From 16ffc9f91f7d48e62729747f520da9f4cb5395ff Mon Sep 17 00:00:00 2001 From: Dushnilin Date: Fri, 28 Aug 2026 10:25:06 +0300 Subject: [PATCH] fix(diagnostics): check both ca-certificates.crt and ca-bundle.crt paths On apk-based OpenWrt the file is ca-certificates.crt, not ca-bundle.crt. Check both paths so the CA bundle detection works on opkg and apk. --- tachyon/files/usr/lib/diagnostics/runtime.uc | 16 ++++++++++------ 1 file changed, 10 insertions(+), 6 deletions(-) diff --git a/tachyon/files/usr/lib/diagnostics/runtime.uc b/tachyon/files/usr/lib/diagnostics/runtime.uc index fc5615d5..ecedf075 100644 --- a/tachyon/files/usr/lib/diagnostics/runtime.uc +++ b/tachyon/files/usr/lib/diagnostics/runtime.uc @@ -3191,12 +3191,16 @@ function run_doctor_checks_impl(repair) { // 19. CA Bundle Check — curl HTTPS fails with SSL errors when the // ca-bundle package is missing; the code blames it in TLS verdicts but // never verified it before. - if (fs.stat("/etc/ssl/certs/ca-bundle.crt") != null) { - doc_check("✅", "CA certificates", "ca-bundle present", ""); - } else { - issues++; - doc_check("⚠️", "CA certificates", "/etc/ssl/certs/ca-bundle.crt missing", - "→ установите пакет ca-bundle: без него HTTPS-проверки падают"); + { + let ca_found = fs.stat("/etc/ssl/certs/ca-certificates.crt") != null + || fs.stat("/etc/ssl/certs/ca-bundle.crt") != null; + if (ca_found) { + doc_check("✅", "CA certificates", "ca-bundle present", ""); + } else { + issues++; + doc_check("⚠️", "CA certificates", "/etc/ssl/certs/ missing", + "→ установите пакет ca-bundle: без него HTTPS-проверки падают"); + } } // 20. Port 53 Conflicts — another DNS daemon on port 53 competes with