist.
  38 warning: file /opt/freeware/etc/ssl/certs/Chambers_of_Commerce_Root_-_2008.crt: remove failed: A file or directory in the path name does not exist.
  39 warning: file /opt/freeware/etc/ssl/certs/AddTrust_External_Root.crt: remove failed: A file or directory in the path name does not exist.
history info

    After that the system can´t use yum because of curl certificate errno 14:

    # yum upgrade
anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml:">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml: [Errno 14] curl#60 - "SSL certificate problem: self signed certificate in certificate chain"
Trying other mirror.
anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.2/repodata/repomd.xml:">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.2/repodata/repomd.xml: [Errno 14] curl#60 - "SSL certificate problem: self signed certificate in certificate chain"
Trying other mirror.
anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml:">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml: [Errno 14] curl#60 - "SSL certificate problem: self signed certificate in certificate chain"
Trying other mirror.
Setting up Upgrade Process
No Packages marked for Update

# yum install zsh
anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml:">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml: [Errno 14] curl#60 - "SSL certificate problem: self signed certificate in certificate chain"
Trying other mirror.
anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.2/repodata/repomd.xml:">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.2/repodata/repomd.xml: [Errno 14] curl#60 - "SSL certificate problem: self signed certificate in certificate chain"
Trying other mirror.
anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml:">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml: [Errno 14] curl#60 - "SSL certificate problem: self signed certificate in certificate chain"
Trying other mirror.
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package zsh.ppc 0:5.8-1 will be installed
--> Finished Dependency Resolution

Dependencies Resolved

==============================================================================================================================================================================================================================================
 Package                                                Arch                                                   Version                                                   Repository                                                      Size
==============================================================================================================================================================================================================================================
Installing:
 zsh                                                    ppc                                                    5.8-1                                                     AIX_Toolbox                                                    4.6 M

Transaction Summary
==============================================================================================================================================================================================================================================
Install       1 Package

Total download size: 4.6 M
Installed size: 4.6 M
Is this ok [y/N]: y
Downloading Packages:
anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/zsh/zsh-5.8-1.aix6.1.ppc.rpm:">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/zsh/zsh-5.8-1.aix6.1.ppc.rpm: [Errno 14] curl#60 - "SSL certificate problem: self signed certificate in certificate chain"
Trying other mirror.


Error Downloading Packages:
  zsh-5.8-1.ppc: failure: zsh/zsh-5.8-1.aix6.1.ppc.rpm from AIX_Toolbox: [Errno 256] No more mirrors to try.

    Setting sslverify=false gets rid of the errors and I can install/upgrade again, but reinstalling ca-certificates doesn´t help with the cURL errors, in contrast to this hint in IBM Support

    Please advise how to react to this, I don´t want to switch off the TLS Verification for the YUM transactions, thanks!

    With kind regards,

    Stephan Dietl



    ------------------------------
    Stephan Dietl
    ------------------------------


  • 2.  RE: YUM unusable after ca-certificates upgrade to 2021.2.52-1, breaks chain of trust

    Posted Wed May 18, 2022 10:29 AM
    It looks like you have an intercepting proxy in your environment:

    SSL certificate problem: self signed certificate in certificate chain​


    It may be that the installation of the new package version removed your proxy certificate/chain. Reinstall it and it should work again.



    ------------------------------
    Andrey Klyachkin

    https://www.power-devops.com
    ------------------------------

    Original Message


  • 3.  RE: YUM unusable after ca-certificates upgrade to 2021.2.52-1, breaks chain of trust

    Posted Fri May 20, 2022 04:21 AM
    I assume the same, there must be a proxy in between which breaks up ssl.

    You can see that the old chain of trust is removed in the yum log:
    ...
   9 /var/ssl/certs exists. Save it as /var/ssl/certs.orig.
​...

    Would it be possible to have a rpm provided trusted certs path and a user provided one.
    Both should then be "scraped" by c_rehash to set the needed links.
    On Linux systems this is usaually this way:

    rpm provided: /usr/share/ca-certificates
    user provided: /usr/local/share/ca-certificates

    Otherwise one would always have to re-add used needed certificates after a new ca-certificates version.



    ------------------------------
    Henk Wiedig
    ------------------------------

    Original Message


  • 4.  RE: YUM unusable after ca-certificates upgrade to 2021.2.52-1, breaks chain of trust

    Posted Mon May 23, 2022 03:58 AM
    Edited by Stephan Dietl Mon May 23, 2022 04:00 AM

    Hello @Andrey Klyachkin !

    We don´t install anything in /var/ssl/64 or /var/ssl/certs except the package:

    Path: /etc/objrepos
    openssl.base 1.1.1.1200
    /var/ssl/misc/CA.pl
    /var/ssl/misc/CA.sh
    /var/ssl/misc/c_name
    /var/ssl/misc/c_hash
    /var/ssl/misc/tsget
    /var/ssl/openssl.cnf
    /var/ssl/misc/c_info
    /var/ssl/misc/c_issuer
    ​

    No package of us places files into /var/ssl/* !

    I also tried to move the old symlinks from /var/ssl/certs.orig to /var/ssl/certs (removing the symlink created by the upgrade) but to no avail.

    Here is how the /var/ssl looks like on an AIX 7.2 machine where the upgrade hasn´t been installed:

    [root@r3f1z01q:/var/ssl]> ls -alrt
total 96
-rw-r--r--    1 root     system        11485 Dec 11 2019  openssl.cnf
drwxr-xr-x    2 root     system          256 Aug 09 2021  64
drwxr-xr-x    2 root     system        28672 Aug 09 2021  certs
drwxr-xr-x    2 root     system          256 Jan 19 12:37 misc
drwxr-xr-x    5 root     system          256 Jan 19 12:37 .
drwxr-xr-x   29 bin      bin            4096 Apr 26 10:10 ..
[root@r3f1z01q:/var/ssl]> cd certs
[root@r3f1z01q:/var/ssl/certs]> ls -alrt
total 64
lrwxrwxrwx    1 root     system           41 Aug 09 2021  ACCVRAIZ1.crt -> /opt/freeware/etc/ssl/certs/ACCVRAIZ1.crt
lrwxrwxrwx    1 root     system           62 Aug 09 2021  Actalis_Authentication_Root_CA.crt -> /opt/freeware/etc/ssl/certs/Actalis_Authentication_Root_CA.crt
lrwxrwxrwx    1 root     system           48 Aug 09 2021  AC_RAIZ_FNMT-RCM.crt -> /opt/freeware/etc/ssl/certs/AC_RAIZ_FNMT-RCM.crt
lrwxrwxrwx    1 root     system           55 Aug 09 2021  AffirmTrust_Premium_ECC.crt -> /opt/freeware/etc/ssl/certs/AffirmTrust_Premium_ECC.crt
lrwxrwxrwx    1 root     system           51 Aug 09 2021  AffirmTrust_Premium.crt -> /opt/freeware/etc/ssl/certs/AffirmTrust_Premium.crt
lrwxrwxrwx    1 root     system           54 Aug 09 2021  AffirmTrust_Networking.crt -> /opt/freeware/etc/ssl/certs/AffirmTrust_Networking.crt
lrwxrwxrwx    1 root     system           54 Aug 09 2021  AffirmTrust_Commercial.crt -> /opt/freeware/etc/ssl/certs/AffirmTrust_Commercial.crt
lrwxrwxrwx    1 root     system           54 Aug 09 2021  AddTrust_External_Root.crt -> /opt/freeware/etc/ssl/certs/AddTrust_External_Root.crt
lrwxrwxrwx    1 root     system           48 Aug 09 2021  Amazon_Root_CA_4.crt -> /opt/freeware/etc/ssl/certs/Amazon_Root_CA_4.crt
lrwxrwxrwx    1 root     system           48 Aug 09 2021  Amazon_Root_CA_3.crt -> /opt/freeware/etc/ssl/certs/Amazon_Root_CA_3.crt
lrwxrwxrwx    1 root     system           48 Aug 09 2021  Amazon_Root_CA_2.crt -> /opt/freeware/etc/ssl/certs/Amazon_Root_CA_2.crt
lrwxrwxrwx    1 root     system           48 Aug 09 2021  Amazon_Root_CA_1.crt -> /opt/freeware/etc/ssl/certs/Amazon_Root_CA_1.crt
lrwxrwxrwx    1 root     system           89 Aug 09 2021  Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt -> /opt/freeware/etc/ssl/certs/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt
lrwxrwxrwx    1 root     system           53 Aug 09 2021  Atos_TrustedRoot_2011.crt -> /opt/freeware/etc/ssl/certs/Atos_TrustedRoot_2011.crt
lrwxrwxrwx    1 root     system           48 Aug 09 2021  CA_Disig_Root_R2.crt -> /opt/freeware/etc/ssl/certs/CA_Disig_Root_R2.crt
lrwxrwxrwx    1 root     system           55 Aug 09 2021  Buypass_Class_3_Root_CA.crt -> /opt/freeware/etc/ssl/certs/Buypass_Class_3_Root_CA.crt
lrwxrwxrwx    1 root     system           55 Aug 09 2021  Buypass_Class_2_Root_CA.crt -> /opt/freeware/etc/ssl/certs/Buypass_Class_2_Root_CA.crt
lrwxrwxrwx    1 root     system           57 Aug 09 2021  Baltimore_CyberTrust_Root.crt -> /opt/freeware/etc/ssl/certs/Baltimore_CyberTrust_Root.crt
lrwxrwxrwx    1 root     system           44 Aug 09 2021  CFCA_EV_ROOT.crt -> /opt/freeware/etc/ssl/certs/CFCA_EV_ROOT.crt
lrwxrwxrwx    1 root     system           48 Aug 09 2021  Certigna_Root_CA.crt -> /opt/freeware/etc/ssl/certs/Certigna_Root_CA.crt
lrwxrwxrwx    1 root     system           40 Aug 09 2021  Certigna.crt -> /opt/freeware/etc/ssl/certs/Certigna.crt
lrwxrwxrwx    1 root     system           66 Aug 09 2021  COMODO_RSA_Certification_Authority.crt -> /opt/freeware/etc/ssl/certs/COMODO_RSA_Certification_Authority.crt
lrwxrwxrwx    1 root     system           66 Aug 09 2021  COMODO_ECC_Certification_Authority.crt -> /opt/freeware/etc/ssl/certs/COMODO_ECC_Certification_Authority.crt
lrwxrwxrwx    1 root     system           62 Aug 09 2021  COMODO_Certification_Authority.crt -> /opt/freeware/etc/ssl/certs/COMODO_Certification_Authority.crt
lrwxrwxrwx    1 root     system           59 Aug 09 2021  Certum_Trusted_Network_CA_2.crt -> /opt/freeware/etc/ssl/certs/Certum_Trusted_Network_CA_2.crt
lrwxrwxrwx    1 root     system           57 Aug 09 2021  Certum_Trusted_Network_CA.crt -> /opt/freeware/etc/ssl/certs/Certum_Trusted_Network_CA.crt
lrwxrwxrwx    1 root     system           65 Aug 09 2021  D-TRUST_Root_Class_3_CA_2_EV_2009.crt -> /opt/freeware/etc/ssl/certs/D-TRUST_Root_Class_3_CA_2_EV_2009.crt
lrwxrwxrwx    1 root     system           62 Aug 09 2021  D-TRUST_Root_Class_3_CA_2_2009.crt -> /opt/freeware/etc/ssl/certs/D-TRUST_Root_Class_3_CA_2_2009.crt
lrwxrwxrwx    1 root     system           54 Aug 09 2021  Cybertrust_Global_Root.crt -> /opt/freeware/etc/ssl/certs/Cybertrust_Global_Root.crt
lrwxrwxrwx    1 root     system           56 Aug 09 2021  Comodo_AAA_Services_root.crt -> /opt/freeware/etc/ssl/certs/Comodo_AAA_Services_root.crt
lrwxrwxrwx    1 root     system           64 Aug 09 2021  Chambers_of_Commerce_Root_-_2008.crt -> /opt/freeware/etc/ssl/certs/Chambers_of_Commerce_Root_-_2008.crt
lrwxrwxrwx    1 root     system           46 Aug 09 2021  DST_Root_CA_X3.crt -> /opt/freeware/etc/ssl/certs/DST_Root_CA_X3.crt
lrwxrwxrwx    1 root     system           55 Aug 09 2021  DigiCert_Global_Root_G2.crt -> /opt/freeware/etc/ssl/certs/DigiCert_Global_Root_G2.crt
lrwxrwxrwx    1 root     system           55 Aug 09 2021  DigiCert_Global_Root_CA.crt -> /opt/freeware/etc/ssl/certs/DigiCert_Global_Root_CA.crt
lrwxrwxrwx    1 root     system           59 Aug 09 2021  DigiCert_Assured_ID_Root_G3.crt -> /opt/freeware/etc/ssl/certs/DigiCert_Assured_ID_Root_G3.crt
lrwxrwxrwx    1 root     system           59 Aug 09 2021  DigiCert_Assured_ID_Root_G2.crt -> /opt/freeware/etc/ssl/certs/DigiCert_Assured_ID_Root_G2.crt
lrwxrwxrwx    1 root     system           59 Aug 09 2021  DigiCert_Assured_ID_Root_CA.crt -> /opt/freeware/etc/ssl/certs/DigiCert_Assured_ID_Root_CA.crt
lrwxrwxrwx    1 root     system           66 Aug 09 2021  DigiCert_High_Assurance_EV_Root_CA.crt -> /opt/freeware/etc/ssl/certs/DigiCert_High_Assurance_EV_Root_CA.crt
lrwxrwxrwx    1 root     system           55 Aug 09 2021  DigiCert_Global_Root_G3.crt -> /opt/freeware/etc/ssl/certs/DigiCert_Global_Root_G3.crt
lrwxrwxrwx    1 root     system           63 Aug 09 2021  EE_Certification_Centre_Root_CA.crt -> /opt/freeware/etc/ssl/certs/EE_Certification_Centre_Root_CA.crt
lrwxrwxrwx    1 root     system           38 Aug 09 2021  EC-ACC.crt -> /opt/freeware/etc/ssl/certs/EC-ACC.crt
lrwxrwxrwx    1 root     system           63 Aug 09 2021  E-Tugra_Certification_Authority.crt -> /opt/freeware/etc/ssl/certs/E-Tugra_Certification_Authority.crt
lrwxrwxrwx    1 root     system           56 Aug 09 2021  DigiCert_Trusted_Root_G4.crt -> /opt/freeware/etc/ssl/certs/DigiCert_Trusted_Root_G4.crt
lrwxrwxrwx    1 root     system           68 Aug 09 2021  Entrust_Root_Certification_Authority.crt -> /opt/freeware/etc/ssl/certs/Entrust_Root_Certification_Authority.crt
lrwxrwxrwx    1 root     system           73 Aug 09 2021  Entrust.net_Premium_2048_Secure_Server_CA.crt -> /opt/freeware/etc/ssl/certs/Entrust.net_Premium_2048_Secure_Server_CA.crt
lrwxrwxrwx    1 root     system           43 Aug 09 2021  GTS_Root_R1.crt -> /opt/freeware/etc/ssl/certs/GTS_Root_R1.crt
lrwxrwxrwx    1 root     system           54 Aug 09 2021  GDCA_TrustAUTH_R5_ROOT.crt -> /opt/freeware/etc/ssl/certs/GDCA_TrustAUTH_R5_ROOT.crt
lrwxrwxrwx    1 root     system           73 Aug 09 2021  Entrust_Root_Certification_Authority_-_G4.crt -> /opt/freeware/etc/ssl/certs/Entrust_Root_Certification_Authority_-_G4.crt
lrwxrwxrwx    1 root     system           73 Aug 09 2021  Entrust_Root_Certification_Authority_-_G2.crt -> /opt/freeware/etc/ssl/certs/Entrust_Root_Certification_Authority_-_G2.crt
lrwxrwxrwx    1 root     system           74 Aug 09 2021  Entrust_Root_Certification_Authority_-_EC1.crt -> /opt/freeware/etc/ssl/certs/Entrust_Root_Certification_Authority_-_EC1.crt
lrwxrwxrwx    1 root     system           43 Aug 09 2021  GTS_Root_R2.crt -> /opt/freeware/etc/ssl/certs/GTS_Root_R2.crt
lrwxrwxrwx    1 root     system           77 Aug 09 2021  GeoTrust_Primary_Certification_Authority_-_G2.crt -> /opt/freeware/etc/ssl/certs/GeoTrust_Primary_Certification_Authority_-_G2.crt
lrwxrwxrwx    1 root     system           72 Aug 09 2021  GeoTrust_Primary_Certification_Authority.crt -> /opt/freeware/etc/ssl/certs/GeoTrust_Primary_Certification_Authority.crt
lrwxrwxrwx    1 root     system           50 Aug 09 2021  GeoTrust_Global_CA.crt -> /opt/freeware/etc/ssl/certs/GeoTrust_Global_CA.crt
lrwxrwxrwx    1 root     system           43 Aug 09 2021  GTS_Root_R4.crt -> /opt/freeware/etc/ssl/certs/GTS_Root_R4.crt
lrwxrwxrwx    1 root     system           43 Aug 09 2021  GTS_Root_R3.crt -> /opt/freeware/etc/ssl/certs/GTS_Root_R3.crt
lrwxrwxrwx    1 root     system           77 Aug 09 2021  GeoTrust_Primary_Certification_Authority_-_G3.crt -> /opt/freeware/etc/ssl/certs/GeoTrust_Primary_Certification_Authority_-_G3.crt
lrwxrwxrwx    1 root     system           50 Aug 09 2021  GlobalSign_Root_CA.crt -> /opt/freeware/etc/ssl/certs/GlobalSign_Root_CA.crt
lrwxrwxrwx    1 root     system           59 Aug 09 2021  GlobalSign_ECC_Root_CA_-_R5.crt -> /opt/freeware/etc/ssl/certs/GlobalSign_ECC_Root_CA_-_R5.crt
lrwxrwxrwx    1 root     system           59 Aug 09 2021  GlobalSign_ECC_Root_CA_-_R4.crt -> /opt/freeware/etc/ssl/certs/GlobalSign_ECC_Root_CA_-_R4.crt
lrwxrwxrwx    1 root     system           55 Aug 09 2021  GeoTrust_Universal_CA_2.crt -> /opt/freeware/etc/ssl/certs/GeoTrust_Universal_CA_2.crt
lrwxrwxrwx    1 root     system           53 Aug 09 2021  GeoTrust_Universal_CA.crt -> /opt/freeware/etc/ssl/certs/GeoTrust_Universal_CA.crt
lrwxrwxrwx    1 root     system           55 Aug 09 2021  GlobalSign_Root_CA_-_R2.crt -> /opt/freeware/etc/ssl/certs/GlobalSign_Root_CA_-_R2.crt
lrwxrwxrwx    1 root     system           55 Aug 09 2021  GlobalSign_Root_CA_-_R3.crt -> /opt/freeware/etc/ssl/certs/GlobalSign_Root_CA_-_R3.crt
lrwxrwxrwx    1 root     system           72 Aug 09 2021  Go_Daddy_Root_Certificate_Authority_-_G2.crt -> /opt/freeware/etc/ssl/certs/Go_Daddy_Root_Certificate_Authority_-_G2.crt
lrwxrwxrwx    1 root     system           51 Aug 09 2021  Go_Daddy_Class_2_CA.crt -> /opt/freeware/etc/ssl/certs/Go_Daddy_Class_2_CA.crt
lrwxrwxrwx    1 root     system           62 Aug 09 2021  Global_Chambersign_Root_-_2008.crt -> /opt/freeware/etc/ssl/certs/Global_Chambersign_Root_-_2008.crt
lrwxrwxrwx    1 root     system           55 Aug 09 2021  GlobalSign_Root_CA_-_R6.crt -> /opt/freeware/etc/ssl/certs/GlobalSign_Root_CA_-_R6.crt
lrwxrwxrwx    1 root     system           87 Aug 09 2021  Hellenic_Academic_and_Research_Institutions_RootCA_2011.crt -> /opt/freeware/etc/ssl/certs/Hellenic_Academic_and_Research_Institutions_RootCA_2011.crt
lrwxrwxrwx    1 root     system           91 Aug 09 2021  Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt -> /opt/freeware/etc/ssl/certs/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt
lrwxrwxrwx    1 root     system           87 Aug 09 2021  Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt -> /opt/freeware/etc/ssl/certs/Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt
lrwxrwxrwx    1 root     system           62 Aug 09 2021  IdenTrust_Commercial_Root_CA_1.crt -> /opt/freeware/etc/ssl/certs/IdenTrust_Commercial_Root_CA_1.crt
lrwxrwxrwx    1 root     system           44 Aug 09 2021  ISRG_Root_X1.crt -> /opt/freeware/etc/ssl/certs/ISRG_Root_X1.crt
lrwxrwxrwx    1 root     system           55 Aug 09 2021  Hongkong_Post_Root_CA_3.crt -> /opt/freeware/etc/ssl/certs/Hongkong_Post_Root_CA_3.crt
lrwxrwxrwx    1 root     system           55 Aug 09 2021  Hongkong_Post_Root_CA_1.crt -> /opt/freeware/etc/ssl/certs/Hongkong_Post_Root_CA_1.crt
lrwxrwxrwx    1 root     system           42 Aug 09 2021  Izenpe.com.crt -> /opt/freeware/etc/ssl/certs/Izenpe.com.crt
lrwxrwxrwx    1 root     system           65 Aug 09 2021  IdenTrust_Public_Sector_Root_CA_1.crt -> /opt/freeware/etc/ssl/certs/IdenTrust_Public_Sector_Root_CA_1.crt
lrwxrwxrwx    1 root     system           71 Aug 09 2021  Network_Solutions_Certificate_Authority.crt -> /opt/freeware/etc/ssl/certs/Network_Solutions_Certificate_Authority.crt
lrwxrwxrwx    1 root     system           76 Aug 09 2021  NetLock_Arany_=Class_Gold=_Főtanúsítvány.crt -> /opt/freeware/etc/ssl/certs/NetLock_Arany_=Class_Gold=_Főtanúsítvány.crt
lrwxrwxrwx    1 root     system           62 Aug 09 2021  Microsec_e-Szigno_Root_CA_2009.crt -> /opt/freeware/etc/ssl/certs/Microsec_e-Szigno_Root_CA_2009.crt
lrwxrwxrwx    1 root     system           54 Aug 09 2021  LuxTrust_Global_Root_2.crt -> /opt/freeware/etc/ssl/certs/LuxTrust_Global_Root_2.crt
lrwxrwxrwx    1 root     system           63 Aug 09 2021  OISTE_WISeKey_Global_Root_GB_CA.crt -> /opt/freeware/etc/ssl/certs/OISTE_WISeKey_Global_Root_GB_CA.crt
lrwxrwxrwx    1 root     system           63 Aug 09 2021  OISTE_WISeKey_Global_Root_GA_CA.crt -> /opt/freeware/etc/ssl/certs/OISTE_WISeKey_Global_Root_GA_CA.crt
lrwxrwxrwx    1 root     system           53 Aug 09 2021  QuoVadis_Root_CA_2_G3.crt -> /opt/freeware/etc/ssl/certs/QuoVadis_Root_CA_2_G3.crt
lrwxrwxrwx    1 root     system           50 Aug 09 2021  QuoVadis_Root_CA_2.crt -> /opt/freeware/etc/ssl/certs/QuoVadis_Root_CA_2.crt
lrwxrwxrwx    1 root     system           53 Aug 09 2021  QuoVadis_Root_CA_1_G3.crt -> /opt/freeware/etc/ssl/certs/QuoVadis_Root_CA_1_G3.crt
lrwxrwxrwx    1 root     system           48 Aug 09 2021  QuoVadis_Root_CA.crt -> /opt/freeware/etc/ssl/certs/QuoVadis_Root_CA.crt
lrwxrwxrwx    1 root     system           63 Aug 09 2021  OISTE_WISeKey_Global_Root_GC_CA.crt -> /opt/freeware/etc/ssl/certs/OISTE_WISeKey_Global_Root_GC_CA.crt
lrwxrwxrwx    1 root     system           53 Aug 09 2021  QuoVadis_Root_CA_3_G3.crt -> /opt/freeware/etc/ssl/certs/QuoVadis_Root_CA_3_G3.crt
lrwxrwxrwx    1 root     system           50 Aug 09 2021  QuoVadis_Root_CA_3.crt -> /opt/freeware/etc/ssl/certs/QuoVadis_Root_CA_3.crt
lrwxrwxrwx    1 root     system           72 Aug 09 2021  SSL.com_Root_Certification_Authority_RSA.crt -> /opt/freeware/etc/ssl/certs/SSL.com_Root_Certification_Authority_RSA.crt
lrwxrwxrwx    1 root     system           72 Aug 09 2021  SSL.com_Root_Certification_Authority_ECC.crt -> /opt/freeware/etc/ssl/certs/SSL.com_Root_Certification_Authority_ECC.crt
lrwxrwxrwx    1 root     system           78 Aug 09 2021  SSL.com_EV_Root_Certification_Authority_RSA_R2.crt -> /opt/freeware/etc/ssl/certs/SSL.com_EV_Root_Certification_Authority_RSA_R2.crt
lrwxrwxrwx    1 root     system           75 Aug 09 2021  SSL.com_EV_Root_Certification_Authority_ECC.crt -> /opt/freeware/etc/ssl/certs/SSL.com_EV_Root_Certification_Authority_ECC.crt
lrwxrwxrwx    1 root     system           47 Aug 09 2021  SZAFIR_ROOT_CA2.crt -> /opt/freeware/etc/ssl/certs/SZAFIR_ROOT_CA2.crt
lrwxrwxrwx    1 root     system           62 Aug 09 2021  Security_Communication_Root_CA.crt -> /opt/freeware/etc/ssl/certs/Security_Communication_Root_CA.crt
lrwxrwxrwx    1 root     system           62 Aug 09 2021  Security_Communication_RootCA2.crt -> /opt/freeware/etc/ssl/certs/Security_Communication_RootCA2.crt
lrwxrwxrwx    1 root     system           48 Aug 09 2021  Secure_Global_CA.crt -> /opt/freeware/etc/ssl/certs/Secure_Global_CA.crt
lrwxrwxrwx    1 root     system           46 Aug 09 2021  SecureTrust_CA.crt -> /opt/freeware/etc/ssl/certs/SecureTrust_CA.crt
lrwxrwxrwx    1 root     system           51 Aug 09 2021  SecureSign_RootCA11.crt -> /opt/freeware/etc/ssl/certs/SecureSign_RootCA11.crt
lrwxrwxrwx    1 root     system           64 Aug 09 2021  Staat_der_Nederlanden_EV_Root_CA.crt -> /opt/freeware/etc/ssl/certs/Staat_der_Nederlanden_EV_Root_CA.crt
lrwxrwxrwx    1 root     system           54 Aug 09 2021  Sonera_Class_2_Root_CA.crt -> /opt/freeware/etc/ssl/certs/Sonera_Class_2_Root_CA.crt
lrwxrwxrwx    1 root     system           66 Aug 09 2021  Staat_der_Nederlanden_Root_CA_-_G2.crt -> /opt/freeware/etc/ssl/certs/Staat_der_Nederlanden_Root_CA_-_G2.crt
lrwxrwxrwx    1 root     system           52 Aug 09 2021  Starfield_Class_2_CA.crt -> /opt/freeware/etc/ssl/certs/Starfield_Class_2_CA.crt
lrwxrwxrwx    1 root     system           66 Aug 09 2021  Staat_der_Nederlanden_Root_CA_-_G3.crt -> /opt/freeware/etc/ssl/certs/Staat_der_Nederlanden_Root_CA_-_G3.crt
lrwxrwxrwx    1 root     system           73 Aug 09 2021  Starfield_Root_Certificate_Authority_-_G2.crt -> /opt/freeware/etc/ssl/certs/Starfield_Root_Certificate_Authority_-_G2.crt
lrwxrwxrwx    1 root     system           54 Aug 09 2021  SwissSign_Gold_CA_-_G2.crt -> /opt/freeware/etc/ssl/certs/SwissSign_Gold_CA_-_G2.crt
lrwxrwxrwx    1 root     system           82 Aug 09 2021  Starfield_Services_Root_Certificate_Authority_-_G2.crt -> /opt/freeware/etc/ssl/certs/Starfield_Services_Root_Certificate_Authority_-_G2.crt
lrwxrwxrwx    1 root     system           77 Aug 09 2021  TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt -> /opt/freeware/etc/ssl/certs/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt
lrwxrwxrwx    1 root     system           60 Aug 09 2021  T-TeleSec_GlobalRoot_Class_3.crt -> /opt/freeware/etc/ssl/certs/T-TeleSec_GlobalRoot_Class_3.crt
lrwxrwxrwx    1 root     system           60 Aug 09 2021  T-TeleSec_GlobalRoot_Class_2.crt -> /opt/freeware/etc/ssl/certs/T-TeleSec_GlobalRoot_Class_2.crt
lrwxrwxrwx    1 root     system           56 Aug 09 2021  SwissSign_Silver_CA_-_G2.crt -> /opt/freeware/etc/ssl/certs/SwissSign_Silver_CA_-_G2.crt
lrwxrwxrwx    1 root     system           65 Aug 09 2021  TWCA_Root_Certification_Authority.crt -> /opt/freeware/etc/ssl/certs/TWCA_Root_Certification_Authority.crt
lrwxrwxrwx    1 root     system           51 Aug 09 2021  TWCA_Global_Root_CA.crt -> /opt/freeware/etc/ssl/certs/TWCA_Global_Root_CA.crt
lrwxrwxrwx    1 root     system           54 Aug 09 2021  TrustCor_RootCert_CA-1.crt -> /opt/freeware/etc/ssl/certs/TrustCor_RootCert_CA-1.crt
lrwxrwxrwx    1 root     system           46 Aug 09 2021  TrustCor_ECA-1.crt -> /opt/freeware/etc/ssl/certs/TrustCor_ECA-1.crt
lrwxrwxrwx    1 root     system           54 Aug 09 2021  TeliaSonera_Root_CA_v1.crt -> /opt/freeware/etc/ssl/certs/TeliaSonera_Root_CA_v1.crt
lrwxrwxrwx    1 root     system           43 Aug 09 2021  Taiwan_GRCA.crt -> /opt/freeware/etc/ssl/certs/Taiwan_GRCA.crt
lrwxrwxrwx    1 root     system           54 Aug 09 2021  TrustCor_RootCert_CA-2.crt -> /opt/freeware/etc/ssl/certs/TrustCor_RootCert_CA-2.crt
lrwxrwxrwx    1 root     system           60 Aug 09 2021  UCA_Extended_Validation_Root.crt -> /opt/freeware/etc/ssl/certs/UCA_Extended_Validation_Root.crt
lrwxrwxrwx    1 root     system           51 Aug 09 2021  Trustis_FPS_Root_CA.crt -> /opt/freeware/etc/ssl/certs/Trustis_FPS_Root_CA.crt
lrwxrwxrwx    1 root     system           92 Aug 09 2021  VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.crt -> /opt/freeware/etc/ssl/certs/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.crt
lrwxrwxrwx    1 root     system           69 Aug 09 2021  USERTrust_RSA_Certification_Authority.crt -> /opt/freeware/etc/ssl/certs/USERTrust_RSA_Certification_Authority.crt
lrwxrwxrwx    1 root     system           69 Aug 09 2021  USERTrust_ECC_Certification_Authority.crt -> /opt/freeware/etc/ssl/certs/USERTrust_ECC_Certification_Authority.crt
lrwxrwxrwx    1 root     system           50 Aug 09 2021  UCA_Global_G2_Root.crt -> /opt/freeware/etc/ssl/certs/UCA_Global_G2_Root.crt
lrwxrwxrwx    1 root     system           92 Aug 09 2021  VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.crt -> /opt/freeware/etc/ssl/certs/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.crt
lrwxrwxrwx    1 root     system           79 Aug 09 2021  VeriSign_Universal_Root_Certification_Authority.crt -> /opt/freeware/etc/ssl/certs/VeriSign_Universal_Root_Certification_Authority.crt
lrwxrwxrwx    1 root     system           65 Aug 09 2021  ca-bundle.trust.crt -> /opt/freeware/etc/ssl/certs/extracted/openssl/ca-bundle.trust.crt
lrwxrwxrwx    1 root     system           59 Aug 09 2021  ca-bundle.crt -> /opt/freeware/etc/ssl/certs/extracted/pem/tls-ca-bundle.pem
lrwxrwxrwx    1 root     system           52 Aug 09 2021  XRamp_Global_CA_Root.crt -> /opt/freeware/etc/ssl/certs/XRamp_Global_CA_Root.crt
lrwxrwxrwx    1 root     system           92 Aug 09 2021  Verisign_Class_3_Public_Primary_Certification_Authority_-_G3.crt -> /opt/freeware/etc/ssl/certs/Verisign_Class_3_Public_Primary_Certification_Authority_-_G3.crt
lrwxrwxrwx    1 root     system           48 Aug 09 2021  certSIGN_ROOT_CA.crt -> /opt/freeware/etc/ssl/certs/certSIGN_ROOT_CA.crt
lrwxrwxrwx    1 root     system           50 Aug 09 2021  cacerts -> /opt/freeware/etc/ssl/certs/extracted/java/cacerts
lrwxrwxrwx    1 root     system           55 Aug 09 2021  emSign_ECC_Root_CA_-_C3.crt -> /opt/freeware/etc/ssl/certs/emSign_ECC_Root_CA_-_C3.crt
lrwxrwxrwx    1 root     system           65 Aug 09 2021  ePKI_Root_Certification_Authority.crt -> /opt/freeware/etc/ssl/certs/ePKI_Root_Certification_Authority.crt
lrwxrwxrwx    1 root     system           51 Aug 09 2021  emSign_Root_CA_-_C1.crt -> /opt/freeware/etc/ssl/certs/emSign_Root_CA_-_C1.crt
lrwxrwxrwx    1 root     system           55 Aug 09 2021  emSign_ECC_Root_CA_-_G3.crt -> /opt/freeware/etc/ssl/certs/emSign_ECC_Root_CA_-_G3.crt
lrwxrwxrwx    1 root     system           61 Aug 09 2021  email-ca-bundle.pem -> /opt/freeware/etc/ssl/certs/extracted/pem/email-ca-bundle.pem
lrwxrwxrwx    1 root     system           51 Aug 09 2021  emSign_Root_CA_-_G1.crt -> /opt/freeware/etc/ssl/certs/emSign_Root_CA_-_G1.crt
lrwxrwxrwx    1 root     system           63 Aug 09 2021  objsign-ca-bundle.pem -> /opt/freeware/etc/ssl/certs/extracted/pem/objsign-ca-bundle.pem
lrwxrwxrwx    1 root     system           59 Aug 09 2021  thawte_Primary_Root_CA_-_G3.crt -> /opt/freeware/etc/ssl/certs/thawte_Primary_Root_CA_-_G3.crt
lrwxrwxrwx    1 root     system           59 Aug 09 2021  thawte_Primary_Root_CA_-_G2.crt -> /opt/freeware/etc/ssl/certs/thawte_Primary_Root_CA_-_G2.crt
lrwxrwxrwx    1 root     system           54 Aug 09 2021  thawte_Primary_Root_CA.crt -> /opt/freeware/etc/ssl/certs/thawte_Primary_Root_CA.crt
lrwxrwxrwx    1 root     system           59 Aug 09 2021  tls-ca-bundle.pem -> /opt/freeware/etc/ssl/certs/extracted/pem/tls-ca-bundle.pem
lrwxrwxrwx    1 root     system           13 Aug 09 2021  a94d09e5.0 -> ACCVRAIZ1.crt
lrwxrwxrwx    1 root     system           20 Aug 09 2021  cd8c0d63.0 -> AC_RAIZ_FNMT-RCM.crt
lrwxrwxrwx    1 root     system           34 Aug 09 2021  930ac5d2.0 -> Actalis_Authentication_Root_CA.crt
lrwxrwxrwx    1 root     system           26 Aug 09 2021  157753a5.0 -> AddTrust_External_Root.crt
lrwxrwxrwx    1 root     system           26 Aug 09 2021  2b349938.0 -> AffirmTrust_Commercial.crt
lrwxrwxrwx    1 root     system           26 Aug 09 2021  93bc0acc.0 -> AffirmTrust_Networking.crt
lrwxrwxrwx    1 root     system           23 Aug 09 2021  b727005e.0 -> AffirmTrust_Premium.crt
lrwxrwxrwx    1 root     system           27 Aug 09 2021  9c8dfbd4.0 -> AffirmTrust_Premium_ECC.crt
lrwxrwxrwx    1 root     system           20 Aug 09 2021  ce5e74ef.0 -> Amazon_Root_CA_1.crt
lrwxrwxrwx    1 root     system           20 Aug 09 2021  6d41d539.0 -> Amazon_Root_CA_2.crt
lrwxrwxrwx    1 root     system           20 Aug 09 2021  8cb5ee0f.0 -> Amazon_Root_CA_3.crt
lrwxrwxrwx    1 root     system           20 Aug 09 2021  de6d66f3.0 -> Amazon_Root_CA_4.crt
lrwxrwxrwx    1 root     system           25 Aug 09 2021  e36a6752.0 -> Atos_TrustedRoot_2011.crt
lrwxrwxrwx    1 root     system           61 Aug 09 2021  3bde41ac.0 -> Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt
lrwxrwxrwx    1 root     system           29 Aug 09 2021  653b494a.0 -> Baltimore_CyberTrust_Root.crt
lrwxrwxrwx    1 root     system           27 Aug 09 2021  54657681.0 -> Buypass_Class_2_Root_CA.crt
lrwxrwxrwx    1 root     system           27 Aug 09 2021  e8de2f56.0 -> Buypass_Class_3_Root_CA.crt
lrwxrwxrwx    1 root     system           20 Aug 09 2021  2ae6433e.0 -> CA_Disig_Root_R2.crt
lrwxrwxrwx    1 root     system           16 Aug 09 2021  0b1b94ef.0 -> CFCA_EV_ROOT.crt
lrwxrwxrwx    1 root     system           34 Aug 09 2021  40547a79.0 -> COMODO_Certification_Authority.crt
lrwxrwxrwx    1 root     system           38 Aug 09 2021  eed8c118.0 -> COMODO_ECC_Certification_Authority.crt
lrwxrwxrwx    1 root     system           38 Aug 09 2021  d6325660.0 -> COMODO_RSA_Certification_Authority.crt
lrwxrwxrwx    1 root     system           12 Aug 09 2021  e113c810.0 -> Certigna.crt
lrwxrwxrwx    1 root     system           20 Aug 09 2021  f51bb24c.0 -> Certigna_Root_CA.crt
lrwxrwxrwx    1 root     system           29 Aug 09 2021  48bec511.0 -> Certum_Trusted_Network_CA.crt
lrwxrwxrwx    1 root     system           31 Aug 09 2021  40193066.0 -> Certum_Trusted_Network_CA_2.crt
lrwxrwxrwx    1 root     system           36 Aug 09 2021  c47d9980.0 -> Chambers_of_Commerce_Root_-_2008.crt
lrwxrwxrwx    1 root     system           28 Aug 09 2021  ee64a828.0 -> Comodo_AAA_Services_root.crt
lrwxrwxrwx    1 root     system           26 Aug 09 2021  76cb8f92.0 -> Cybertrust_Global_Root.crt
lrwxrwxrwx    1 root     system           34 Aug 09 2021  c28a8a30.0 -> D-TRUST_Root_Class_3_CA_2_2009.crt
lrwxrwxrwx    1 root     system           37 Aug 09 2021  d4dae3dd.0 -> D-TRUST_Root_Class_3_CA_2_EV_2009.crt
lrwxrwxrwx    1 root     system           18 Aug 09 2021  2e5ac55d.0 -> DST_Root_CA_X3.crt
lrwxrwxrwx    1 root     system           31 Aug 09 2021  b1159c4c.0 -> DigiCert_Assured_ID_Root_CA.crt
lrwxrwxrwx    1 root     system           31 Aug 09 2021  9d04f354.0 -> DigiCert_Assured_ID_Root_G2.crt
lrwxrwxrwx    1 root     system           31 Aug 09 2021  7f3d5d1d.0 -> DigiCert_Assured_ID_Root_G3.crt
lrwxrwxrwx    1 root     system           27 Aug 09 2021  3513523f.0 -> DigiCert_Global_Root_CA.crt
lrwxrwxrwx    1 root     system           27 Aug 09 2021  607986c7.0 -> DigiCert_Global_Root_G2.crt
lrwxrwxrwx    1 root     system           27 Aug 09 2021  dd8e9d41.0 -> DigiCert_Global_Root_G3.crt
lrwxrwxrwx    1 root     system           38 Aug 09 2021  244b5494.0 -> DigiCert_High_Assurance_EV_Root_CA.crt
lrwxrwxrwx    1 root     system           28 Aug 09 2021  75d1b2ed.0 -> DigiCert_Trusted_Root_G4.crt
lrwxrwxrwx    1 root     system           35 Aug 09 2021  5273a94c.0 -> E-Tugra_Certification_Authority.crt
lrwxrwxrwx    1 root     system           10 Aug 09 2021  349f2832.0 -> EC-ACC.crt
lrwxrwxrwx    1 root     system           35 Aug 09 2021  128805a3.0 -> EE_Certification_Centre_Root_CA.crt
lrwxrwxrwx    1 root     system           45 Aug 09 2021  aee5f10d.0 -> Entrust.net_Premium_2048_Secure_Server_CA.crt
lrwxrwxrwx    1 root     system           40 Aug 09 2021  6b99d060.0 -> Entrust_Root_Certification_Authority.crt
lrwxrwxrwx    1 root     system           46 Aug 09 2021  106f3e4d.0 -> Entrust_Root_Certification_Authority_-_EC1.crt
lrwxrwxrwx    1 root     system           45 Aug 09 2021  02265526.0 -> Entrust_Root_Certification_Authority_-_G2.crt
lrwxrwxrwx    1 root     system           45 Aug 09 2021  5e98733a.0 -> Entrust_Root_Certification_Authority_-_G4.crt
lrwxrwxrwx    1 root     system           26 Aug 09 2021  0f6fa695.0 -> GDCA_TrustAUTH_R5_ROOT.crt
lrwxrwxrwx    1 root     system           15 Aug 09 2021  1001acf7.0 -> GTS_Root_R1.crt
lrwxrwxrwx    1 root     system           15 Aug 09 2021  626dceaf.0 -> GTS_Root_R2.crt
lrwxrwxrwx    1 root     system           15 Aug 09 2021  0a775a30.0 -> GTS_Root_R3.crt
lrwxrwxrwx    1 root     system           15 Aug 09 2021  a3418fda.0 -> GTS_Root_R4.crt
lrwxrwxrwx    1 root     system           22 Aug 09 2021  2c543cd1.0 -> GeoTrust_Global_CA.crt
lrwxrwxrwx    1 root     system           44 Aug 09 2021  480720ec.0 -> GeoTrust_Primary_Certification_Authority.crt
lrwxrwxrwx    1 root     system           49 Aug 09 2021  116bf586.0 -> GeoTrust_Primary_Certification_Authority_-_G2.crt
lrwxrwxrwx    1 root     system           49 Aug 09 2021  e2799e36.0 -> GeoTrust_Primary_Certification_Authority_-_G3.crt
lrwxrwxrwx    1 root     system           25 Aug 09 2021  ad088e1d.0 -> GeoTrust_Universal_CA.crt
lrwxrwxrwx    1 root     system           27 Aug 09 2021  8867006a.0 -> GeoTrust_Universal_CA_2.crt
lrwxrwxrwx    1 root     system           31 Aug 09 2021  b0e59380.0 -> GlobalSign_ECC_Root_CA_-_R4.crt
lrwxrwxrwx    1 root     system           31 Aug 09 2021  1d3472b9.0 -> GlobalSign_ECC_Root_CA_-_R5.crt
lrwxrwxrwx    1 root     system           22 Aug 09 2021  5ad8a5d6.0 -> GlobalSign_Root_CA.crt
lrwxrwxrwx    1 root     system           27 Aug 09 2021  4a6481c9.0 -> GlobalSign_Root_CA_-_R2.crt
lrwxrwxrwx    1 root     system           27 Aug 09 2021  062cdee6.0 -> GlobalSign_Root_CA_-_R3.crt
lrwxrwxrwx    1 root     system           27 Aug 09 2021  dc4d6a89.0 -> GlobalSign_Root_CA_-_R6.crt
lrwxrwxrwx    1 root     system           34 Aug 09 2021  0c4c9b6c.0 -> Global_Chambersign_Root_-_2008.crt
lrwxrwxrwx    1 root     system           23 Aug 09 2021  f081611a.0 -> Go_Daddy_Class_2_CA.crt
lrwxrwxrwx    1 root     system           44 Aug 09 2021  cbf06781.0 -> Go_Daddy_Root_Certificate_Authority_-_G2.crt
lrwxrwxrwx    1 root     system           63 Aug 09 2021  7719f463.0 -> Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt
lrwxrwxrwx    1 root     system           59 Aug 09 2021  1636090b.0 -> Hellenic_Academic_and_Research_Institutions_RootCA_2011.crt
lrwxrwxrwx    1 root     system           59 Aug 09 2021  32888f65.0 -> Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt
lrwxrwxrwx    1 root     system           27 Aug 09 2021  3e45d192.0 -> Hongkong_Post_Root_CA_1.crt
lrwxrwxrwx    1 root     system           27 Aug 09 2021  68dd7389.0 -> Hongkong_Post_Root_CA_3.crt
lrwxrwxrwx    1 root     system           16 Aug 09 2021  4042bcee.0 -> ISRG_Root_X1.crt
lrwxrwxrwx    1 root     system           34 Aug 09 2021  ef954a4e.0 -> IdenTrust_Commercial_Root_CA_1.crt
lrwxrwxrwx    1 root     system           37 Aug 09 2021  1e08bfd1.0 -> IdenTrust_Public_Sector_Root_CA_1.crt
lrwxrwxrwx    1 root     system           14 Aug 09 2021  cc450945.0 -> Izenpe.com.crt
lrwxrwxrwx    1 root     system           26 Aug 09 2021  def36a68.0 -> LuxTrust_Global_Root_2.crt
lrwxrwxrwx    1 root     system           34 Aug 09 2021  8160b96c.0 -> Microsec_e-Szigno_Root_CA_2009.crt
lrwxrwxrwx    1 root     system           48 Aug 09 2021  988a38cb.0 -> NetLock_Arany_=Class_Gold=_Főtanúsítvány.crt
lrwxrwxrwx    1 root     system           43 Aug 09 2021  4304c5e5.0 -> Network_Solutions_Certificate_Authority.crt
lrwxrwxrwx    1 root     system           35 Aug 09 2021  b1b8a7f3.0 -> OISTE_WISeKey_Global_Root_GA_CA.crt
lrwxrwxrwx    1 root     system           35 Aug 09 2021  e73d606e.0 -> OISTE_WISeKey_Global_Root_GB_CA.crt
lrwxrwxrwx    1 root     system           35 Aug 09 2021  773e07ad.0 -> OISTE_WISeKey_Global_Root_GC_CA.crt
lrwxrwxrwx    1 root     system           20 Aug 09 2021  080911ac.0 -> QuoVadis_Root_CA.crt
lrwxrwxrwx    1 root     system           25 Aug 09 2021  749e9e03.0 -> QuoVadis_Root_CA_1_G3.crt
lrwxrwxrwx    1 root     system           22 Aug 09 2021  d7e8dc79.0 -> QuoVadis_Root_CA_2.crt
lrwxrwxrwx    1 root     system           25 Aug 09 2021  064e0aa9.0 -> QuoVadis_Root_CA_2_G3.crt
lrwxrwxrwx    1 root     system           22 Aug 09 2021  76faf6c0.0 -> QuoVadis_Root_CA_3.crt
lrwxrwxrwx    1 root     system           25 Aug 09 2021  e18bfb83.0 -> QuoVadis_Root_CA_3_G3.crt
lrwxrwxrwx    1 root     system           47 Aug 09 2021  f0c70a8d.0 -> SSL.com_EV_Root_Certification_Authority_ECC.crt
lrwxrwxrwx    1 root     system           50 Aug 09 2021  06dc52d5.0 -> SSL.com_EV_Root_Certification_Authority_RSA_R2.crt
lrwxrwxrwx    1 root     system           44 Aug 09 2021  0bf05006.0 -> SSL.com_Root_Certification_Authority_ECC.crt
lrwxrwxrwx    1 root     system           44 Aug 09 2021  6fa5da56.0 -> SSL.com_Root_Certification_Authority_RSA.crt
lrwxrwxrwx    1 root     system           19 Aug 09 2021  fe8a2cd8.0 -> SZAFIR_ROOT_CA2.crt
lrwxrwxrwx    1 root     system           23 Aug 09 2021  18856ac4.0 -> SecureSign_RootCA11.crt
lrwxrwxrwx    1 root     system           18 Aug 09 2021  f39fc864.0 -> SecureTrust_CA.crt
lrwxrwxrwx    1 root     system           20 Aug 09 2021  b66938e9.0 -> Secure_Global_CA.crt
lrwxrwxrwx    1 root     system           34 Aug 09 2021  cd58d51e.0 -> Security_Communication_RootCA2.crt
lrwxrwxrwx    1 root     system           34 Aug 09 2021  f3377b1b.0 -> Security_Communication_Root_CA.crt
lrwxrwxrwx    1 root     system           26 Aug 09 2021  9c2e7d30.0 -> Sonera_Class_2_Root_CA.crt
lrwxrwxrwx    1 root     system           36 Aug 09 2021  03179a64.0 -> Staat_der_Nederlanden_EV_Root_CA.crt
lrwxrwxrwx    1 root     system           38 Aug 09 2021  5c44d531.0 -> Staat_der_Nederlanden_Root_CA_-_G2.crt
lrwxrwxrwx    1 root     system           38 Aug 09 2021  5a4d6896.0 -> Staat_der_Nederlanden_Root_CA_-_G3.crt
lrwxrwxrwx    1 root     system           24 Aug 09 2021  f387163d.0 -> Starfield_Class_2_CA.crt
lrwxrwxrwx    1 root     system           45 Aug 09 2021  4bfab552.0 -> Starfield_Root_Certificate_Authority_-_G2.crt
lrwxrwxrwx    1 root     system           54 Aug 09 2021  09789157.0 -> Starfield_Services_Root_Certificate_Authority_-_G2.crt
lrwxrwxrwx    1 root     system           26 Aug 09 2021  4f316efb.0 -> SwissSign_Gold_CA_-_G2.crt
lrwxrwxrwx    1 root     system           28 Aug 09 2021  57bcb2da.0 -> SwissSign_Silver_CA_-_G2.crt
lrwxrwxrwx    1 root     system           32 Aug 09 2021  1e09d511.0 -> T-TeleSec_GlobalRoot_Class_2.crt
lrwxrwxrwx    1 root     system           32 Aug 09 2021  5443e9e3.0 -> T-TeleSec_GlobalRoot_Class_3.crt
lrwxrwxrwx    1 root     system           49 Aug 09 2021  ff34af3f.0 -> TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt
lrwxrwxrwx    1 root     system           23 Aug 09 2021  5f15c80c.0 -> TWCA_Global_Root_CA.crt
lrwxrwxrwx    1 root     system           37 Aug 09 2021  b7a5b843.0 -> TWCA_Root_Certification_Authority.crt
lrwxrwxrwx    1 root     system           15 Aug 09 2021  6410666e.0 -> Taiwan_GRCA.crt
lrwxrwxrwx    1 root     system           26 Aug 09 2021  5cd81ad7.0 -> TeliaSonera_Root_CA_v1.crt
lrwxrwxrwx    1 root     system           18 Aug 09 2021  7aaf71c0.0 -> TrustCor_ECA-1.crt
lrwxrwxrwx    1 root     system           26 Aug 09 2021  5d3033c5.0 -> TrustCor_RootCert_CA-1.crt
lrwxrwxrwx    1 root     system           26 Aug 09 2021  3e44d2f7.0 -> TrustCor_RootCert_CA-2.crt
lrwxrwxrwx    1 root     system           23 Aug 09 2021  d853d49e.0 -> Trustis_FPS_Root_CA.crt
lrwxrwxrwx    1 root     system           32 Aug 09 2021  0f5dc4f3.0 -> UCA_Extended_Validation_Root.crt
lrwxrwxrwx    1 root     system           22 Aug 09 2021  c01eb047.0 -> UCA_Global_G2_Root.crt
lrwxrwxrwx    1 root     system           41 Aug 09 2021  f30dd6ad.0 -> USERTrust_ECC_Certification_Authority.crt
lrwxrwxrwx    1 root     system           41 Aug 09 2021  fc5a8f99.0 -> USERTrust_RSA_Certification_Authority.crt
lrwxrwxrwx    1 root     system           64 Aug 09 2021  7d0b38bd.0 -> VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.crt
lrwxrwxrwx    1 root     system           64 Aug 09 2021  b204d74a.0 -> VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.crt
lrwxrwxrwx    1 root     system           51 Aug 09 2021  c01cdfa2.0 -> VeriSign_Universal_Root_Certification_Authority.crt
lrwxrwxrwx    1 root     system           64 Aug 09 2021  c0ff1f52.0 -> Verisign_Class_3_Public_Primary_Certification_Authority_-_G3.crt
lrwxrwxrwx    1 root     system           24 Aug 09 2021  706f604c.0 -> XRamp_Global_CA_Root.crt
lrwxrwxrwx    1 root     system           20 Aug 09 2021  8d86cdd1.0 -> certSIGN_ROOT_CA.crt
lrwxrwxrwx    1 root     system           37 Aug 09 2021  ca6e4ad9.0 -> ePKI_Root_Certification_Authority.crt
lrwxrwxrwx    1 root     system           27 Aug 09 2021  4b718d9b.0 -> emSign_ECC_Root_CA_-_C3.crt
lrwxrwxrwx    1 root     system           27 Aug 09 2021  14bc7599.0 -> emSign_ECC_Root_CA_-_G3.crt
lrwxrwxrwx    1 root     system           23 Aug 09 2021  406c9bb1.0 -> emSign_Root_CA_-_C1.crt
lrwxrwxrwx    1 root     system           23 Aug 09 2021  2923b3f9.0 -> emSign_Root_CA_-_G1.crt
lrwxrwxrwx    1 root     system           26 Aug 09 2021  2e4eed3c.0 -> thawte_Primary_Root_CA.crt
lrwxrwxrwx    1 root     system           31 Aug 09 2021  c089bbbd.0 -> thawte_Primary_Root_CA_-_G2.crt
lrwxrwxrwx    1 root     system           31 Aug 09 2021  ba89ed3b.0 -> thawte_Primary_Root_CA_-_G3.crt
drwxr-xr-x    2 root     system        28672 Aug 09 2021  .
drwxr-xr-x    5 root     system          256 Jan 19 12:37 ..

    and this is how it looks like on a different machine after the upgrade:

    [die@HOST2:/home/USER]> ls -alrt /var/ssl
total 96
-rw-r--r--    1 root     system        11485 Oct 14 2020  openssl.cnf
drwxr-xr-x    2 root     system          256 Mar 11 16:43 misc
drwxr-xr-x   33 bin      bin            4096 May 08 10:13 ..
drwxr-xr-x    2 root     system        28672 May 13 12:46 certs.orig
lrwxrwxrwx    1 root     system           41 May 13 14:49 cert.pem -> /opt/freeware/etc/ssl/certs/ca-bundle.crt
drwxr-xr-x    2 root     system          256 May 13 14:49 64
lrwxrwxrwx    1 root     system           27 May 13 14:49 certs -> /opt/freeware/etc/ssl/certs
drwxr-xr-x    5 root     system          256 May 13 14:49 .
[die@HOST2:/home/USER]>

    Thanks,

    With kind regards,

    Stephan Dietl

    ​

    ------------------------------
    Stephan Dietl
    ------------------------------

    Original Message


  • 5.  RE: YUM unusable after ca-certificates upgrade to 2021.2.52-1, breaks chain of trust

    Posted Thu May 19, 2022 01:57 AM
    Edited by Emanuel Reisinger Thu May 19, 2022 01:57 AM
    Hi Stephan,

    see yum update - no longer can reach IBM.

    @IBM, please check ca-certificate.

    BR

    ------------------------------
    Emanuel Reisinger
    ------------------------------

    Original Message


  • 6.  RE: YUM unusable after ca-certificates upgrade to 2021.2.52-1, breaks chain of trust

    Posted Fri May 20, 2022 10:09 AM
    We are having the same problem when using dnf. Setting "sslverify=0" in the main section of /opt/freeware/etc/dnf/dnf.conf provides a workaround, but I think something is wrong with the ca-certificates-2021.2.52-1.ppc RPM.

    ------------------------------
    Robert Wood
    ------------------------------

    Original Message


  • 7.  RE: YUM unusable after ca-certificates upgrade to 2021.2.52-1, breaks chain of trust

    Posted Mon May 23, 2022 03:57 AM
    Edited by Philip Krab Mon May 23, 2022 04:01 AM
    IBM AIX: Import CA certificate steps 6 and 7 provide the solution. I'm afraid you have to follow this procedure every time you perform an update of ca-certificates. For our own convenience we have automated the procedure in Ansible.

    ------------------------------
    Philip Krab
    ------------------------------

    Original Message


  • 8.  RE: YUM unusable after ca-certificates upgrade to 2021.2.52-1, breaks chain of trust

    Posted Mon May 23, 2022 04:05 AM

    Hello @Philip Krab !

    Thanks for the pointer! Since I´m also using Ansible for my AIX environment --> would you please be so kind and share your playbook for this (anonymized where needed)?

    Many thanks in advance,

    With kind regards,

    Stephan Dietl​



    ------------------------------
    Stephan Dietl
    ------------------------------

    Original Message


  • 9.  RE: YUM unusable after ca-certificates upgrade to 2021.2.52-1, breaks chain of trust

    Posted Mon May 23, 2022 04:36 AM
    Edited by Stephan Dietl Mon May 23, 2022 04:37 AM

    Hello @Philip Krab !

    Just performed the steps in your link (after reinstalling the "faulty" ca-certificates to bring it to the state after the upgrade) and it doesn´t change anything:

    lrwxrwxrwx    1 root     system           19 May 23 10:25 a94d09e5.0 -> email-ca-bundle.pem
lrwxrwxrwx    1 root     system           58 May 23 10:31 HASH1.0 -> /opt/freeware/etc/ssl/certs/MY_COMPANY-RootCA.crt.pem
lrwxrwxrwx    1 root     system           62 May 23 10:31 HASH2.0 -> /opt/freeware/etc/ssl/certs/MY_COMPANY-IssuingCA1.crt.pem
drwxr-xr-x    3 root     system        20480 May 23 10:31 .

# /var/ssl/certs/ is a symlink to /opt/freeware/etc/ssl/certs/

[root@HOST1:/var/ssl/certs]> yum upgrade
Loaded plugins: allowdowngrade, changelog, filter-data, merge-conf, ps, versionlock
anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml:">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml: [Errno 14] curl#60 - "SSL certificate problem: self signed certificate in certificate chain"
Trying other mirror.
anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.2/repodata/repomd.xml:">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.2/repodata/repomd.xml: [Errno 14] curl#60 - "SSL certificate problem: self signed certificate in certificate chain"
Trying other mirror.
anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml:">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml: [Errno 14] curl#60 - "SSL certificate problem: self signed certificate in certificate chain"
Trying other mirror.
Skipping filters plugin, no data
Setting up Upgrade Process
No Packages marked for Update

    ​

    Also putting them under extracted/pem/ doesn´t help!

    Thanks for your information,

    With kind regards,

    ------------------------------
    Stephan Dietl
    ------------------------------

    Original Message


  • 10.  RE: YUM unusable after ca-certificates upgrade to 2021.2.52-1, breaks chain of trust

    Posted Mon May 23, 2022 04:50 AM

    Hello all!

    Here the comparison between the server which was not updated and one which was:

    Not updated:

    /opt/freeware/bin/curl -vvvvvv anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml
*   Trying 170.225.15.112:443...
* Connected to public.dhe.ibm.com (170.225.15.112) port 443 (#0)
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
* successfully set certificate verify locations:
*  CAfile: none
*  CApath: /var/ssl/certs/
* TLSv1.2 (OUT), TLS header, Certificate Status (22):
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* TLSv1.2 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-RSA-AES128-GCM-SHA256
* ALPN, server did not agree to a protocol
* Server certificate:
*  subject: C=US; ST=New York; L=Armonk; O=International Business Machines Corporation; CN=public.dhe.ibm.com
*  start date: Mar  7 00:00:00 2022 GMT
*  expire date: Mar  7 23:59:59 2023 GMT
*  subjectAltName: host "public.dhe.ibm.com" matched cert's "public.dhe.ibm.com"
*  issuer: C=US; O=DigiCert Inc; CN=DigiCert TLS RSA SHA256 2020 CA1
*  SSL certificate verify ok.
* Server auth using Basic with user 'anonymous'
> GET /aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml HTTP/1.1
> Host: public.dhe.ibm.com
> Authorization: Basic YW5vbnltb3VzOmFub255bW91cw==
> User-Agent: curl/7.79.1
> Accept: */*
> 
* Mark bundle as not supporting multiuse
< HTTP/1.1 200 OK
< Date: Mon, 23 May 2022 08:44:11 GMT
< Last-Modified: Fri, 06 May 2022 13:03:30 GMT
< ETag: "4a4a7-a98-5de577c26ec80"
< Accept-Ranges: bytes
< Content-Length: 2712
< Strict-Transport-Security: max-age=31536000
< Content-Type: application/xml
< 
<?xml version="1.0" encoding="UTF-8"?>
<repomd xmlns="http://linux.duke.edu/metadata/repo" xmlns:rpm="http://linux.duke.edu/metadata/rpm">
  <revision>1651840271</revision>

    Updated server (where I performed the CA import as described by  @Philip Krab ):

    curl -vvvvvv anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml
*   Trying 170.225.15.112:443...
* Connected to public.dhe.ibm.com (170.225.15.112) port 443 (#0)
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
* successfully set certificate verify locations:
*  CAfile: none
*  CApath: /var/ssl/certs/
* TLSv1.2 (OUT), TLS header, Certificate Status (22):
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* TLSv1.2 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (OUT), TLS alert, unknown CA (560):
* SSL certificate problem: self signed certificate in certificate chain
* Closing connection 0
curl: (60) SSL certificate problem: self signed certificate in certificate chain
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

    Since I never had to put any pem files from our company into /var/ssl/certs it seems that the fix has to come from @Rishita Saha !

    "ca-certificates-2021.2.52-1.ppc installed
    * Thu Nov 4 13:00:00 2021 Rishita Saha <risaha16@in.ibm.com> - 2021.2.52-1
    - Update to latest version"

    ​

    Thanks,

    With kind regards,​



    ------------------------------
    Stephan Dietl
    ------------------------------

    Original Message


  • 11.  RE: YUM unusable after ca-certificates upgrade to 2021.2.52-1, breaks chain of trust

    Posted Mon May 23, 2022 05:12 AM
    Edited by Stephan Dietl Mon May 23, 2022 05:20 AM
    Hello!

    FIX for USERS (package ca-certificates still needs to be corrected!):

    Since finding out via openssl and curl that IBM servers use the DigiCert certificates and seeing that the update wiped / didn´t create the appropriate .0 files I just, for testing purposes, recreated only those:

    1193    openssl s_client -showcerts -connect public.dhe.ibm.com:443 -tls1_2
1194    ls -alrt *Digi*
1198    ls -alrt /opt/freeware/etc/ssl/certs/DigiCert_Global_Root_G2.crt
1199    openssl x509 -noout -hash -in  /opt/freeware/etc/ssl/certs/DigiCert_Global_Root_G2.crt
1200    openssl x509 -noout -hash -in  /opt/freeware/etc/ssl/certs/DigiCert_Global_Root_CA.crt
1201    ln -s  /opt/freeware/etc/ssl/certs/DigiCert_Global_Root_CA.crt 3513523f.0
1203    ln -s /opt/freeware/etc/ssl/certs/DigiCert_Global_Root_G2.crt 607986c7.0
1204    ls -alrt /opt/freeware/etc/ssl/certs/DigiCert_Global_Root_G2.crt
1206    openssl x509 -noout -hash -in /opt/freeware/etc/ssl/certs/DigiCert_Global_Root_G3.crt
1207    ln -s  /opt/freeware/etc/ssl/certs/DigiCert_Global_Root_G3.crt dd8e9d41.0
1208    openssl x509 -noout -hash -in /opt/freeware/etc/ssl/certs/DigiCert_High_Assurance_EV_Root_CA.crt
1209    ln -s  /opt/freeware/etc/ssl/certs/DigiCert_High_Assurance_EV_Root_CA.crt 244b5494.0
1210    openssl x509 -noout -hash -in /opt/freeware/etc/ssl/certs/DigiCert_Trusted_Root_G4.crt
1211    ln -s  /opt/freeware/etc/ssl/certs/DigiCert_Trusted_Root_G4.crt 75d1b2ed.0
1213    ls -alrt  /opt/freeware/etc/ssl/certs/*Digi*
1214    openssl x509 -noout -hash -in /opt/freeware/etc/ssl/certs/DigiCert_Assured_ID_Root_G3.crt
1215    ln -s  /opt/freeware/etc/ssl/certs/DigiCert_Assured_ID_Root_G3.crt 7f3d5d1d.0
1216    openssl x509 -noout -hash -in /opt/freeware/etc/ssl/certs/DigiCert_Assured_ID_Root_G2.crt
1217    ln -s  /opt/freeware/etc/ssl/certs/DigiCert_Assured_ID_Root_G2.crt 9d04f354.0
1218    openssl x509 -noout -hash -in /opt/freeware/etc/ssl/certs/DigiCert_Assured_ID_Root_CA.crt
1219    ln -s  /opt/freeware/etc/ssl/certs/DigiCert_Assured_ID_Root_CA.crt b1159c4c.0
1220    vi /opt/freeware/etc/yum/yum.conf # sslverify=false removed
1221    yum upgrade # works
1222    yum clean all
1223    yum upgrade # works
1224    yum install zsh # just to test, works!
​

    ​

    So I think another workaround is to use the ansible job by @Philip Krab (Thanks a lot!) or to manually create the hashes and symlinks and it should be ok again.

    # TEST on SECOND BROKEN HOST:

    for i in $(find /var/ssl/certs/ -type f -name "*.crt"|grep -v extracted)
    do
    ln -s $i `openssl x509 -noout -hash -in $i`.0
    done

    --> yum works again!

    But still this needs to be done by the post task of the upgrade of ca-certificates and to re-iterate --> it had a problem with the chain of IBM servers not my proxy environment!

    ​

    Please fix the ca-certifcates package,

    Thanks to everyone helping,

    With kind regards,



    ------------------------------
    Stephan Dietl
    ------------------------------

    Original Message


  • 12.  RE: YUM unusable after ca-certificates upgrade to 2021.2.52-1, breaks chain of trust

    Posted Tue May 24, 2022 03:32 AM
    Isn't that what /usr/bin/c_rehash is for ?

    ------------------------------
    Henk Wiedig
    ------------------------------

    Original Message


  • 13.  RE: YUM unusable after ca-certificates upgrade to 2021.2.52-1, breaks chain of trust

    Posted Tue May 24, 2022 04:00 AM

    Hello @Henk Wiedig !

    Good point, it seems​ that in this case it wasn´t triggered in the post-install?

    I never had to manually use it before and therefore was unsure if it was the right response to the situation presented...

    A new installation of an AIX 7.2 machine worked fine by directly going from ca-certificates-2016.10.7-2 (haven´t moved to dnf yet) to the new ca-certificates, so it seems an issue in the upgrade process from *-2020.* to the new one?

    ---> Package ca-certificates.ppc 0:2016.10.7-2 will be updated
---> Package ca-certificates.ppc 0:2021.2.52-1 will be an update
...
^M  Cleanup    : readline-6.1-2.ppc                                         61/62 
^M  Cleanup    : ca-certificates-2016.10.7-2.ppc                            62/62 
warning: file /opt/freeware/etc/ssl/certs/thawte_Primary_Root_CA_-_G3.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/thawte_Primary_Root_CA_-_G2.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/thawte_Primary_Root_CA.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/WoSign_China.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/WoSign.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/WellsSecure_Public_Root_Certificate_Authority.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Visa_eCommerce_Root.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Verisign_Class_3_Public_Primary_Certification_Authority_-_G3.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Verisign_Class_3_Public_Primary_Certification_Authority.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Verisign_Class_2_Public_Primary_Certification_Authority_-_G3.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Verisign_Class_2_Public_Primary_Certification_Authority_-_G2.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Verisign_Class_1_Public_Primary_Certification_Authority_-_G3.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Verisign_Class_1_Public_Primary_Certification_Authority.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/VeriSign_Universal_Root_Certification_Authority.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/UTN_USERFirst_Hardware_Root_CA.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/UTN_USERFirst_Email_Root_CA.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Trustis_FPS_Root_CA.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Taiwan_GRCA.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/TURKTRUST_Elektronik_Sertifika_Hizmet_Saglaycs_H6.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/TURKTRUST_Elektronik_Sertifika_Hizmet_Saglaycs_H5.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/TURKTRUST_Certificate_Services_Provider_Root_2007.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/TUBITAK_UEKAE_Kok_Sertifika_Hizmet_Saglaycs_-_Surum_3.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/TC_TrustCenter_Class_3_CA_II.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Swisscom_Root_EV_CA_2.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Swisscom_Root_CA_2.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Swisscom_Root_CA_1.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/SwissSign_Platinum_CA_-_G2.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/StartCom_Certification_Authority_G2.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/StartCom_Certification_Authority_2.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/StartCom_Certification_Authority.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Staat_der_Nederlanden_Root_CA_-_G3.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Staat_der_Nederlanden_Root_CA_-_G2.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Sonera_Class_2_Root_CA.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Security_Communication_EV_RootCA1.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/S-TRUST_Universal_Root_CA.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Root_CA_Generalitat_Valenciana.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/RSA_Security_2048_v3.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/QuoVadis_Root_CA.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/PSCProcert.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/OpenTrust_Root_CA_G3.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/OpenTrust_Root_CA_G2.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/OpenTrust_Root_CA_G1.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/OISTE_WISeKey_Global_Root_GA_CA.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Microsec_e-Szigno_Root_CA.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Juur-SK.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/IGC_A.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Global_Chambersign_Root_-_2008.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/GeoTrust_Universal_CA_2.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/GeoTrust_Universal_CA.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/GeoTrust_Primary_Certification_Authority_-_G3.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/GeoTrust_Primary_Certification_Authority_-_G2.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/GeoTrust_Primary_Certification_Authority.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/GeoTrust_Global_CA_2.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/GeoTrust_Global_CA.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Equifax_Secure_eBusiness_CA_1.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Equifax_Secure_Global_eBusiness_CA.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Equifax_Secure_CA.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/EE_Certification_Centre_Root_CA.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/EBG_Elektronik_Sertifika_Hizmet_Saglaycs.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Deutsche_Telekom_Root_CA_2.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/DST_ACES_CA_X6.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Comodo_Trusted_Services_root.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Comodo_Secure_Services_root.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/ComSign_CA.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/China_Internet_Network_Information_Center_EV_Certificates_Root.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Chambers_of_Commerce_Root_-_2008.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Certum_Root_CA.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Certplus_Root_CA_G2.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Certplus_Root_CA_G1.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Certplus_Class_2_Primary_CA.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Certinomis_-_Root_CA.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Certinomis_-_Autorite_Racine.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Certification_Authority_of_WoSign_G2.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Camerfirma_Global_Chambersign_Root.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Camerfirma_Chambers_of_Commerce_Root.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/CNNIC_ROOT.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/CA_WoSign_ECC_Root.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/CA_Disig_Root_R1.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/Buypass_Class_2_CA_1.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/ApplicationCA_-_Japanese_Government.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/AddTrust_Qualified_Certificates_Root.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/AddTrust_Public_Services_Root.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/AddTrust_Low-Value_Services_Root.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/AddTrust_External_Root.crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/AC_Raiz_Certicamara_S.A..crt: remove failed: A file or directory in the path name does not exist.
warning: file /opt/freeware/etc/ssl/certs/ACEDICOM_Root.crt: remove failed: A file or directory in the path name does not exist."

    But still the hashes are created correctly...

    Thanks for the pointer to c_rehash, I´ll look into it!

    With kind regards,



    ------------------------------
    Stephan Dietl
    ------------------------------

    Original Message


  • 14.  RE: YUM unusable after ca-certificates upgrade to 2021.2.52-1, breaks chain of trust

    Posted Wed May 25, 2022 03:35 AM

    Hello @Henk Wiedig !

    I´ve now tested it on a machine which is in decommission and it seems that /usr/bin/c_rehash is the culprit. At first there are the *.0 files which I created via my repair job, after calling the c_rehash they are gone and yum breaks...:

    [root@HOST:/]> ls -alrt /var/ssl/certs/
total 1104
-rw-r--r--    1 root     system           98 Nov 04 2021  README
-rw-r--r--    1 root     system         1302 Nov 04 2021  emSign_Root_CA_-_G1.crt
-rw-r--r--    1 root     system         1257 Nov 04 2021  emSign_Root_CA_-_C1.crt
-rw-r--r--    1 root     system          859 Nov 04 2021  emSign_ECC_Root_CA_-_G3.crt
-rw-r--r--    1 root     system          814 Nov 04 2021  emSign_ECC_Root_CA_-_C3.crt
-rw-r--r--    1 root     system         2033 Nov 04 2021  ePKI_Root_Certification_Authority.crt
-rw-r--r--    1 root     system          843 Nov 04 2021  e-Szigno_Root_CA_2017.crt
-rw-r--r--    1 root     system         1891 Nov 04 2021  certSIGN_Root_CA_G2.crt
-rw-r--r--    1 root     system         1176 Nov 04 2021  certSIGN_ROOT_CA.crt
-rw-r--r--    1 root     system         1513 Nov 04 2021  XRamp_Global_CA_Root.crt
-rw-r--r--    1 root     system         2094 Nov 04 2021  USERTrust_RSA_Certification_Authority.crt
-rw-r--r--    1 root     system          948 Nov 04 2021  USERTrust_ECC_Certification_Authority.crt
-rw-r--r--    1 root     system         1891 Nov 04 2021  UCA_Global_G2_Root.crt
-rw-r--r--    1 root     system         1915 Nov 04 2021  UCA_Extended_Validation_Root.crt
-rw-r--r--    1 root     system         2037 Nov 04 2021  TunTrust_Root_CA.crt
-rw-r--r--    1 root     system          969 Nov 04 2021  Trustwave_Global_ECC_P384_Certification_Authority.crt
-rw-r--r--    1 root     system          883 Nov 04 2021  Trustwave_Global_ECC_P256_Certification_Authority.crt
-rw-r--r--    1 root     system         2090 Nov 04 2021  Trustwave_Global_Certification_Authority.crt
-rw-r--r--    1 root     system         2204 Nov 04 2021  TrustCor_RootCert_CA-2.crt
-rw-r--r--    1 root     system         1513 Nov 04 2021  TrustCor_RootCert_CA-1.crt
-rw-r--r--    1 root     system         1493 Nov 04 2021  TrustCor_ECA-1.crt
-rw-r--r--    1 root     system         1870 Nov 04 2021  TeliaSonera_Root_CA_v1.crt
-rw-r--r--    1 root     system         1269 Nov 04 2021  TWCA_Root_Certification_Authority.crt
-rw-r--r--    1 root     system         1883 Nov 04 2021  TWCA_Global_Root_CA.crt
-rw-r--r--    1 root     system         1582 Nov 04 2021  TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt
-rw-r--r--    1 root     system         1367 Nov 04 2021  T-TeleSec_GlobalRoot_Class_3.crt
-rw-r--r--    1 root     system         1367 Nov 04 2021  T-TeleSec_GlobalRoot_Class_2.crt
-rw-r--r--    1 root     system         2049 Nov 04 2021  SwissSign_Silver_CA_-_G2.crt
-rw-r--r--    1 root     system         2045 Nov 04 2021  SwissSign_Gold_CA_-_G2.crt
-rw-r--r--    1 root     system         1424 Nov 04 2021  Starfield_Services_Root_Certificate_Authority_-_G2.crt
-rw-r--r--    1 root     system         1399 Nov 04 2021  Starfield_Root_Certificate_Authority_-_G2.crt
-rw-r--r--    1 root     system         1468 Nov 04 2021  Starfield_Class_2_CA.crt
-rw-r--r--    1 root     system         1948 Nov 04 2021  Staat_der_Nederlanden_EV_Root_CA.crt
-rw-r--r--    1 root     system         1224 Nov 04 2021  Security_Communication_Root_CA.crt
-rw-r--r--    1 root     system         1261 Nov 04 2021  Security_Communication_RootCA2.crt
-rw-r--r--    1 root     system         1354 Nov 04 2021  Secure_Global_CA.crt
-rw-r--r--    1 root     system         1350 Nov 04 2021  SecureTrust_CA.crt
-rw-r--r--    1 root     system         1249 Nov 04 2021  SecureSign_RootCA11.crt
-rw-r--r--    1 root     system         1257 Nov 04 2021  SZAFIR_ROOT_CA2.crt
-rw-r--r--    1 root     system         2094 Nov 04 2021  SSL.com_Root_Certification_Authority_RSA.crt
-rw-r--r--    1 root     system          944 Nov 04 2021  SSL.com_Root_Certification_Authority_ECC.crt
-rw-r--r--    1 root     system         2114 Nov 04 2021  SSL.com_EV_Root_Certification_Authority_RSA_R2.crt
-rw-r--r--    1 root     system          956 Nov 04 2021  SSL.com_EV_Root_Certification_Authority_ECC.crt
-rw-r--r--    1 root     system         1923 Nov 04 2021  QuoVadis_Root_CA_3_G3.crt
-rw-r--r--    1 root     system         2354 Nov 04 2021  QuoVadis_Root_CA_3.crt
-rw-r--r--    1 root     system         1923 Nov 04 2021  QuoVadis_Root_CA_2_G3.crt
-rw-r--r--    1 root     system         2041 Nov 04 2021  QuoVadis_Root_CA_2.crt
-rw-r--r--    1 root     system         1923 Nov 04 2021  QuoVadis_Root_CA_1_G3.crt
-rw-r--r--    1 root     system          895 Nov 04 2021  OISTE_WISeKey_Global_Root_GC_CA.crt
-rw-r--r--    1 root     system         1346 Nov 04 2021  OISTE_WISeKey_Global_Root_GB_CA.crt
-rw-r--r--    1 root     system         1411 Nov 04 2021  Network_Solutions_Certificate_Authority.crt
-rw-r--r--    1 root     system         1476 Nov 04 2021  NetLock_Arany_=Class_Gold=_Fotanusitvany.crt
-rw-r--r--    1 root     system         2013 Nov 04 2021  NAVER_Global_Root_Certification_Authority.crt
-rw-r--r--    1 root     system         2021 Nov 04 2021  Microsoft_RSA_Root_Certificate_Authority_2017.crt
-rw-r--r--    1 root     system          875 Nov 04 2021  Microsoft_ECC_Root_Certificate_Authority_2017.crt
-rw-r--r--    1 root     system         1460 Nov 04 2021  Microsec_e-Szigno_Root_CA_2009.crt
-rw-r--r--    1 root     system         2122 Nov 04 2021  Izenpe.com.crt
-rw-r--r--    1 root     system         1931 Nov 04 2021  IdenTrust_Public_Sector_Root_CA_1.crt
-rw-r--r--    1 root     system         1923 Nov 04 2021  IdenTrust_Commercial_Root_CA_1.crt
-rw-r--r--    1 root     system         1939 Nov 04 2021  ISRG_Root_X1.crt
-rw-r--r--    1 root     system         2074 Nov 04 2021  Hongkong_Post_Root_CA_3.crt
-rw-r--r--    1 root     system         1168 Nov 04 2021  Hongkong_Post_Root_CA_1.crt
-rw-r--r--    1 root     system         2155 Nov 04 2021  Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt
-rw-r--r--    1 root     system         1513 Nov 04 2021  Hellenic_Academic_and_Research_Institutions_RootCA_2011.crt
-rw-r--r--    1 root     system         1017 Nov 04 2021  Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt
-rw-r--r--    1 root     system         2017 Nov 04 2021  HARICA_TLS_RSA_Root_CA_2021.crt
-rw-r--r--    1 root     system          867 Nov 04 2021  HARICA_TLS_ECC_Root_CA_2021.crt
-rw-r--r--    1 root     system         1367 Nov 04 2021  Go_Daddy_Root_Certificate_Authority_-_G2.crt
-rw-r--r--    1 root     system         1448 Nov 04 2021  Go_Daddy_Class_2_CA.crt
-rw-r--r--    1 root     system         1915 Nov 04 2021  GlobalSign_Root_R46.crt
-rw-r--r--    1 root     system          769 Nov 04 2021  GlobalSign_Root_E46.crt
-rw-r--r--    1 root     system         1972 Nov 04 2021  GlobalSign_Root_CA_-_R6.crt
-rw-r--r--    1 root     system         1229 Nov 04 2021  GlobalSign_Root_CA_-_R3.crt
-rw-r--r--    1 root     system         1354 Nov 04 2021  GlobalSign_Root_CA_-_R2.crt
-rw-r--r--    1 root     system         1261 Nov 04 2021  GlobalSign_Root_CA.crt
-rw-r--r--    1 root     system          794 Nov 04 2021  GlobalSign_ECC_Root_CA_-_R5.crt
-rw-r--r--    1 root     system          713 Nov 04 2021  GlobalSign_ECC_Root_CA_-_R4.crt
-rw-r--r--    1 root     system          769 Nov 04 2021  GTS_Root_R4.crt
-rw-r--r--    1 root     system          769 Nov 04 2021  GTS_Root_R3.crt
-rw-r--r--    1 root     system         1915 Nov 04 2021  GTS_Root_R2.crt
-rw-r--r--    1 root     system         1915 Nov 04 2021  GTS_Root_R1.crt
-rw-r--r--    1 root     system         1972 Nov 04 2021  GLOBALTRUST_2020.crt
-rw-r--r--    1 root     system         1980 Nov 04 2021  GDCA_TrustAUTH_R5_ROOT.crt
-rw-r--r--    1 root     system         2244 Nov 04 2021  Entrust_Root_Certification_Authority_-_G4.crt
-rw-r--r--    1 root     system         1533 Nov 04 2021  Entrust_Root_Certification_Authority_-_G2.crt
-rw-r--r--    1 root     system         1090 Nov 04 2021  Entrust_Root_Certification_Authority_-_EC1.crt
-rw-r--r--    1 root     system         1643 Nov 04 2021  Entrust_Root_Certification_Authority.crt
-rw-r--r--    1 root     system         1505 Nov 04 2021  Entrust.net_Premium_2048_Secure_Server_CA.crt
-rw-r--r--    1 root     system         1911 Nov 04 2021  EC-ACC.crt
-rw-r--r--    1 root     system         2244 Nov 04 2021  E-Tugra_Certification_Authority.crt
-rw-r--r--    1 root     system         1988 Nov 04 2021  DigiCert_Trusted_Root_G4.crt
-rw-r--r--    1 root     system         1367 Nov 04 2021  DigiCert_High_Assurance_EV_Root_CA.crt
-rw-r--r--    1 root     system          839 Nov 04 2021  DigiCert_Global_Root_G3.crt
-rw-r--r--    1 root     system         1294 Nov 04 2021  DigiCert_Global_Root_G2.crt
-rw-r--r--    1 root     system         1338 Nov 04 2021  DigiCert_Global_Root_CA.crt
-rw-r--r--    1 root     system          851 Nov 04 2021  DigiCert_Assured_ID_Root_G3.crt
-rw-r--r--    1 root     system         1306 Nov 04 2021  DigiCert_Assured_ID_Root_G2.crt
-rw-r--r--    1 root     system         1350 Nov 04 2021  DigiCert_Assured_ID_Root_CA.crt
-rw-r--r--    1 root     system         1200 Nov 04 2021  DST_Root_CA_X3.crt
-rw-r--r--    1 root     system         1537 Nov 04 2021  D-TRUST_Root_Class_3_CA_2_EV_2009.crt
-rw-r--r--    1 root     system         1517 Nov 04 2021  D-TRUST_Root_Class_3_CA_2_2009.crt
-rw-r--r--    1 root     system         1318 Nov 04 2021  Cybertrust_Global_Root.crt
-rw-r--r--    1 root     system         1517 Nov 04 2021  Comodo_AAA_Services_root.crt
-rw-r--r--    1 root     system         2053 Nov 04 2021  Certum_Trusted_Root_CA.crt
-rw-r--r--    1 root     system         2078 Nov 04 2021  Certum_Trusted_Network_CA_2.crt
-rw-r--r--    1 root     system         1354 Nov 04 2021  Certum_Trusted_Network_CA.crt
-rw-r--r--    1 root     system          891 Nov 04 2021  Certum_EC-384_CA.crt
-rw-r--r--    1 root     system         2264 Nov 04 2021  Certigna_Root_CA.crt
-rw-r--r--    1 root     system         1330 Nov 04 2021  Certigna.crt
-rw-r--r--    1 root     system         2086 Nov 04 2021  COMODO_RSA_Certification_Authority.crt
-rw-r--r--    1 root     system          940 Nov 04 2021  COMODO_ECC_Certification_Authority.crt
-rw-r--r--    1 root     system         1489 Nov 04 2021  COMODO_Certification_Authority.crt
-rw-r--r--    1 root     system         1984 Nov 04 2021  CFCA_EV_ROOT.crt
-rw-r--r--    1 root     system         1935 Nov 04 2021  CA_Disig_Root_R2.crt
-rw-r--r--    1 root     system         1915 Nov 04 2021  Buypass_Class_3_Root_CA.crt
-rw-r--r--    1 root     system         1915 Nov 04 2021  Buypass_Class_2_Root_CA.crt
-rw-r--r--    1 root     system         1261 Nov 04 2021  Baltimore_CyberTrust_Root.crt
-rw-r--r--    1 root     system         2167 Nov 04 2021  Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt
-rw-r--r--    1 root     system         1261 Nov 04 2021  Atos_TrustedRoot_2011.crt
-rw-r--r--    1 root     system          737 Nov 04 2021  Amazon_Root_CA_4.crt
-rw-r--r--    1 root     system          656 Nov 04 2021  Amazon_Root_CA_3.crt
-rw-r--r--    1 root     system         1883 Nov 04 2021  Amazon_Root_CA_2.crt
-rw-r--r--    1 root     system         1188 Nov 04 2021  Amazon_Root_CA_1.crt
-rw-r--r--    1 root     system          753 Nov 04 2021  AffirmTrust_Premium_ECC.crt
-rw-r--r--    1 root     system         1891 Nov 04 2021  AffirmTrust_Premium.crt
-rw-r--r--    1 root     system         1204 Nov 04 2021  AffirmTrust_Networking.crt
-rw-r--r--    1 root     system         1204 Nov 04 2021  AffirmTrust_Commercial.crt
-rw-r--r--    1 root     system         2049 Nov 04 2021  Actalis_Authentication_Root_CA.crt
-rw-r--r--    1 root     system         2118 Nov 04 2021  ANF_Secure_Server_Root_CA.crt
-rw-r--r--    1 root     system          904 Nov 04 2021  AC_RAIZ_FNMT-RCM_SERVIDORES_SEGUROS.crt
-rw-r--r--    1 root     system         1972 Nov 04 2021  AC_RAIZ_FNMT-RCM.crt
-rw-r--r--    1 root     system         2772 Nov 04 2021  ACCVRAIZ1.crt
drwxr-xr-x    4 root     system          256 Nov 04 2021  ..
drwxr-xr-x    6 root     system         4096 May 23 12:28 extracted
lrwxrwxrwx    1 root     system           65 May 23 12:28 ca-bundle.trust.crt -> /opt/freeware/etc/ssl/certs/extracted/openssl/ca-bundle.trust.crt
lrwxrwxrwx    1 root     system           59 May 23 12:28 ca-bundle.crt -> /opt/freeware/etc/ssl/certs/extracted/pem/tls-ca-bundle.pem
lrwxrwxrwx    1 root     system           28 May 23 12:28 a94d09e5.0 -> /var/ssl/certs/ACCVRAIZ1.crt
lrwxrwxrwx    1 root     system           35 May 23 12:28 cd8c0d63.0 -> /var/ssl/certs/AC_RAIZ_FNMT-RCM.crt
lrwxrwxrwx    1 root     system           54 May 23 12:28 b81b93f0.0 -> /var/ssl/certs/AC_RAIZ_FNMT-RCM_SERVIDORES_SEGUROS.crt
lrwxrwxrwx    1 root     system           44 May 23 12:28 b433981b.0 -> /var/ssl/certs/ANF_Secure_Server_Root_CA.crt
lrwxrwxrwx    1 root     system           49 May 23 12:28 930ac5d2.0 -> /var/ssl/certs/Actalis_Authentication_Root_CA.crt
lrwxrwxrwx    1 root     system           41 May 23 12:28 2b349938.0 -> /var/ssl/certs/AffirmTrust_Commercial.crt
lrwxrwxrwx    1 root     system           41 May 23 12:28 93bc0acc.0 -> /var/ssl/certs/AffirmTrust_Networking.crt
lrwxrwxrwx    1 root     system           38 May 23 12:28 b727005e.0 -> /var/ssl/certs/AffirmTrust_Premium.crt
lrwxrwxrwx    1 root     system           42 May 23 12:28 9c8dfbd4.0 -> /var/ssl/certs/AffirmTrust_Premium_ECC.crt
lrwxrwxrwx    1 root     system           35 May 23 12:28 ce5e74ef.0 -> /var/ssl/certs/Amazon_Root_CA_1.crt
lrwxrwxrwx    1 root     system           35 May 23 12:28 6d41d539.0 -> /var/ssl/certs/Amazon_Root_CA_2.crt
lrwxrwxrwx    1 root     system           35 May 23 12:28 8cb5ee0f.0 -> /var/ssl/certs/Amazon_Root_CA_3.crt
lrwxrwxrwx    1 root     system           35 May 23 12:28 de6d66f3.0 -> /var/ssl/certs/Amazon_Root_CA_4.crt
lrwxrwxrwx    1 root     system           40 May 23 12:28 e36a6752.0 -> /var/ssl/certs/Atos_TrustedRoot_2011.crt
lrwxrwxrwx    1 root     system           76 May 23 12:28 3bde41ac.0 -> /var/ssl/certs/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt
lrwxrwxrwx    1 root     system           44 May 23 12:28 653b494a.0 -> /var/ssl/certs/Baltimore_CyberTrust_Root.crt
lrwxrwxrwx    1 root     system           42 May 23 12:28 54657681.0 -> /var/ssl/certs/Buypass_Class_2_Root_CA.crt
lrwxrwxrwx    1 root     system           42 May 23 12:28 e8de2f56.0 -> /var/ssl/certs/Buypass_Class_3_Root_CA.crt
lrwxrwxrwx    1 root     system           35 May 23 12:28 2ae6433e.0 -> /var/ssl/certs/CA_Disig_Root_R2.crt
lrwxrwxrwx    1 root     system           31 May 23 12:28 0b1b94ef.0 -> /var/ssl/certs/CFCA_EV_ROOT.crt
lrwxrwxrwx    1 root     system           49 May 23 12:28 40547a79.0 -> /var/ssl/certs/COMODO_Certification_Authority.crt
lrwxrwxrwx    1 root     system           53 May 23 12:28 eed8c118.0 -> /var/ssl/certs/COMODO_ECC_Certification_Authority.crt
lrwxrwxrwx    1 root     system           53 May 23 12:28 d6325660.0 -> /var/ssl/certs/COMODO_RSA_Certification_Authority.crt
lrwxrwxrwx    1 root     system           27 May 23 12:28 e113c810.0 -> /var/ssl/certs/Certigna.crt
lrwxrwxrwx    1 root     system           35 May 23 12:28 f51bb24c.0 -> /var/ssl/certs/Certigna_Root_CA.crt
lrwxrwxrwx    1 root     system           35 May 23 12:28 9482e63a.0 -> /var/ssl/certs/Certum_EC-384_CA.crt
lrwxrwxrwx    1 root     system           44 May 23 12:28 48bec511.0 -> /var/ssl/certs/Certum_Trusted_Network_CA.crt
lrwxrwxrwx    1 root     system           46 May 23 12:28 40193066.0 -> /var/ssl/certs/Certum_Trusted_Network_CA_2.crt
lrwxrwxrwx    1 root     system           41 May 23 12:28 e35234b1.0 -> /var/ssl/certs/Certum_Trusted_Root_CA.crt
lrwxrwxrwx    1 root     system           43 May 23 12:28 ee64a828.0 -> /var/ssl/certs/Comodo_AAA_Services_root.crt
lrwxrwxrwx    1 root     system           41 May 23 12:28 76cb8f92.0 -> /var/ssl/certs/Cybertrust_Global_Root.crt
lrwxrwxrwx    1 root     system           49 May 23 12:28 c28a8a30.0 -> /var/ssl/certs/D-TRUST_Root_Class_3_CA_2_2009.crt
lrwxrwxrwx    1 root     system           52 May 23 12:28 d4dae3dd.0 -> /var/ssl/certs/D-TRUST_Root_Class_3_CA_2_EV_2009.crt
lrwxrwxrwx    1 root     system           33 May 23 12:28 2e5ac55d.0 -> /var/ssl/certs/DST_Root_CA_X3.crt
lrwxrwxrwx    1 root     system           46 May 23 12:28 b1159c4c.0 -> /var/ssl/certs/DigiCert_Assured_ID_Root_CA.crt
lrwxrwxrwx    1 root     system           46 May 23 12:28 9d04f354.0 -> /var/ssl/certs/DigiCert_Assured_ID_Root_G2.crt
lrwxrwxrwx    1 root     system           46 May 23 12:28 7f3d5d1d.0 -> /var/ssl/certs/DigiCert_Assured_ID_Root_G3.crt
lrwxrwxrwx    1 root     system           42 May 23 12:28 3513523f.0 -> /var/ssl/certs/DigiCert_Global_Root_CA.crt
lrwxrwxrwx    1 root     system           42 May 23 12:28 607986c7.0 -> /var/ssl/certs/DigiCert_Global_Root_G2.crt
lrwxrwxrwx    1 root     system           42 May 23 12:28 dd8e9d41.0 -> /var/ssl/certs/DigiCert_Global_Root_G3.crt
lrwxrwxrwx    1 root     system           53 May 23 12:28 244b5494.0 -> /var/ssl/certs/DigiCert_High_Assurance_EV_Root_CA.crt
lrwxrwxrwx    1 root     system           43 May 23 12:28 75d1b2ed.0 -> /var/ssl/certs/DigiCert_Trusted_Root_G4.crt
lrwxrwxrwx    1 root     system           50 May 23 12:28 5273a94c.0 -> /var/ssl/certs/E-Tugra_Certification_Authority.crt
lrwxrwxrwx    1 root     system           25 May 23 12:28 349f2832.0 -> /var/ssl/certs/EC-ACC.crt
lrwxrwxrwx    1 root     system           60 May 23 12:28 aee5f10d.0 -> /var/ssl/certs/Entrust.net_Premium_2048_Secure_Server_CA.crt
lrwxrwxrwx    1 root     system           55 May 23 12:28 6b99d060.0 -> /var/ssl/certs/Entrust_Root_Certification_Authority.crt
lrwxrwxrwx    1 root     system           61 May 23 12:28 106f3e4d.0 -> /var/ssl/certs/Entrust_Root_Certification_Authority_-_EC1.crt
lrwxrwxrwx    1 root     system           60 May 23 12:28 02265526.0 -> /var/ssl/certs/Entrust_Root_Certification_Authority_-_G2.crt
lrwxrwxrwx    1 root     system           60 May 23 12:28 5e98733a.0 -> /var/ssl/certs/Entrust_Root_Certification_Authority_-_G4.crt
lrwxrwxrwx    1 root     system           41 May 23 12:28 0f6fa695.0 -> /var/ssl/certs/GDCA_TrustAUTH_R5_ROOT.crt
lrwxrwxrwx    1 root     system           35 May 23 12:28 fa5da96b.0 -> /var/ssl/certs/GLOBALTRUST_2020.crt
lrwxrwxrwx    1 root     system           30 May 23 12:28 1001acf7.0 -> /var/ssl/certs/GTS_Root_R1.crt
lrwxrwxrwx    1 root     system           30 May 23 12:28 626dceaf.0 -> /var/ssl/certs/GTS_Root_R2.crt
lrwxrwxrwx    1 root     system           30 May 23 12:28 0a775a30.0 -> /var/ssl/certs/GTS_Root_R3.crt
lrwxrwxrwx    1 root     system           30 May 23 12:28 a3418fda.0 -> /var/ssl/certs/GTS_Root_R4.crt
lrwxrwxrwx    1 root     system           46 May 23 12:28 b0e59380.0 -> /var/ssl/certs/GlobalSign_ECC_Root_CA_-_R4.crt
lrwxrwxrwx    1 root     system           46 May 23 12:28 1d3472b9.0 -> /var/ssl/certs/GlobalSign_ECC_Root_CA_-_R5.crt
lrwxrwxrwx    1 root     system           37 May 23 12:28 5ad8a5d6.0 -> /var/ssl/certs/GlobalSign_Root_CA.crt
lrwxrwxrwx    1 root     system           42 May 23 12:28 4a6481c9.0 -> /var/ssl/certs/GlobalSign_Root_CA_-_R2.crt
lrwxrwxrwx    1 root     system           42 May 23 12:28 062cdee6.0 -> /var/ssl/certs/GlobalSign_Root_CA_-_R3.crt
lrwxrwxrwx    1 root     system           42 May 23 12:28 dc4d6a89.0 -> /var/ssl/certs/GlobalSign_Root_CA_-_R6.crt
lrwxrwxrwx    1 root     system           38 May 23 12:28 feffd413.0 -> /var/ssl/certs/GlobalSign_Root_E46.crt
lrwxrwxrwx    1 root     system           38 May 23 12:28 002c0b4f.0 -> /var/ssl/certs/GlobalSign_Root_R46.crt
lrwxrwxrwx    1 root     system           38 May 23 12:28 f081611a.0 -> /var/ssl/certs/Go_Daddy_Class_2_CA.crt
lrwxrwxrwx    1 root     system           59 May 23 12:28 cbf06781.0 -> /var/ssl/certs/Go_Daddy_Root_Certificate_Authority_-_G2.crt
lrwxrwxrwx    1 root     system           46 May 23 12:28 ecccd8db.0 -> /var/ssl/certs/HARICA_TLS_ECC_Root_CA_2021.crt
lrwxrwxrwx    1 root     system           46 May 23 12:28 9f727ac7.0 -> /var/ssl/certs/HARICA_TLS_RSA_Root_CA_2021.crt
lrwxrwxrwx    1 root     system           78 May 23 12:28 7719f463.0 -> /var/ssl/certs/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt
lrwxrwxrwx    1 root     system           74 May 23 12:28 1636090b.0 -> /var/ssl/certs/Hellenic_Academic_and_Research_Institutions_RootCA_2011.crt
lrwxrwxrwx    1 root     system           74 May 23 12:28 32888f65.0 -> /var/ssl/certs/Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt
lrwxrwxrwx    1 root     system           42 May 23 12:28 3e45d192.0 -> /var/ssl/certs/Hongkong_Post_Root_CA_1.crt
lrwxrwxrwx    1 root     system           42 May 23 12:28 68dd7389.0 -> /var/ssl/certs/Hongkong_Post_Root_CA_3.crt
lrwxrwxrwx    1 root     system           31 May 23 12:28 4042bcee.0 -> /var/ssl/certs/ISRG_Root_X1.crt
lrwxrwxrwx    1 root     system           49 May 23 12:28 ef954a4e.0 -> /var/ssl/certs/IdenTrust_Commercial_Root_CA_1.crt
lrwxrwxrwx    1 root     system           52 May 23 12:28 1e08bfd1.0 -> /var/ssl/certs/IdenTrust_Public_Sector_Root_CA_1.crt
lrwxrwxrwx    1 root     system           29 May 23 12:28 cc450945.0 -> /var/ssl/certs/Izenpe.com.crt
lrwxrwxrwx    1 root     system           49 May 23 12:28 8160b96c.0 -> /var/ssl/certs/Microsec_e-Szigno_Root_CA_2009.crt
lrwxrwxrwx    1 root     system           64 May 23 12:28 8d89cda1.0 -> /var/ssl/certs/Microsoft_ECC_Root_Certificate_Authority_2017.crt
lrwxrwxrwx    1 root     system           64 May 23 12:28 bf53fb88.0 -> /var/ssl/certs/Microsoft_RSA_Root_Certificate_Authority_2017.crt
lrwxrwxrwx    1 root     system           60 May 23 12:28 3fb36b73.0 -> /var/ssl/certs/NAVER_Global_Root_Certification_Authority.crt
lrwxrwxrwx    1 root     system           59 May 23 12:28 988a38cb.0 -> /var/ssl/certs/NetLock_Arany_=Class_Gold=_Fotanusitvany.crt
lrwxrwxrwx    1 root     system           58 May 23 12:28 4304c5e5.0 -> /var/ssl/certs/Network_Solutions_Certificate_Authority.crt
lrwxrwxrwx    1 root     system           50 May 23 12:28 e73d606e.0 -> /var/ssl/certs/OISTE_WISeKey_Global_Root_GB_CA.crt
lrwxrwxrwx    1 root     system           50 May 23 12:28 773e07ad.0 -> /var/ssl/certs/OISTE_WISeKey_Global_Root_GC_CA.crt
lrwxrwxrwx    1 root     system           40 May 23 12:28 749e9e03.0 -> /var/ssl/certs/QuoVadis_Root_CA_1_G3.crt
lrwxrwxrwx    1 root     system           37 May 23 12:28 d7e8dc79.0 -> /var/ssl/certs/QuoVadis_Root_CA_2.crt
lrwxrwxrwx    1 root     system           40 May 23 12:28 064e0aa9.0 -> /var/ssl/certs/QuoVadis_Root_CA_2_G3.crt
lrwxrwxrwx    1 root     system           37 May 23 12:28 76faf6c0.0 -> /var/ssl/certs/QuoVadis_Root_CA_3.crt
lrwxrwxrwx    1 root     system           40 May 23 12:28 e18bfb83.0 -> /var/ssl/certs/QuoVadis_Root_CA_3_G3.crt
lrwxrwxrwx    1 root     system           62 May 23 12:28 f0c70a8d.0 -> /var/ssl/certs/SSL.com_EV_Root_Certification_Authority_ECC.crt
lrwxrwxrwx    1 root     system           65 May 23 12:28 06dc52d5.0 -> /var/ssl/certs/SSL.com_EV_Root_Certification_Authority_RSA_R2.crt
lrwxrwxrwx    1 root     system           59 May 23 12:28 0bf05006.0 -> /var/ssl/certs/SSL.com_Root_Certification_Authority_ECC.crt
lrwxrwxrwx    1 root     system           59 May 23 12:28 6fa5da56.0 -> /var/ssl/certs/SSL.com_Root_Certification_Authority_RSA.crt
lrwxrwxrwx    1 root     system           34 May 23 12:28 fe8a2cd8.0 -> /var/ssl/certs/SZAFIR_ROOT_CA2.crt
lrwxrwxrwx    1 root     system           38 May 23 12:28 18856ac4.0 -> /var/ssl/certs/SecureSign_RootCA11.crt
lrwxrwxrwx    1 root     system           33 May 23 12:28 f39fc864.0 -> /var/ssl/certs/SecureTrust_CA.crt
lrwxrwxrwx    1 root     system           35 May 23 12:28 b66938e9.0 -> /var/ssl/certs/Secure_Global_CA.crt
lrwxrwxrwx    1 root     system           49 May 23 12:28 cd58d51e.0 -> /var/ssl/certs/Security_Communication_RootCA2.crt
lrwxrwxrwx    1 root     system           49 May 23 12:28 f3377b1b.0 -> /var/ssl/certs/Security_Communication_Root_CA.crt
lrwxrwxrwx    1 root     system           51 May 23 12:28 03179a64.0 -> /var/ssl/certs/Staat_der_Nederlanden_EV_Root_CA.crt
lrwxrwxrwx    1 root     system           39 May 23 12:28 f387163d.0 -> /var/ssl/certs/Starfield_Class_2_CA.crt
lrwxrwxrwx    1 root     system           60 May 23 12:28 4bfab552.0 -> /var/ssl/certs/Starfield_Root_Certificate_Authority_-_G2.crt
lrwxrwxrwx    1 root     system           69 May 23 12:28 09789157.0 -> /var/ssl/certs/Starfield_Services_Root_Certificate_Authority_-_G2.crt
lrwxrwxrwx    1 root     system           41 May 23 12:28 4f316efb.0 -> /var/ssl/certs/SwissSign_Gold_CA_-_G2.crt
lrwxrwxrwx    1 root     system           43 May 23 12:28 57bcb2da.0 -> /var/ssl/certs/SwissSign_Silver_CA_-_G2.crt
lrwxrwxrwx    1 root     system           47 May 23 12:28 1e09d511.0 -> /var/ssl/certs/T-TeleSec_GlobalRoot_Class_2.crt
lrwxrwxrwx    1 root     system           47 May 23 12:28 5443e9e3.0 -> /var/ssl/certs/T-TeleSec_GlobalRoot_Class_3.crt
lrwxrwxrwx    1 root     system           64 May 23 12:28 ff34af3f.0 -> /var/ssl/certs/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt
lrwxrwxrwx    1 root     system           38 May 23 12:28 5f15c80c.0 -> /var/ssl/certs/TWCA_Global_Root_CA.crt
lrwxrwxrwx    1 root     system           52 May 23 12:28 b7a5b843.0 -> /var/ssl/certs/TWCA_Root_Certification_Authority.crt
lrwxrwxrwx    1 root     system           41 May 23 12:28 5cd81ad7.0 -> /var/ssl/certs/TeliaSonera_Root_CA_v1.crt
lrwxrwxrwx    1 root     system           33 May 23 12:28 7aaf71c0.0 -> /var/ssl/certs/TrustCor_ECA-1.crt
lrwxrwxrwx    1 root     system           41 May 23 12:28 5d3033c5.0 -> /var/ssl/certs/TrustCor_RootCert_CA-1.crt
lrwxrwxrwx    1 root     system           41 May 23 12:28 3e44d2f7.0 -> /var/ssl/certs/TrustCor_RootCert_CA-2.crt
lrwxrwxrwx    1 root     system           59 May 23 12:28 f249de83.0 -> /var/ssl/certs/Trustwave_Global_Certification_Authority.crt
lrwxrwxrwx    1 root     system           68 May 23 12:28 9b5697b0.0 -> /var/ssl/certs/Trustwave_Global_ECC_P256_Certification_Authority.crt
lrwxrwxrwx    1 root     system           68 May 23 12:28 d887a5bb.0 -> /var/ssl/certs/Trustwave_Global_ECC_P384_Certification_Authority.crt
lrwxrwxrwx    1 root     system           35 May 23 12:28 fd64f3fc.0 -> /var/ssl/certs/TunTrust_Root_CA.crt
lrwxrwxrwx    1 root     system           47 May 23 12:28 0f5dc4f3.0 -> /var/ssl/certs/UCA_Extended_Validation_Root.crt
lrwxrwxrwx    1 root     system           37 May 23 12:28 c01eb047.0 -> /var/ssl/certs/UCA_Global_G2_Root.crt
lrwxrwxrwx    1 root     system           56 May 23 12:28 f30dd6ad.0 -> /var/ssl/certs/USERTrust_ECC_Certification_Authority.crt
lrwxrwxrwx    1 root     system           56 May 23 12:28 fc5a8f99.0 -> /var/ssl/certs/USERTrust_RSA_Certification_Authority.crt
lrwxrwxrwx    1 root     system           39 May 23 12:28 706f604c.0 -> /var/ssl/certs/XRamp_Global_CA_Root.crt
lrwxrwxrwx    1 root     system           35 May 23 12:28 8d86cdd1.0 -> /var/ssl/certs/certSIGN_ROOT_CA.crt
lrwxrwxrwx    1 root     system           38 May 23 12:28 5f618aec.0 -> /var/ssl/certs/certSIGN_Root_CA_G2.crt
lrwxrwxrwx    1 root     system           40 May 23 12:28 e868b802.0 -> /var/ssl/certs/e-Szigno_Root_CA_2017.crt
lrwxrwxrwx    1 root     system           52 May 23 12:28 ca6e4ad9.0 -> /var/ssl/certs/ePKI_Root_Certification_Authority.crt
lrwxrwxrwx    1 root     system           42 May 23 12:28 4b718d9b.0 -> /var/ssl/certs/emSign_ECC_Root_CA_-_C3.crt
lrwxrwxrwx    1 root     system           42 May 23 12:28 14bc7599.0 -> /var/ssl/certs/emSign_ECC_Root_CA_-_G3.crt
lrwxrwxrwx    1 root     system           38 May 23 12:28 406c9bb1.0 -> /var/ssl/certs/emSign_Root_CA_-_C1.crt
lrwxrwxrwx    1 root     system           38 May 23 12:28 2923b3f9.0 -> /var/ssl/certs/emSign_Root_CA_-_G1.crt
drwxr-xr-x    3 root     system        20480 May 23 12:28 .

[root@HOST:/]> /usr/bin/c_rehash 
Doing /var/ssl/certs

[root@HOST:/]> ls -alrt /var/ssl/certs/
total 1104
-rw-r--r--    1 root     system           98 Nov 04 2021  README
-rw-r--r--    1 root     system         1302 Nov 04 2021  emSign_Root_CA_-_G1.crt
-rw-r--r--    1 root     system         1257 Nov 04 2021  emSign_Root_CA_-_C1.crt
-rw-r--r--    1 root     system          859 Nov 04 2021  emSign_ECC_Root_CA_-_G3.crt
-rw-r--r--    1 root     system          814 Nov 04 2021  emSign_ECC_Root_CA_-_C3.crt
-rw-r--r--    1 root     system         2033 Nov 04 2021  ePKI_Root_Certification_Authority.crt
-rw-r--r--    1 root     system          843 Nov 04 2021  e-Szigno_Root_CA_2017.crt
-rw-r--r--    1 root     system         1891 Nov 04 2021  certSIGN_Root_CA_G2.crt
-rw-r--r--    1 root     system         1176 Nov 04 2021  certSIGN_ROOT_CA.crt
-rw-r--r--    1 root     system         1513 Nov 04 2021  XRamp_Global_CA_Root.crt
-rw-r--r--    1 root     system         2094 Nov 04 2021  USERTrust_RSA_Certification_Authority.crt
-rw-r--r--    1 root     system          948 Nov 04 2021  USERTrust_ECC_Certification_Authority.crt
-rw-r--r--    1 root     system         1891 Nov 04 2021  UCA_Global_G2_Root.crt
-rw-r--r--    1 root     system         1915 Nov 04 2021  UCA_Extended_Validation_Root.crt
-rw-r--r--    1 root     system         2037 Nov 04 2021  TunTrust_Root_CA.crt
-rw-r--r--    1 root     system          969 Nov 04 2021  Trustwave_Global_ECC_P384_Certification_Authority.crt
-rw-r--r--    1 root     system          883 Nov 04 2021  Trustwave_Global_ECC_P256_Certification_Authority.crt
-rw-r--r--    1 root     system         2090 Nov 04 2021  Trustwave_Global_Certification_Authority.crt
-rw-r--r--    1 root     system         2204 Nov 04 2021  TrustCor_RootCert_CA-2.crt
-rw-r--r--    1 root     system         1513 Nov 04 2021  TrustCor_RootCert_CA-1.crt
-rw-r--r--    1 root     system         1493 Nov 04 2021  TrustCor_ECA-1.crt
-rw-r--r--    1 root     system         1870 Nov 04 2021  TeliaSonera_Root_CA_v1.crt
-rw-r--r--    1 root     system         1269 Nov 04 2021  TWCA_Root_Certification_Authority.crt
-rw-r--r--    1 root     system         1883 Nov 04 2021  TWCA_Global_Root_CA.crt
-rw-r--r--    1 root     system         1582 Nov 04 2021  TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt
-rw-r--r--    1 root     system         1367 Nov 04 2021  T-TeleSec_GlobalRoot_Class_3.crt
-rw-r--r--    1 root     system         1367 Nov 04 2021  T-TeleSec_GlobalRoot_Class_2.crt
-rw-r--r--    1 root     system         2049 Nov 04 2021  SwissSign_Silver_CA_-_G2.crt
-rw-r--r--    1 root     system         2045 Nov 04 2021  SwissSign_Gold_CA_-_G2.crt
-rw-r--r--    1 root     system         1424 Nov 04 2021  Starfield_Services_Root_Certificate_Authority_-_G2.crt
-rw-r--r--    1 root     system         1399 Nov 04 2021  Starfield_Root_Certificate_Authority_-_G2.crt
-rw-r--r--    1 root     system         1468 Nov 04 2021  Starfield_Class_2_CA.crt
-rw-r--r--    1 root     system         1948 Nov 04 2021  Staat_der_Nederlanden_EV_Root_CA.crt
-rw-r--r--    1 root     system         1224 Nov 04 2021  Security_Communication_Root_CA.crt
-rw-r--r--    1 root     system         1261 Nov 04 2021  Security_Communication_RootCA2.crt
-rw-r--r--    1 root     system         1354 Nov 04 2021  Secure_Global_CA.crt
-rw-r--r--    1 root     system         1350 Nov 04 2021  SecureTrust_CA.crt
-rw-r--r--    1 root     system         1249 Nov 04 2021  SecureSign_RootCA11.crt
-rw-r--r--    1 root     system         1257 Nov 04 2021  SZAFIR_ROOT_CA2.crt
-rw-r--r--    1 root     system         2094 Nov 04 2021  SSL.com_Root_Certification_Authority_RSA.crt
-rw-r--r--    1 root     system          944 Nov 04 2021  SSL.com_Root_Certification_Authority_ECC.crt
-rw-r--r--    1 root     system         2114 Nov 04 2021  SSL.com_EV_Root_Certification_Authority_RSA_R2.crt
-rw-r--r--    1 root     system          956 Nov 04 2021  SSL.com_EV_Root_Certification_Authority_ECC.crt
-rw-r--r--    1 root     system         1923 Nov 04 2021  QuoVadis_Root_CA_3_G3.crt
-rw-r--r--    1 root     system         2354 Nov 04 2021  QuoVadis_Root_CA_3.crt
-rw-r--r--    1 root     system         1923 Nov 04 2021  QuoVadis_Root_CA_2_G3.crt
-rw-r--r--    1 root     system         2041 Nov 04 2021  QuoVadis_Root_CA_2.crt
-rw-r--r--    1 root     system         1923 Nov 04 2021  QuoVadis_Root_CA_1_G3.crt
-rw-r--r--    1 root     system          895 Nov 04 2021  OISTE_WISeKey_Global_Root_GC_CA.crt
-rw-r--r--    1 root     system         1346 Nov 04 2021  OISTE_WISeKey_Global_Root_GB_CA.crt
-rw-r--r--    1 root     system         1411 Nov 04 2021  Network_Solutions_Certificate_Authority.crt
-rw-r--r--    1 root     system         1476 Nov 04 2021  NetLock_Arany_=Class_Gold=_Fotanusitvany.crt
-rw-r--r--    1 root     system         2013 Nov 04 2021  NAVER_Global_Root_Certification_Authority.crt
-rw-r--r--    1 root     system         2021 Nov 04 2021  Microsoft_RSA_Root_Certificate_Authority_2017.crt
-rw-r--r--    1 root     system          875 Nov 04 2021  Microsoft_ECC_Root_Certificate_Authority_2017.crt
-rw-r--r--    1 root     system         1460 Nov 04 2021  Microsec_e-Szigno_Root_CA_2009.crt
-rw-r--r--    1 root     system         2122 Nov 04 2021  Izenpe.com.crt
-rw-r--r--    1 root     system         1931 Nov 04 2021  IdenTrust_Public_Sector_Root_CA_1.crt
-rw-r--r--    1 root     system         1923 Nov 04 2021  IdenTrust_Commercial_Root_CA_1.crt
-rw-r--r--    1 root     system         1939 Nov 04 2021  ISRG_Root_X1.crt
-rw-r--r--    1 root     system         2074 Nov 04 2021  Hongkong_Post_Root_CA_3.crt
-rw-r--r--    1 root     system         1168 Nov 04 2021  Hongkong_Post_Root_CA_1.crt
-rw-r--r--    1 root     system         2155 Nov 04 2021  Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt
-rw-r--r--    1 root     system         1513 Nov 04 2021  Hellenic_Academic_and_Research_Institutions_RootCA_2011.crt
-rw-r--r--    1 root     system         1017 Nov 04 2021  Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt
-rw-r--r--    1 root     system         2017 Nov 04 2021  HARICA_TLS_RSA_Root_CA_2021.crt
-rw-r--r--    1 root     system          867 Nov 04 2021  HARICA_TLS_ECC_Root_CA_2021.crt
-rw-r--r--    1 root     system         1367 Nov 04 2021  Go_Daddy_Root_Certificate_Authority_-_G2.crt
-rw-r--r--    1 root     system         1448 Nov 04 2021  Go_Daddy_Class_2_CA.crt
-rw-r--r--    1 root     system         1915 Nov 04 2021  GlobalSign_Root_R46.crt
-rw-r--r--    1 root     system          769 Nov 04 2021  GlobalSign_Root_E46.crt
-rw-r--r--    1 root     system         1972 Nov 04 2021  GlobalSign_Root_CA_-_R6.crt
-rw-r--r--    1 root     system         1229 Nov 04 2021  GlobalSign_Root_CA_-_R3.crt
-rw-r--r--    1 root     system         1354 Nov 04 2021  GlobalSign_Root_CA_-_R2.crt
-rw-r--r--    1 root     system         1261 Nov 04 2021  GlobalSign_Root_CA.crt
-rw-r--r--    1 root     system          794 Nov 04 2021  GlobalSign_ECC_Root_CA_-_R5.crt
-rw-r--r--    1 root     system          713 Nov 04 2021  GlobalSign_ECC_Root_CA_-_R4.crt
-rw-r--r--    1 root     system          769 Nov 04 2021  GTS_Root_R4.crt
-rw-r--r--    1 root     system          769 Nov 04 2021  GTS_Root_R3.crt
-rw-r--r--    1 root     system         1915 Nov 04 2021  GTS_Root_R2.crt
-rw-r--r--    1 root     system         1915 Nov 04 2021  GTS_Root_R1.crt
-rw-r--r--    1 root     system         1972 Nov 04 2021  GLOBALTRUST_2020.crt
-rw-r--r--    1 root     system         1980 Nov 04 2021  GDCA_TrustAUTH_R5_ROOT.crt
-rw-r--r--    1 root     system         2244 Nov 04 2021  Entrust_Root_Certification_Authority_-_G4.crt
-rw-r--r--    1 root     system         1533 Nov 04 2021  Entrust_Root_Certification_Authority_-_G2.crt
-rw-r--r--    1 root     system         1090 Nov 04 2021  Entrust_Root_Certification_Authority_-_EC1.crt
-rw-r--r--    1 root     system         1643 Nov 04 2021  Entrust_Root_Certification_Authority.crt
-rw-r--r--    1 root     system         1505 Nov 04 2021  Entrust.net_Premium_2048_Secure_Server_CA.crt
-rw-r--r--    1 root     system         1911 Nov 04 2021  EC-ACC.crt
-rw-r--r--    1 root     system         2244 Nov 04 2021  E-Tugra_Certification_Authority.crt
-rw-r--r--    1 root     system         1988 Nov 04 2021  DigiCert_Trusted_Root_G4.crt
-rw-r--r--    1 root     system         1367 Nov 04 2021  DigiCert_High_Assurance_EV_Root_CA.crt
-rw-r--r--    1 root     system          839 Nov 04 2021  DigiCert_Global_Root_G3.crt
-rw-r--r--    1 root     system         1294 Nov 04 2021  DigiCert_Global_Root_G2.crt
-rw-r--r--    1 root     system         1338 Nov 04 2021  DigiCert_Global_Root_CA.crt
-rw-r--r--    1 root     system          851 Nov 04 2021  DigiCert_Assured_ID_Root_G3.crt
-rw-r--r--    1 root     system         1306 Nov 04 2021  DigiCert_Assured_ID_Root_G2.crt
-rw-r--r--    1 root     system         1350 Nov 04 2021  DigiCert_Assured_ID_Root_CA.crt
-rw-r--r--    1 root     system         1200 Nov 04 2021  DST_Root_CA_X3.crt
-rw-r--r--    1 root     system         1537 Nov 04 2021  D-TRUST_Root_Class_3_CA_2_EV_2009.crt
-rw-r--r--    1 root     system         1517 Nov 04 2021  D-TRUST_Root_Class_3_CA_2_2009.crt
-rw-r--r--    1 root     system         1318 Nov 04 2021  Cybertrust_Global_Root.crt
-rw-r--r--    1 root     system         1517 Nov 04 2021  Comodo_AAA_Services_root.crt
-rw-r--r--    1 root     system         2053 Nov 04 2021  Certum_Trusted_Root_CA.crt
-rw-r--r--    1 root     system         2078 Nov 04 2021  Certum_Trusted_Network_CA_2.crt
-rw-r--r--    1 root     system         1354 Nov 04 2021  Certum_Trusted_Network_CA.crt
-rw-r--r--    1 root     system          891 Nov 04 2021  Certum_EC-384_CA.crt
-rw-r--r--    1 root     system         2264 Nov 04 2021  Certigna_Root_CA.crt
-rw-r--r--    1 root     system         1330 Nov 04 2021  Certigna.crt
-rw-r--r--    1 root     system         2086 Nov 04 2021  COMODO_RSA_Certification_Authority.crt
-rw-r--r--    1 root     system          940 Nov 04 2021  COMODO_ECC_Certification_Authority.crt
-rw-r--r--    1 root     system         1489 Nov 04 2021  COMODO_Certification_Authority.crt
-rw-r--r--    1 root     system         1984 Nov 04 2021  CFCA_EV_ROOT.crt
-rw-r--r--    1 root     system         1935 Nov 04 2021  CA_Disig_Root_R2.crt
-rw-r--r--    1 root     system         1915 Nov 04 2021  Buypass_Class_3_Root_CA.crt
-rw-r--r--    1 root     system         1915 Nov 04 2021  Buypass_Class_2_Root_CA.crt
-rw-r--r--    1 root     system         1261 Nov 04 2021  Baltimore_CyberTrust_Root.crt
-rw-r--r--    1 root     system         2167 Nov 04 2021  Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt
-rw-r--r--    1 root     system         1261 Nov 04 2021  Atos_TrustedRoot_2011.crt
-rw-r--r--    1 root     system          737 Nov 04 2021  Amazon_Root_CA_4.crt
-rw-r--r--    1 root     system          656 Nov 04 2021  Amazon_Root_CA_3.crt
-rw-r--r--    1 root     system         1883 Nov 04 2021  Amazon_Root_CA_2.crt
-rw-r--r--    1 root     system         1188 Nov 04 2021  Amazon_Root_CA_1.crt
-rw-r--r--    1 root     system          753 Nov 04 2021  AffirmTrust_Premium_ECC.crt
-rw-r--r--    1 root     system         1891 Nov 04 2021  AffirmTrust_Premium.crt
-rw-r--r--    1 root     system         1204 Nov 04 2021  AffirmTrust_Networking.crt
-rw-r--r--    1 root     system         1204 Nov 04 2021  AffirmTrust_Commercial.crt
-rw-r--r--    1 root     system         2049 Nov 04 2021  Actalis_Authentication_Root_CA.crt
-rw-r--r--    1 root     system         2118 Nov 04 2021  ANF_Secure_Server_Root_CA.crt
-rw-r--r--    1 root     system          904 Nov 04 2021  AC_RAIZ_FNMT-RCM_SERVIDORES_SEGUROS.crt
-rw-r--r--    1 root     system         1972 Nov 04 2021  AC_RAIZ_FNMT-RCM.crt
-rw-r--r--    1 root     system         2772 Nov 04 2021  ACCVRAIZ1.crt
drwxr-xr-x    4 root     system          256 Nov 04 2021  ..
drwxr-xr-x    6 root     system         4096 May 23 12:28 extracted
lrwxrwxrwx    1 root     system           65 May 23 12:28 ca-bundle.trust.crt -> /opt/freeware/etc/ssl/certs/extracted/openssl/ca-bundle.trust.crt
lrwxrwxrwx    1 root     system           59 May 23 12:28 ca-bundle.crt -> /opt/freeware/etc/ssl/certs/extracted/pem/tls-ca-bundle.pem
drwxr-xr-x    3 root     system        20480 May 25 09:29 .

[root@HOST:/]> yum clean all
Cleaning repos: AIX_Toolbox AIX_Toolbox_72 AIX_Toolbox_noarch
Cleaning up Everything

[root@HOST:/]> yum upgrade
anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml:">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml: [Errno 14] curl#60 - "SSL certificate problem: self signed certificate in certificate chain"
Trying other mirror.
Error: Cannot retrieve repository metadata (repomd.xml) for repository: AIX_Toolbox. Please verify its path and try again

    ​

    Will analyse further!

    With kind regards,



    ------------------------------
    Stephan Dietl
    ------------------------------

    Original Message