糖类抗原ca15-3:在Archlinux中删除DST_Root_CA

在 2021-09-30the Lets Encrypt certificate DST_ROOT_CA_X3 expired。我有一个较旧的 Archlinux 构建,现在失败的基本 https 请求让加密域。

例如：curl -sv https://serveult.com产生：

* Rebuilt URL to: https://serveult.com/
*   Trying 151.101.193.69...
* TCP_NODELAY set
* Connected to serveult.com (151.101.193.69) port 443 (#0)
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: none
* TLSv1.2 (OUT), TLS header, Certificate Status (22):
} [5 bytes data]
* TLSv1.2 (OUT), TLS handshake,  hello (1):
} [512 bytes data]
* TLSv1.2 (IN), TLS handshake, Server hello (2):
{ [108 bytes data]
* TLSv1.2 (IN), TLS handshake, Certificate (11):
{ [4487 bytes data]
* TLSv1.2 (OUT), TLS alert, Server hello (2):
} [2 bytes data]
* SSL certificate problem: certificate rejected
* Curl_http_done: called premature == 1
* Closing connection 0
} [5 bytes data]
* TLSv1.2 (OUT), TLS alert,  hello (1):
} [2 bytes data]

I have found other posts that describe how to remove this certificate on Ubuntu based builds。我不熟悉 Archlinux-你如何去做同样的事情？

有一个ca-certificates包，很可能只需要更新。