Home / ubuntu / Questions / 735759
Accepted
Toby
Asked: 2016-02-18 04:59:14 +0800 CST

No certificate files inside of /usr/lib/ssl

  • 772

I don't appear to have any SSL certs installed on my machine and it is causing issues with wget and Faraday called within Rails.

When I run openssl version -a I am told my OPENSSLDIR is "/usr/lib/ssl".

When I look inside /usr/lib/ssl/certs it is empty.

When I run sudo apt-get install ca-certificates I am told that ca-certificates is already at the newest version and when I run sudo update-ca-certificates I get the following output;

Updating certificates in /etc/ssl/certs... 0 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d....
There was a problem saving the new Java keystore. Message:
  /etc/ssl/certs/java/cacerts (No such file or directory)
E: /etc/ca-certificates/update.d/jks-keystore exited with code 1.
done.

I have two questions.

1) Am I barking up the wrong tree? Is it normal for /usr/lib/ssl/certs to be empty

2) What is the next step I should take?

Update

When I run dpkg -L ca-certificates (Thanks to this question) I can see plenty of mozilla certs stored in /usr/share/ca-certificates/mozilla/

ssl

1 Answers

  1. Best Answer

    I suspect that if you create the folder /etc/ssl/certs/java/, it will allow the sudo update-ca-certificates to complete. It looks like it just isn't able to create the file because it's parent folder doesn't exist.

    • 2