That’s the real location of the certs, but once again they usually make a symlink in /etc/ssl/certs/ca-certificates.crt
One library that is problematic is p11-kit, this one usually comes with a different path to the certs hardcoded and does not respect env variables unless it is compiled with a specific flag which no distro uses.
If they could just decide where TLS certificates live…
Most distros have
/etc/ssl/certs/ca-certificates.crt, sometimes it is a symlink but that location is there in ubuntu, alpine, fedora and arch.edit: Also you can usually change this location with an env variable.
If only it were so simple. https://serverfault.com/a/722646
That’s the real location of the certs, but once again they usually make a symlink in
/etc/ssl/certs/ca-certificates.crtOne library that is problematic is p11-kit, this one usually comes with a different path to the certs hardcoded and does not respect env variables unless it is compiled with a specific flag which no distro uses.
So I had to do this hack to fix that library.