Fixes #37828: Ignore system CA trust when verifying certificates

(cherry picked from commit d54d28a)
theforeman · Oct 11, 2024 · 914c3cb · 914c3cb
1 parent 3e12c9e
commit 914c3cb
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/bin/katello-certs-check b/bin/katello-certs-check
@@ -157,7 +157,7 @@ function check-priv-key () {
 function check-ca-bundle () {
     printf "Checking CA bundle against the certificate file: "
     ERROR_PATTERN="error [0-9]+ at"
-    CHECK=$(openssl verify -CAfile $CA_BUNDLE_FILE -purpose sslserver -verbose $CERT_FILE 2>&1)
+    CHECK=$(openssl verify -no-CApath -no-CAstore -CAfile $CA_BUNDLE_FILE -purpose sslserver -verbose $CERT_FILE 2>&1)
     CHECK_STATUS=$?
 
     if [[ $CHECK_STATUS != "0" || $CHECK =~ $ERROR_PATTERN ]]; then