/mingw64/bin/update-ca-trust: p11-kit: 'Files/Git/mingw64/bin/trust.exe' is not a valid command.

[basinilya]

In Git For Windows if during installation you choose to use the openssl library the system gitconfig will contain this section:

[http]
	sslBackend = openssl
	sslCAInfo = C:/Program Files/Git/mingw64/etc/ssl/certs/ca-bundle.crt

If a MITM internet security solution is also installed, a command like this will fail unless you add a custom CA.

My Git for Windows is installed in the default folder C:\Program Files\Git

I did this:

(
mkdir -p /mingw64/share/pki/ca-trust-source/anchors
openssl x509 $IN_FORM_ARG -in Zscaler-Root-CA.cer > /mingw64/share/pki/ca-trust-source/anchors/Zscaler-Root-CA.crt
/mingw64/bin/update-ca-trust
)

And got this result:

p11-kit: 'Files/Git/mingw64/bin/trust.exe' is not a valid command. See 'Program --help'
p11-kit: couldn't run trust tool: No error
p11-kit: 'Files/Git/mingw64/bin/trust.exe' is not a valid command. See 'Program --help'
p11-kit: couldn't run trust tool: No error
p11-kit: 'Files/Git/mingw64/bin/trust.exe' is not a valid command. See 'Program --help'
p11-kit: couldn't run trust tool: No error
p11-kit: 'Files/Git/mingw64/bin/trust.exe' is not a valid command. See 'Program --help'
p11-kit: couldn't run trust tool: No error
p11-kit: 'Files/Git/mingw64/bin/trust.exe' is not a valid command. See 'Program --help'
p11-kit: couldn't run trust tool: No error

Also, unlike in /usr/bin/update-ca-trust the cp commands are missing in the end of the script so /mingw64/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem is not copied to /mingw64/etc/ssl/cert.pem