Merge pull request #12541 from masnax/system-certs

Read system certs directly from `/etc/ssl`
canonical · Nov 22, 2023 · af38cb1 · af38cb1
2 parents f86e644 + 56582e3
commit af38cb1
Showing 1 changed file with 0 additions and 9 deletions.
diff --git a/shared/network_unix.go b/shared/network_unix.go
@@ -4,7 +4,6 @@ package shared
 
 import (
 	"crypto/x509"
-	"os"
 )
 
 func systemCertPool() (*x509.CertPool, error) {
@@ -14,13 +13,5 @@ func systemCertPool() (*x509.CertPool, error) {
 		return nil, err
 	}
 
-	// Attempt to load the system's pool too (for snaps)
-	if PathExists("/var/lib/snapd/hostfs/etc/ssl/certs/ca-certificates.crt") {
-		snapCerts, err := os.ReadFile("/var/lib/snapd/hostfs/etc/ssl/certs/ca-certificates.crt")
-		if err == nil {
-			pool.AppendCertsFromPEM(snapCerts)
-		}
-	}
-
 	return pool, nil
 }