[Bug]: nvidia-container-toolkit.repo sslcacert path is not valid on Fedora44

[olliewalsh]

Describe the bug
The sslcacert path in nvidia-container-toolkit.repo does not exist on Fedora44: https://github.com/NVIDIA/libnvidia-container/blob/gh-pages/stable/rpm/nvidia-container-toolkit.repo#L9

To Reproduce
Follow the documented install procedures on Fedora44.

# curl -s -L https://nvidia.github.io/libnvidia-container/stable/rpm/nvidia-container-toolkit.repo | \
  tee /etc/yum.repos.d/nvidia-container-toolkit.repo

# dnf update
Updating and loading repositories:
 Fedora 44 - x86_64 - Updates                                                                                                                        100% |  12.8 KiB/s |  16.0 KiB |  00m01s
 RPM Fusion for Fedora 44 - Nonfree - Steam                                                                                                          100% |  14.9 KiB/s |   8.3 KiB |  00m01s
 RPM Fusion for Fedora 44 - Nonfree - NVIDIA Driver                                                                                                  100% |  27.3 KiB/s |   8.6 KiB |  00m00s
 google-chrome                                                                                                                                       100% |   7.9 KiB/s |   1.3 KiB |  00m00s
 Copr repo for PyCharm owned by phracek                                                                                                              100% |  12.7 KiB/s |   2.1 KiB |  00m00s
 nvidia-container-toolkit                                                                                                                            ???% |   0.0   B/s |   0.0   B |  00m00s
>>> Curl error (77): Problem with the SSL CA cert (path? access rights?) for https://nvidia.github.io/libnvidia-container/stable/rpm/x86_64/repodata/repomd.xml [error adding trust anchors from file: /etc/pki/tls/certs/ca-bundle.crt] - https://nvidia.github.io/libnvidia-container/stable/rpm/x86_64/repodata/repomd.xml
>>> An Curl handle error

Environment (please provide the following information):

• OS / Distribution: Fedora44 Workstation

Removing the sslcacert key from the repo file resolves the issue.

[aredspy]

Fedora is removing several symlinks to speed up OpenSSL: https://fedoraproject.org/wiki/Changes/droppingOfCertPemFile

The gist of it is that any dynamic programs should use openssl version -d to get the root OpenSSL directory and go from there, or fallback to /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem which is what /etc/pki/tls/cert.pem was symlinked to in F43 and older versions.

It seems that the /etc/ssl/cert.pem symlink will also eventually be removed, so its best tp just stick with the original file.

Using /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem for sslcacert= fixes the problem.