clearlinux/distribution#3 reports an issue that clrtrust (by running openssl x509) fails to validate any of the certificates installed in /usr/share/ca-certs/trusted.
Currently, clrtrust allows invalid certificates in /usr/share/ca-certs/trusted. It should, instead, fail if any certificate in /usr/share/ca-certs/trusted cannot be loaded by openssl. The reason to fail is the following: 1. in Clear Linux /usr is immutable and should not be modified and 2. Clear Linux never ships an invalid certificate.
clearlinux/distribution#3 reports an issue that
clrtrust(by runningopenssl x509) fails to validate any of the certificates installed in/usr/share/ca-certs/trusted.Currently,
clrtrustallows invalid certificates in/usr/share/ca-certs/trusted. It should, instead, fail if any certificate in/usr/share/ca-certs/trustedcannot be loaded byopenssl. The reason to fail is the following: 1. in Clear Linux/usris immutable and should not be modified and 2. Clear Linux never ships an invalid certificate.