Function _uninstall_linux

src/core/cert_installer.py:476–540

Remove certificate from Linux trust stores.

(cert_path: str, cert_name: str)

def _uninstall_linux(cert_path: str, cert_name: str) -> bool:
    """Remove certificate from Linux trust stores."""
    distro = _detect_linux_distro()
    log.info("Detected Linux distro family: %s", distro)

    removed = False

    if distro == "debian":
        dest_file = f"/usr/local/share/ca-certificates/{cert_name.replace(' ', '_')}.crt"
        try:
            if os.path.exists(dest_file):
                os.remove(dest_file)
            _run(["update-ca-certificates"])
            log.info("Certificate removed via update-ca-certificates.")
            removed = True
        except (OSError, subprocess.CalledProcessError) as exc:
            log.warning("Debian removal failed (needs sudo?): %s", exc)
            try:
                _run(["sudo", "rm", "-f", dest_file])
                _run(["sudo", "update-ca-certificates"])
                log.info("Certificate removed via sudo update-ca-certificates.")
                removed = True
            except (subprocess.CalledProcessError, FileNotFoundError) as exc2:
                log.warning("sudo Debian removal failed: %s", exc2)

    elif distro == "rhel":
        dest_file = f"/etc/pki/ca-trust/source/anchors/{cert_name.replace(' ', '_')}.crt"
        try:
            if os.path.exists(dest_file):
                os.remove(dest_file)
            _run(["update-ca-trust", "extract"])
            log.info("Certificate removed via update-ca-trust.")
            removed = True
        except (OSError, subprocess.CalledProcessError) as exc:
            log.warning("RHEL removal failed (needs sudo?): %s", exc)
            try:
                _run(["sudo", "rm", "-f", dest_file])
                _run(["sudo", "update-ca-trust", "extract"])
                log.info("Certificate removed via sudo update-ca-trust.")
                removed = True
            except (subprocess.CalledProcessError, FileNotFoundError) as exc2:
                log.warning("sudo RHEL removal failed: %s", exc2)

    elif distro == "arch":
        dest_file = f"/etc/ca-certificates/trust-source/anchors/{cert_name.replace(' ', '_')}.crt"
        try:
            if os.path.exists(dest_file):
                os.remove(dest_file)
            _run(["trust", "extract-compat"])
            log.info("Certificate removed via trust extract-compat.")
            removed = True
        except (OSError, subprocess.CalledProcessError) as exc:
            log.warning("Arch removal failed (needs sudo?): %s", exc)
            try:
                _run(["sudo", "rm", "-f", dest_file])
                _run(["sudo", "trust", "extract-compat"])
                log.info("Certificate removed via sudo trust extract-compat.")
                removed = True