FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

Uninstall leaves a stale system CA anchor after a failed bundle refresh · Issue #20 · profullstack/moshpit-proxy · GitHub

Uninstall leaves a stale system CA anchor after a failed bundle refresh #20

Description

Bug

status() correctly reports a system CA store as not installed when the anchor file exists but the rebuilt trust bundle does not contain it. However, uninstall() treats that status as proof that nothing is present and returns before deleting the anchor file.

This leaves a dormant root certificate in the distribution's anchor directory after the user asked to remove it. A later package update or manual update-ca-certificates run can add that root back to the active bundle.

Reproduction

  1. Place moshpit-local-ca.crt in a recognized system anchor directory.
  2. Leave the generated bundle without that certificate (for example, the original refresh failed).
  3. Run uninstall.
  4. The command reports that the root was not present, but the anchor file remains.

Expected

For system CA stores, uninstall should remove an existing anchor file and rebuild the bundle even when the root is not currently active.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions


    Back | FazBrowse Home | New Git URL