From 6587a0f25796ff436cfcd5841c9a819dad81821e Mon Sep 17 00:00:00 2001
From: Jan Palus <atler@pld-linux.org>
Date: Thu, 22 Oct 2020 14:54:42 +0200
Subject: [PATCH] remove dead links in /etc/openssl/certs when uninstalling
 update

---
 ca-certificates.spec | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/ca-certificates.spec b/ca-certificates.spec
index 619d69f..cd2f8b1 100644
--- a/ca-certificates.spec
+++ b/ca-certificates.spec
@@ -1,5 +1,4 @@
 # TODO
-# - cleanup dead links from /etc/openssl/certs after -update uninstall
 # - https://bugzilla.mozilla.org/show_bug.cgi?id=549701 and
 #   http://groups.google.com/group/mozilla.dev.security.policy/browse_thread/thread/b6493a285ba79998#
 # - make amsn use system certs
@@ -257,6 +256,9 @@ rm -rf $RPM_BUILD_ROOT
 %post update
 %{_sbindir}/update-ca-certificates --fresh || :
 
+%postun update
+/usr/bin/find "%{openssldir}" -xtype l -delete || :
+
 %files
 %defattr(644,root,root,755)
 %doc work/debian/{README.Debian,changelog}
-- 
2.44.0