#1146779 dracut[W]: Couldn't find SSL CA cert bundle or libnssckbi.so; HTTP S won't work

#1146779#5
Date:
2026-09-05 16:07:26 UTC
From:
To:
Hi,

the dracut module 45url-lib installed into dracut-network always
produces this warning:
  dracut[W]: Couldn't find SSL CA cert bundle or libnssckbi.so; HTTPS won't work

I assume the warning is correct.

Looking at the implementation in
/usr/lib/dracut/modules.d/45url-lib/module-setup.sh , it appears to
discover the CA bundle compiled into curl by grepping the libcurl.so
binary. However it only tries /usr/lib, which is not where Debian
installs libcurl. It would also need to try
/usr/lib/<multiarch-triplet>.

I imagine instead of discovering the path, on Debian it could just
copy /etc/ssl/certs/ca-certificates.crt , which is the
Debian-blessed CA bundle.

Please fix 45url-lib somehow; I imagine either support multiarch
paths or assume the Debian CA bundle path.

Many thanks,
Chris