DMARC-Filter:	OpenDMARC Filter v1.4.2 delorie.com 61NHl8253521045
Authentication-Results:	delorie.com; dmarc=pass (p=none dis=none) header.from=cygwin.com
Authentication-Results:	delorie.com; spf=pass smtp.mailfrom=cygwin.com
DKIM-Filter:	OpenDKIM Filter v2.11.0 delorie.com 61NHl8253521045
Authentication-Results:	delorie.com;
	dkim=pass (1024-bit key, unprotected) header.d=cygwin.com header.i=@cygwin.com header.a=rsa-sha256 header.s=default header.b=ELAG9HJX
X-Recipient:	archive-cygwin AT delorie DOT com
DKIM-Filter:	OpenDKIM Filter v2.11.0 sourceware.org 6270C4B9DB63
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1771868826;
	bh=uyXEL4WPg6BniQRPnVdAOA0rs2WpedDl17YSzvY4SQ8=;
	h=Date:Subject:To:List-Id:List-Unsubscribe:List-Archive:List-Post:
	List-Help:List-Subscribe:From:Reply-To:From;
	b=ELAG9HJXeWhQccKORUBlNV7A5U6qXi/Eo+432bLMHDE0EOkx7eb4AF14QFzqT8LTU
	9CGJfPMBHf5wEpWBZRnWFiwJskBK11Af3Mq/OCEKbqOkH4TfCdrpUXpflL07xkizK8
	jnMbWto4hdzte+609yVGA9xhS8rCQuCzB0sSxwEE=
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.4.2 sourceware.org 986824B9DB48
ARC-Filter:	OpenARC Filter v1.0.0 sourceware.org 986824B9DB48
ARC-Seal:	i=2; a=rsa-sha256; d=sourceware.org; s=key; t=1771868776; cv=pass;
	b=RN/XPvGowrxEaNBHZStdvKJiaq10d9PBh3VCnLfcVjXrMKwmsua+VztvasoYD7hZDeOlKZPMf+46zMj4Sc8vaDR2ieSKnvIZoQDeBy/ZaMVqSF1klaanpv+qAYO5LXAjsi59BXEtnErGfKi3XBWgNmXMuhlMS5ij/9T0OE3YnkQ=
ARC-Message-Signature:	i=2; a=rsa-sha256; d=sourceware.org; s=key;
	t=1771868776; c=relaxed/simple;
	bh=wOzXU/up7X1DLKfdGtfnW9yZ81aBh/zgxhFTdvmljGM=;
	h=DKIM-Signature:MIME-Version:From:Date:Message-ID:Subject:To;
	b=cOQWjeVjdgzA+jV3JYlV2rKVMOBsqfEMge8p80OvU/Ygai/yzYsZr3LSf/PFOLBa4itMyHY1OzD5R95NzRGeX+2Unxpxs0lyjN456TkhL6lFIj9CDo9tc2te+a+4jGCYaXnonLFOIYiqliJDNLR/s25SA4emobVFLQR8qmvfzag=
ARC-Authentication-Results:	i=2; server2.sourceware.org
DKIM-Filter:	OpenDKIM Filter v2.11.0 sourceware.org 986824B9DB48
ARC-Seal:	i=1; a=rsa-sha256; t=1771868776; cv=none;
	d=google.com; s=arc-20240605;
	b=i20mommz6QgTAtdAnCTjqcA98WlvVGhbF0X3e2/EGSq3E2cJlizND6Cm0SJIGo3ZAg
	3Cd9voa4qCp2s0ZQBHq936f1A8FO0PAvw4/1DAJP5HvNgx3cwB0FInpb2VRuif1fjHN4
	GhgoYpqumrTQfgJqD+OBZxZ4UtXXJaOIaZmcj9EgM1nhH2tpI6upBJoIwei2wua8kroE
	Oko96jDnRUNU3kSFXxZHUDzLG8BKpJ/blYim6lGkH4UXPoKIL4m1npVu1GowNz9EHYHd
	ckkXMyQhnycyiMarWr+SugtDKDmWS+q0/etuwtYVUFWCG1a7y77W2TPs/4qaCiWV/AY2
	VRkA==
ARC-Message-Signature:	i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com;
	s=arc-20240605;
	h=to:subject:message-id:date:from:mime-version:dkim-signature;
	bh=06E6uJdJTFuF6gskcEfNE0VA0GpFB23iSJodZ9Isyog=;
	fh=UKNFaOBO97U3RYl3PEse//nArTqr7SLJjCCEBz281Ew=;
	b=jPMbHOX/Fm1OCon9wfaMRpUjkPZUNpm5+2qrcG6DgT3JzU1+8CzBLkdOO8FcV2tPRY
	wo1f9AntR3b8ahmWch0X8dzlMX6/VpVoQDwZ1//EPJUa+qSrmR4QFp6UCP9gy/JqfVZS
	W9jAX23xDQnyxkcFDjSfLpoAzYXy4q7ldP7Xlo5Z6dZ0aFWRSITHVq1hqcboR3th5bC9
	Xao4dWS/CP3kzyRoE4RWO2+SVu43BvkjodlChUQ4TofLqHwFrTJKrSyDs70Xja2ZJloH
	MA7OUUHEBJWk/ieVgKZ4icmgSw86sODeO7y11asIXQeU4Vk3/zxG0XdFoVOoTbjivxdc
	KbeA==; darn=cygwin.com
ARC-Authentication-Results:	i=1; mx.google.com; arc=none
X-Google-DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=1e100.net; s=20230601; t=1771868776; x=1772473576;
	h=to:subject:message-id:date:from:mime-version:x-gm-gg
	:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
	bh=06E6uJdJTFuF6gskcEfNE0VA0GpFB23iSJodZ9Isyog=;
	b=E/ntvjHkMe4lZIX8OsX7Vxj/MdZxpjLGwnYe830KZQk/pMyWw+tr9dQJgcjU/M5+hd
	3d0BXrf9zCmm0QJawsSPvFZckoCopxIxTSThNIoheEVi6Pbqo6nmUxIgsO8h7L/M4x40
	k4W4AkihZ1z0d+2tNGQ6Y4bpU73yPKFEReaA18gD4NGGSWMybdvu0KFgrTxKLCzoYIBV
	GcGA2xBLgdRuWDmEqG1Np/SEqYJqZA/wAsW6UV4dsoq/bwTJttaZ6VOnqr2LFhZURuVu
	WwdffSEFsmYICLAMTVrXTYctZxIZPGMGynLM/Uh3bIO8liTjlB6YjF/MmVr8MYlEIHIV
	Shgw==
X-Gm-Message-State:	AOJu0Yz1yZ5iYTXcqfdoJVB984DPPzS3kAscW42LDHj3XrJ2fOuhkO7a
	2rsJdxkXAD9nhEcQZG9wFtMDpDjbJ01Wt+sKnu68W1NP5ImAZsO+B7yA8X5euY9F9YEHNqkHmYQ
	HfhFysWmceVyycg20QLps5ke57dZxNY9GiIR0
X-Gm-Gg:	ATEYQzzagpYWopcg5l0nv/MiyeNh39pxkss3YmNQ7PV2wom/1Lrme8XXxC9aq5ORdcI
	0UXICp2XkUSP/cis6dSl70wpiz3mnLUYq5gSy7gIxEDVpti2hJrnIZVHXXiQx7nE/4XC5ZNfLgJ
	FhoXBpRo/UXP3s8WY9H4tcZjBrBuskU+QtHGt+Z0WmPF4Iyyiqsy7xvpkn6aeOvupbVv7JEeFG5
	JCVJSwq85+/1uf0uI5vJKni5Gchg2oR7YrixXew91kYfyefi5hj3EOX4bIRIGRU4fGWlTQdl8Gb
	E3AWUXiL
X-Received:	by 2002:a05:690c:387:b0:798:806:2c7c with SMTP id
	00721157ae682-79828ac39damr88262887b3.0.1771868775927; Mon, 23 Feb 2026
	09:46:15 -0800 (PST)
MIME-Version:	1.0
Date:	Tue, 24 Feb 2026 01:46:05 +0800
X-Gm-Features:	AaiRm51UsWAv0x063qsICQmv1gKuhr6qM0SHJrfffIscbRENa3OpGVAuUnyQl50
Message-ID:	<CAPOVtOu6NVYeXrtX0D9NdarGZcUu-xP=3Ykb7WztpG-Be44Hkw@mail.gmail.com>
Subject:	The file /etc/pki/tls/certs/ca-bundle.crt is empty
To:	cygwin AT cygwin DOT com
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.30
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From:	=?utf-8?b?5b6Q5oyB5oGSIFh1IENoaWhlbmcgdmlhIEN5Z3dpbg==?=
	<cygwin AT cygwin DOT com>
Reply-To:	=?UTF-8?B?5b6Q5oyB5oGSIFh1IENoaWhlbmc=?= <chiheng DOT xu AT gmail DOT com>
Sender:	"Cygwin" <cygwin-bounces~archive-cygwin=delorie DOT com AT cygwin DOT com>

# file /etc/pki/tls/certs/ca-bundle.crt
/etc/pki/tls/certs/ca-bundle.crt: symbolic link to
/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem

# git clone https://gitlab.com/qemu-project/qemu.git
Cloning into 'qemu'...
fatal: unable to access 'https://gitlab.com/qemu-project/qemu.git/':
error adding trust anchors from file: /etc/pki/tls/certs/ca-bundle.crt

This will cause curl and git not be able to download https urls, and
will let git build fail to produce a usable git.

# git clone https://gitlab.com/qemu-project/qemu.git
Cloning into 'qemu'...
warning: templates not found in
/cygdrive/e/Note/Tool/git-cygwin-clang-bfd-release-install/share/git-core/templates
git: 'remote-https' is not a git command. See 'git --help'.
fatal: remote helper 'https' aborted session

Temporary fix(link to a previous working tls-ca-bundle.pem) :
https://github.com/xu-chiheng/Note/blob/main/.bashrc.d/quirk.sh#L125
fix_cygwin_tls_certs() {
    local source=/etc/pki/tls/certs/ca-bundle.crt
    local target=~/Util/tls-ca-bundle.pem
    if ! { [ -e "${source}" ] && [ "$(readlink -f "${source}")" =
"$(readlink -f "${target}")" ] ;}; then
        rm -rf "${source}" \
        && ln -s "${target}" "${source}"
    fi
}

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -