provide ca-certificate-bundle file for packages reliant on it (unbound | VPN Policy-Based Routing)
https://forum.turris.cz/t/location-of-ca-certificate-bundle-file/7548
OpenWRT/TO repo package ca-certificates 20170717
does not provide a single comprehensive ca-certificate-bundle file for unbound to utilise TLS certificate validation (unbound server directive tls-cert-bundle:
).
Such ca-certificate-bundle can be created from those single certificates provided by the ca-certificates 20170717
package and located in /etc/ssl/certs with e.g. cat /etc/ssl/certs/* > /etc/ssl/certs/cert-bundle.pem
It would be handy to have such automated whenever the ca-certificates [x]
package gets updated from upstream