URL: https://github.com/freeipa/freeipa/pull/4102 Author: yrro Title: #4102: [WIP] Debian: write out only one CA certificate per file Action: opened

PR body: """ ca-certificates populates /etc/ssl/certs with symlinks to its input files and then runs 'openssl rehash' to create the symlinks that libssl uses to look up a CA certificate to see if it is trused.

'openssl rehash' ignores any files that contain more than one certificate: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=945274.

With this change, we write out trusted CA certificates to /usr/local/share/ipa-ca, one certificate per file.

Fixes: https://pagure.io/freeipa/issue/8106 """

To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/4102/head:pr4102 git checkout pr4102