WARNING: ca-certificates.crt does not contain exactly one certificate or CRL: skipping
c_rehash
is always logging this spurious warning, which is confusing.
WARNING: ca-certificates.crt does not contain exactly one certificate or CRL: skipping
This happens because update-ca-certificates
writes the file /etc/ssl/certs/ca-certificates.crt
before invoking c_rehash /etc/ssl/certs
.
update-ca-certificates
should:
- remove the bundle,
- invoke
run-parts
, - wait until it finishes,
- then write the new bundle.
That is also how it works on Debian.