[SOLVED]ca-certificates.crt update instructions cannot install sublime

Astral Axiom · 2018-04-10 04:16:33

I am trying to install sublime-text.

I updated according to the instructions in the arch news, removing ca-certificates.crt and now when I run the command:

curl -O https://download.sublimetext.com/sublimehq-pub.gpg && sudo pacman-key --add sublimehq-pub.gpg && sudo pacman-key --lsign-key 8A8F901A && rm sublimehq-pub.gpg

I get the message:

% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
curl: (77) error setting certificate verify locations:
  CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: none

I came across an article on Github that says that I should have added the command:

update-ca-trust

into the instructions before the command:

pacman -Su

so I updated again according to that and still same results.

Can anyone help .....Thanks so much:)

Last edited by Astral Axiom (2018-04-10 17:23:13)

Scimmia · 2018-04-10 04:28:20

Did you bother to check the date on those instructions? If you ran into the problem, you haven't updated in a very long time.

Reinstall all of your ca-certificates* packages.

fukawi2 · 2018-04-10 04:44:25

Astral Axiom wrote:

I updated according to the instructions in the arch news

Which instructions are you talking about exactly? If it's this one then that is over 13 months old, which is an enternity in Arch-time. Update your system fully then we can help you.

Astral Axiom · 2018-04-10 13:38:24

Sorry I am new to Arch, but yes my system is up to date and yes I saw the date on the news article. I thought is was still valid since it is still on the main page. Why is it still fully displayed on the main archlinux.org page if it is obsolete? I thought I needed to go by the instruction since, being a fresh install, it had not been updated since this was posted as news. After what time period should I consider a manual intervention in the news, that is still fully displayed on the main page without clicking on it, to be obsolete? I only installed the system about a month ago and did my first update immediately according to this instruction:

# pacman -Syuw                                              # download packages
# rm /etc/ssl/certs/ca-certificates.crt                     # remove conflicting file
# pacman -Su                                                # perform upgrade

I have updated a few times since and I have just run:

 sudo pacman -Syu

again and it says:

core is up to date
extra is up to date
community is up to date
: : starting full system upgrade ........
there is nothing to do

yet I still have the same issue with installing sublime. I have been searching with duckduckgo and in the Pacman man pages and am not finding what command to use to reinstall all ca-certificates* packages. Do I just run

 sudo pacman -S ca-certificates*

Thanks so much for the help:)

Slithery · 2018-04-10 13:45:33

The only articles that concern you are those that have been posted since you installed your system. Your system was fully up to date when you installed it a month ago so there are no news items that are relevant to you.

What's the output of...

pacman -Qkk ca-certificates

Astral Axiom · 2018-04-10 14:01:17

the output of

pacman -Qkk ca-certificates

is

ca-certificates: 0 total files, 0 altered files

so clearly that is not good. I have just found a posting on StackExchange where a guy got a very similar error message using git and he says that what fixed his issue was this command:

ln -s /etc/ca-certificates/extracted/ca-bundle.trust.crt /etc/ssl/certs/ca-certificates.crt

I have been looking at the man pages for ln to see if I think this will help me. Do you think that will solve my issue? I am thinking if I have the output

ca-certificates: 0 total files

then there is no file to link and I need to download new ca-certificate files. I do not fully understand yet though.

here is the article: https://unix.stackexchange.com/question … und#339614

Last edited by Astral Axiom (2018-04-10 14:06:23)

Slithery · 2018-04-10 14:06:09

Sorry, that's the expected output (it's just a dummy package). What's the output of...

pacman -Qkk ca-certificates-{cacert,mozilla,utils}

Astral Axiom · 2018-04-10 14:14:29

the output of

sudo pacman -Qkk ca-certificates-{cacert,mozilla,utils}

is

ca-certificates-cacert: 10 total files, 0 altered files
ca-certificates-mozilla: 5 total files, 0 altered files
warning: ca-certificates-utils: /etc/ssl/certs/ca-certificates.crt (No such file or directory)
ca-certificates-utils: 25 total files, 1 altered file

so I am guessing that that 1 altered file is referring to the line

warning: ca-certificates-utils: /etc/ssl/certs/ca-certificates.crt (No such file or directory)

which is, clearly, the exact file I removed with the old instruction I followed from the news. So should I run

pacman -S ca-certificates-utils

and then run

ln -s /etc/ca-certificates/extracted/ca-bundle.trust.crt /etc/ssl/certs/ca-certificates.crt

to create the appropriate symbolic link? Or perhaps I should follow the last answer on the article https://unix.stackexchange.com/question … und#339614 and run

pacman -S ca-certificates-utils

and then

systemctl restart docker

Last edited by Astral Axiom (2018-04-10 14:25:43)

Slithery · 2018-04-10 14:26:08

No need to create a link at all, just reinstall the ca-certificate-utils package.

Just to add - the whole reason you have this problem is because you followed the front page news in the first place when you shouldn't have. You deleted the file but then it wasn't reinstalled because the updates you'd downloaded previously didn't contain the ca-certificate-utils package due to you already having an up to date system.

Astral Axiom · 2018-04-10 15:19:04

Thanks, running

pacman -S ca-certificates-utils

fixed the issue and I now have Sublime installed and running. I am curious about what "docker" is now. I see,from the ArchWiki and docker.com, that it has something to do with containers and shipping software, I guess once my coding skills have reached the level of developing applications worthy of distribution I will need to use docker.

So I am confused about your "followed the front page news in the first place when you shouldn't have" comment. The ArchWiki says to always check the news before updating and follow any manual interventions. Do you mean that I just should not have followed that intervention instruction because it was before my system was installed? I should still follow any instructions for manual intervention posted in the Arch news from here onward right?

Scimmia · 2018-04-10 15:30:12

The news item specifically says: "The upgrade to ca-certificates-utils 20170307-1 requires manual intervention". Were you updating to that version?

Reading comprehension is kind of important.

Slithery · 2018-04-10 15:31:03

Astral Axiom wrote:

Do you mean that I just should not have followed that intervention instruction because it was before my system was installed? I should still follow any instructions for manual intervention posted in the Arch news from here onward right?

Correct.

Please remember to mark this thread [SOLVED].
CoC - How to post

Arch Linux

#1 2018-04-10 04:16:33

[SOLVED]ca-certificates.crt update instructions cannot install sublime

#2 2018-04-10 04:28:20

Re: [SOLVED]ca-certificates.crt update instructions cannot install sublime

#3 2018-04-10 04:44:25

Re: [SOLVED]ca-certificates.crt update instructions cannot install sublime

#4 2018-04-10 13:38:24

Re: [SOLVED]ca-certificates.crt update instructions cannot install sublime

#5 2018-04-10 13:45:33

Re: [SOLVED]ca-certificates.crt update instructions cannot install sublime

#6 2018-04-10 14:01:17

Re: [SOLVED]ca-certificates.crt update instructions cannot install sublime

#7 2018-04-10 14:06:09

Re: [SOLVED]ca-certificates.crt update instructions cannot install sublime

#8 2018-04-10 14:14:29

Re: [SOLVED]ca-certificates.crt update instructions cannot install sublime

#9 2018-04-10 14:26:08

Re: [SOLVED]ca-certificates.crt update instructions cannot install sublime

#10 2018-04-10 15:19:04

Re: [SOLVED]ca-certificates.crt update instructions cannot install sublime

#11 2018-04-10 15:30:12

Re: [SOLVED]ca-certificates.crt update instructions cannot install sublime

#12 2018-04-10 15:31:03

Re: [SOLVED]ca-certificates.crt update instructions cannot install sublime

Board footer