DMARC-Filter:	OpenDMARC Filter v1.4.2 delorie.com 61NKZBNl3579641
Authentication-Results:	delorie.com; dmarc=pass (p=none dis=none) header.from=cygwin.com
Authentication-Results:	delorie.com; spf=pass smtp.mailfrom=cygwin.com
DKIM-Filter:	OpenDKIM Filter v2.11.0 delorie.com 61NKZBNl3579641
Authentication-Results:	delorie.com;
	dkim=pass (1024-bit key, unprotected) header.d=cygwin.com header.i=@cygwin.com header.a=rsa-sha256 header.s=default header.b=a+IMkfTh
X-Recipient:	archive-cygwin AT delorie DOT com
DKIM-Filter:	OpenDKIM Filter v2.11.0 sourceware.org 0CAFB4B9DB6A
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1771878910;
	bh=m1Ji8M+SUNWg0rX+VKijTUmxhKDGXDv2Pi9pEllVJrk=;
	h=Date:Subject:To:References:In-Reply-To:List-Id:List-Unsubscribe:
	List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To:Cc:
	From;
	b=a+IMkfThFTUUB+PVvoEZuREUfVoLeRKSa+TJHTOaxs905pKZ/l4EJqO5M6JglN30R
	Z+XiWjpt8Vj9T4TbdCttAERKIsoP5iVEgjD8kXySrGa3fgxfBgYiWMJXeuB9xxbqqA
	YjYBMwROCmi0/7ago5bzyf7S4Fewjtsu1EBaf+tM=
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.4.2 sourceware.org EEF864BA2E0F
ARC-Filter:	OpenARC Filter v1.0.0 sourceware.org EEF864BA2E0F
ARC-Seal:	i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1771878861; cv=none;
	b=CNHg4Rn0/h7IjI2eEiW+EZjiv1wKXgq5vl/tazOXvNlXaOzrKxjpDO1mFaPgG8Rjqs+7odkCzovtRnyXZnVfTNCTBeHFqROo5pshTQqQAwo6MVhCjIyk0g3rI4gURTlj/FtGJnfQqSyCxAp+2N/79jEi/3dlPaQhg6kFT7iZE9g=
ARC-Message-Signature:	i=1; a=rsa-sha256; d=sourceware.org; s=key;
	t=1771878861; c=relaxed/simple;
	bh=ZWfG1bi6RKPihLDBZ6SftGOvAVfEEBzftfTbRi1m61Q=;
	h=Message-ID:Date:MIME-Version:From:Subject:To:DKIM-Signature;
	b=PUwTx8ZXT1GG9LHqwQ9bYu6kfmzhqBF+0q0vz53AQhfO4DiC52B1BEResQOG/Iva9jLXFmNLFiIza7MPlwjy99LwuHctdfkPrygCtPaFyfoSUr5QC1PYnsQJkbqVAx9YGvmkkz72tJ+h31Z9TKBOlReGAmuC0Igqka4zIHB38/4=
ARC-Authentication-Results:	i=1; server2.sourceware.org
DKIM-Filter:	OpenDKIM Filter v2.11.0 sourceware.org EEF864BA2E0F
Message-ID:	<f74b5f31-2f18-483a-a777-11ec0a655f40@SystematicSW.ab.ca>
Date:	Mon, 23 Feb 2026 13:34:18 -0700
MIME-Version:	1.0
User-Agent:	Mozilla Thunderbird
Subject:	Re: The file /etc/pki/tls/certs/ca-bundle.crt is empty
To:	cygwin AT cygwin DOT com
References:	<CAPOVtOu6NVYeXrtX0D9NdarGZcUu-xP=3Ykb7WztpG-Be44Hkw AT mail DOT gmail DOT com>
Organization:	Systematic Software
In-Reply-To:	<CAPOVtOu6NVYeXrtX0D9NdarGZcUu-xP=3Ykb7WztpG-Be44Hkw@mail.gmail.com>
X-Rspamd-Queue-Id:	184F08001B
X-Stat-Signature:	jcegruuhphrob7txfxfmsh4mh3qhtzpi
X-Rspamd-Server:	rspamout08
X-Session-Marker:	427269616E2E496E676C69734053797374656D6174696353572E61622E6361
X-Session-ID:	U2FsdGVkX18W12adlMbmQuKgJv1u4k7+3veRLDR75Fo=
X-HE-Tag:	1771878858-517570
X-HE-Meta:	U2FsdGVkX1/wxvML+GfiUC9ezhoAmC0CbZb0DCoc4GxDx+nPOCqhkzl0U7dm+/YCCKCGyfEXjWtxaclTV6wiAp+Td9dH1hQFnj8Vql19d9H2aLZg13XY5Qiq9lWUIXjVfrxcY+QnUM/Vz7DIOqoWK/ic66rypnO9GITRTfyzrOpn94aE8mgCGnEgMoH0sesbX4bwdlpGo70LrmfUWWSED43+xrSoGHvOgNKqmAJZic48ZWq78z4/+IKXofUgt4x2yOSVzE33/fiXy5/gZwXjPzXkuTXET1CdzyYz71HGcToH5X9U2FP7b9voFL2At29lc61GbJGB8jejmgldDjtjyipTbtvvJxj6G8hW2kLh+vrmvZXfg5Bx4/WWJ5YkgHSc2GHnE7jWyYo1csONqt0/WKePPRuOZUe2QYJV9uXeducwBYv5a9k+GQ==
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.30
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe:	<https://cygwin.com/mailman/options/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From:	Brian Inglis via Cygwin <cygwin AT cygwin DOT com>
Reply-To:	cygwin AT cygwin DOT com
Cc:	Brian Inglis <Brian DOT Inglis AT SystematicSW DOT ab DOT ca>
Errors-To:	cygwin-bounces~archive-cygwin=delorie DOT com AT cygwin DOT com
Sender:	"Cygwin" <cygwin-bounces~archive-cygwin=delorie DOT com AT cygwin DOT com>
X-MIME-Autoconverted:	from base64 to 8bit by delorie.com id 61NKZBNl3579641

On 2026-02-23 10:46, 徐持恒 Xu Chiheng via Cygwin wrote:
> # file /etc/pki/tls/certs/ca-bundle.crt
> /etc/pki/tls/certs/ca-bundle.crt: symbolic link to
> /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
> 
> # git clone https://gitlab.com/qemu-project/qemu.git
> Cloning into 'qemu'...
> fatal: unable to access 'https://gitlab.com/qemu-project/qemu.git/':
> error adding trust anchors from file: /etc/pki/tls/certs/ca-bundle.crt
> 
> This will cause curl and git not be able to download https urls, and
> will let git build fail to produce a usable git.
> 
> # git clone https://gitlab.com/qemu-project/qemu.git
> Cloning into 'qemu'...
> warning: templates not found in
> /cygdrive/e/Note/Tool/git-cygwin-clang-bfd-release-install/share/git-core/templates
> git: 'remote-https' is not a git command. See 'git --help'.
> fatal: remote helper 'https' aborted session
> 
> Temporary fix(link to a previous working tls-ca-bundle.pem) :
> https://github.com/xu-chiheng/Note/blob/main/.bashrc.d/quirk.sh#L125
> fix_cygwin_tls_certs() {
>      local source=/etc/pki/tls/certs/ca-bundle.crt
>      local target=~/Util/tls-ca-bundle.pem
>      if ! { [ -e "${source}" ] && [ "$(readlink -f "${source}")" =
> "$(readlink -f "${target}")" ] ;}; then
>          rm -rf "${source}" \
>          && ln -s "${target}" "${source}"
>      fi
> }

Works Just Fine For Me: how up to date is your installation?

$ git clone https://gitlab.com/qemu-project/qemu.git
Cloning into 'qemu'...
remote: Enumerating objects: 870635, done.
remote: Counting objects: 100% (18355/18355), done.
remote: Compressing objects: 100% (5177/5177), done.
remote: Total 870635 (delta 13202), reused 18169 (delta 13125), pack-reused 
852280 (from 1)
Receiving objects: 100% (870635/870635), 408.18 MiB | 28.74 MiB/s, done.
Resolving deltas:  76% (556045/729081)
$ ll -gG 
/etc/pki/{ca-trust/extracted/pem/tls-ca-bundle.pem,tls/certs/ca-bundle.crt} 
/usr/bin/git /usr/bin/cygwin1.dll
-r--r--r--   1 241K Oct 15 07:00 /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
lrwxrwxrwx   1   49 Oct 15 06:49 /etc/pki/tls/certs/ca-bundle.crt -> 
/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
-rwxr-xr-x   1 3.1M Jan  9 10:48 /usr/bin/cygwin1.dll*
-rwxr-xr-x 145 3.7M Aug 30 04:28 /usr/bin/git*
$ cygcheck -f 
/etc/pki/{ca-trust/extracted/pem/tls-ca-bundle.pem,tls/certs/ca-bundle.crt} 
/usr/bin/git /usr/bin/cygwin1.dll
ca-certificates-2025.2.80_v9.0.304-1
ca-certificates-2025.2.80_v9.0.304-1
cygwin-3.6.6-1
git-2.51.0-1
$ cygcheck -c ca-certificates cygwin git
Cygwin Package Information
Package              Version                    Status
ca-certificates      2025.2.80_v9.0.304-1     OK
cygwin               3.6.6-1                  OK
git                  2.51.0-1                 OK

-- 
Take care. Thanks, Brian Inglis              Calgary, Alberta, Canada

La perfection est atteinte                   Perfection is achieved
non pas lorsqu'il n'y a plus rien à ajouter  not when there is no more to add
mais lorsqu'il n'y a plus rien à retrancher  but when there is no more to cut
                                 -- Antoine de Saint-Exupéry

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -