On Tue, 16 Dec 2014 06:49:55 -0800, Kyle Terrien wrote: > On 12/16/2014 04:13 AM, Ralf Mardorf wrote: > > I never add one and they don't belong to a package: > > # pacman -Qo [...].pem error: No package owns [...].pem > > > > Can I delete them? > > I don't think you're supposed to. They are created when the > certificate packages are installed. > > From my understanding, in this case "locally installed" means anything > you installed manually. > > <https://bbs.archlinux.org/viewtopic.php?pid=1483835#p1483835> Thank you. It's not always easy to remember what was done or never was done manually. $ cat .xsession-errors [snip] p11-kit: certificate with distrust in location for anchors: Explicitly_Distrusted_[snip].crt [snip] I restored the original state by # rm /etc/ssl/certs/* # cd /etc/ca-certificates/trust-source/anchors/ # rename -v \.crt .pem * # mv * /etc/ssl/certs/ # trust extract-compat and now there aren't p11-kit messages in $HOME/.xsession-errors anymore. Regards, Ralf
