The file /etc/pki/tls/certs/ca-bundle.crt is empty

[Andrey Repin]

Greetings, 徐持恒 Xu Chiheng!

> # file /etc/pki/tls/certs/ca-bundle.crt
> /etc/pki/tls/certs/ca-bundle.crt: symbolic link to
> /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem

> # git clone https://gitlab.com/qemu-project/qemu.git
> Cloning into 'qemu'...
> fatal: unable to access 'https://gitlab.com/qemu-project/qemu.git/':
> error adding trust anchors from file: /etc/pki/tls/certs/ca-bundle.crt

> This will cause curl and git not be able to download https urls, and
> will let git build fail to produce a usable git.

> # git clone https://gitlab.com/qemu-project/qemu.git
> Cloning into 'qemu'...
> warning: templates not found in
> /cygdrive/e/Note/Tool/git-cygwin-clang-bfd-release-install/share/git-core/templates
> git: 'remote-https' is not a git command. See 'git --help'.
> fatal: remote helper 'https' aborted session

> Temporary fix(link to a previous working tls-ca-bundle.pem) :
> https://github.com/xu-chiheng/Note/blob/main/.bashrc.d/quirk.sh#L125
> fix_cygwin_tls_certs() {
>     local source=/etc/pki/tls/certs/ca-bundle.crt
>     local target=~/Util/tls-ca-bundle.pem
>     if ! { [ -e "${source}" ] && [ "$(readlink -f "${source}")" =
> "$(readlink -f "${target}")" ] ;}; then
>         rm -rf "${source}" \
>         && ln -s "${target}" "${source}"
>     fi
> }

This likely have a different cause.
Check if your /etc/ssl/certs is empty. If so,
try this command with elevated shell:

/usr/bin/trust extract --format=openssl-bundle --filter=certificates --overwrite --comment /etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt



-- 
With best regards,
Andrey Repin
Friday, February 27, 2026 13:28:50

Sorry for my terrible english...