# Is it possible to remove ca-certificate dependency from stand-alone mender 2.0?

**URL:** https://hub.mender.io/t/is-it-possible-to-remove-ca-certificate-dependency-from-stand-alone-mender-2-0/3225
**Category:** General Discussions
**Tags:** yocto, sumo, nxp, standalone
**Created:** [February 16, 2021, 10:40am UTC](https://hub.mender.io/t/is-it-possible-to-remove-ca-certificate-dependency-from-stand-alone-mender-2-0/3225 "2021-02-16T10:40:40Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![ajithpv](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/ajithpv/32/728_2.png) [@ajithpv](https://hub.mender.io/u/ajithpv)
#### Post date: [February 16, 2021, 10:40am UTC](https://hub.mender.io/t/is-it-possible-to-remove-ca-certificate-dependency-from-stand-alone-mender-2-0/3225/1 "2021-02-16T10:40:40Z")

</div>

Hi,

I’m using Mender 2.0 in stand-alone mode and as part of the security requirements, I need to remove the _ca-certificate_ from the Yocto (we are using sumo version).

When I removed the _ca-certificate_, the below error pop ups:

 ![ca-certificate_mender](https://canada1.discourse-cdn.com/flex036/uploads/mender/original/2X/3/3de1bf83aca969f8750d2e4e1734c5f4c8d2496d.png)

I would like to know whether mender stand-alone required _ca-certificate_? If not, then may I know how to remove it?

---

<div class="post-metadata">

### Author: ![dellgreen](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/dellgreen/32/85_2.png) [@dellgreen](https://hub.mender.io/u/dellgreen)
#### Post date: [February 16, 2021, 11:38am UTC](https://hub.mender.io/t/is-it-possible-to-remove-ca-certificate-dependency-from-stand-alone-mender-2-0/3225/2 "2021-02-16T11:38:39Z")

</div>

Have you tried creating a mender\_%.bbappend file in your own projects layer and adding something along the lines of to remove the RDEPENDS addition by the mender-install feature.

`PACKAGECONFIG[mender-install]_remove("ca-certificates")`

the syntax above may not be totally correct, so further reading can be found below:

[https://www.yoctoproject.org/docs/latest/mega-manual/mega-manual.html#var-PACKAGECONFIG](https://www.yoctoproject.org/docs/latest/mega-manual/mega-manual.html#var-PACKAGECONFIG)

---

<div class="post-metadata">

### Author: ![ajithpv](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/ajithpv/32/728_2.png) [@ajithpv](https://hub.mender.io/u/ajithpv)
#### Post date: [February 16, 2021, 12:27pm UTC](https://hub.mender.io/t/is-it-possible-to-remove-ca-certificate-dependency-from-stand-alone-mender-2-0/3225/3 "2021-02-16T12:27:37Z")

</div>

Thank you for your quick support.

I tired to remove the ca-certificates directly from the meta-mender-core layer (meta-mender-core/recipes-mender/mender/mender.inc) as below:

From:

`PACKAGECONFIG[mender-install] = ",,,mender-artifact-info ca-certificates"`

To:

`PACKAGECONFIG[mender-install] = ",,,mender-artifact-info"`

This build without any error. I hope removing the ca-certificate from here will not impact the stand-alone mender functionalities.

However, your method is more standard and preferred because we don’t have to modify the default mender layer configurations. I will try to do the same.

Thank you again 👍

---

<div class="post-metadata">

### Author: ![ajithpv](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/ajithpv/32/728_2.png) [@ajithpv](https://hub.mender.io/u/ajithpv)
#### Post date: [February 17, 2021, 1:17pm UTC](https://hub.mender.io/t/is-it-possible-to-remove-ca-certificate-dependency-from-stand-alone-mender-2-0/3225/5 "2021-02-17T13:17:52Z")

</div>

Thank you @dellgreen for your support.  
I tried to add the removal part in the mender\_%.bbappend file from our own project layer.  
However, the ca-certificates couldn’t able remove using any of the below trials:

> 1. PACKAGECONFIG\_remove[mender-install] = “ca-certificates”
> 2. PACKAGECONFIG[mender-install]\_remove(“ca-certificates”)
> 3. PACKAGECONFIG[mender-install]\_remove = “ca-certificates”

All the above 3 methods gave build error 🤯

I know this is basic Yocto, however, I would like to know what is the correct syntax for removing the _ca-certificates_ from mender-install which is mentioned in the mender core layer?

---

<div class="post-metadata">

### Author: ![drewmoseley](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/drewmoseley/32/47_2.png) [@drewmoseley](https://hub.mender.io/u/drewmoseley)
#### Post date: [February 17, 2021, 3:51pm UTC](https://hub.mender.io/t/is-it-possible-to-remove-ca-certificate-dependency-from-stand-alone-mender-2-0/3225/6 "2021-02-17T15:51:21Z")

</div>

That’s an interesting idea; I’ve never tried that myself and honestly I’d be surprised if it worked. I think you may need to simply override the entire `PACKAGECONFIG[mender-install]` definition in your bbappend file using the syntax you specified above:

> PACKAGECONFIG[mender-install] = “,mender-artifact-info”

---

<div class="post-metadata">

### Author: ![dellgreen](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/dellgreen/32/85_2.png) [@dellgreen](https://hub.mender.io/u/dellgreen)
#### Post date: [February 17, 2021, 6:54pm UTC](https://hub.mender.io/t/is-it-possible-to-remove-ca-certificate-dependency-from-stand-alone-mender-2-0/3225/7 "2021-02-17T18:54:02Z")

</div>

I haven’t tried this, but given that the package config instruction looks like it indirectly is adding to the RDEPENDS variable, I would check this variable when running the mender recipe with bitbake -e mender | grep RDEPENDS to see if it’s updated. If so you could try something like RDEPENDS\_${PN}\_remove = “ca-certificates” in you bbappend recipe
