From 2e1a5cbfe1599110d3383b1ac3b16ec6477a34ef Mon Sep 17 00:00:00 2001
From: Aminda Suomalainen <suomalainen+git@mikaela.info>
Date: Sun, 20 Aug 2023 11:13:51 +0300
Subject: [PATCH] chrony: add ca-certificates.conf to explicitly specify their
 location

---
 etc/chrony/conf.d/ca-certificates.conf | 6 ++++++
 1 file changed, 6 insertions(+)
 create mode 100644 etc/chrony/conf.d/ca-certificates.conf

diff --git a/etc/chrony/conf.d/ca-certificates.conf b/etc/chrony/conf.d/ca-certificates.conf
new file mode 100644
index 00000000..95e777e1
--- /dev/null
+++ b/etc/chrony/conf.d/ca-certificates.conf
@@ -0,0 +1,6 @@
+# CA-certificates for Chrony to trust NTS servers. Can be specified multiple
+# times
+# Debian
+ntstrustedcerts /etc/ssl/certs/ca-certificates.crt
+# Fedora
+ntstrustedcerts /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem