From d54d28ad6e329a47267595564b514d94cf17bbc5 Mon Sep 17 00:00:00 2001
From: "Eric D. Helms" <ericdhelms@gmail.com>
Date: Thu, 29 Aug 2024 07:18:59 -0400
Subject: [PATCH] Fixes #37828: Ignore system CA trust when verifying
 certificates

---
 bin/katello-certs-check | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/katello-certs-check b/bin/katello-certs-check
index ad4558df..9913ed00 100755
--- a/bin/katello-certs-check
+++ b/bin/katello-certs-check
@@ -157,7 +157,7 @@ function check-priv-key () {
 function check-ca-bundle () {
     printf "Checking CA bundle against the certificate file: "
     ERROR_PATTERN="error [0-9]+ at"
-    CHECK=$(openssl verify -CAfile $CA_BUNDLE_FILE -purpose sslserver -verbose $CERT_FILE 2>&1)
+    CHECK=$(openssl verify -no-CApath -no-CAstore -CAfile $CA_BUNDLE_FILE -purpose sslserver -verbose $CERT_FILE 2>&1)
     CHECK_STATUS=$?
 
     if [[ $CHECK_STATUS != "0" || $CHECK =~ $ERROR_PATTERN ]]; then