I have removed a (root) certicate, and re-run
$ sudo rm /usr/local/share/ca-certificates/mine.root-ca.crt ls -l /usr/local/share/ca-certificates/ total 4 -rw-r--r-- 1 root root 1838 Feb 16 2017 something-else.crt $ sudo update-ca-certificates Updating certificates in /etc/ssl/certs... 0 added, 0 removed; done. Running hooks in /etc/ca-certificates/update.d... done.
$ ls -l /etc/ssl/certs/mine.root-ca.pem lrwxrwxrwx 1 root root 53 Jun 4 07:22 /etc/ssl/certs/mine.root-ca.pem -> /usr/local/share/ca-certificates/mine.root-ca.crt
But that file (
/usr/local/share/ca-certificates/mine.root-ca.crt) does not exist anymore.
0 added, 0 removed; done. is suspicious: it should say
Certificate validation does not work anymore for the domain in question (as expected), but these two facts annoy me:
- the lingering link
- the fact that
update-ca-certificatesdoes not seem to do anything
I am in:
$ lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 16.04.4 LTS Release: 16.04 Codename: xenial