lix/doc/manual/rl-next/ssl-cert-symlink.md
Lily Ballard 684f93e783 libstore: ignore broken symlinks in ssl-cert-file default
Also tweak `pathAccessible` to ignore other relevant errors too. It was
documented as ignoring permission errors but it was only ignoring
`EPERM`, which comes from the darwin sandbox, and not ignoring `EACCESS`
which is the real permission error. I figured it also makes sense to
ignore `ELOOP`.

Fixes: #560
Change-Id: Ibb849b68d07386eb80afb52b57f7d12b3a48a202
2024-10-30 19:50:38 -07:00

521 B

synopsis issues cls category credits
Ignore broken `/etc/ssl/certs/ca-certificates.crt` symlink
fj#560
2144
Fixes lilyball

ssl-cert-file now checks its default value for a broken symlink before using it. This fixes a problem on macOS where uninstalling nix-darwin may leave behind a broken symlink at /etc/ssl/certs/ca-certificates.crt that was stopping Lix from using the cert at /nix/var/nix/profiles/default/etc/ssl/certs/ca-bundle.crt.