Linux distribution and version

Fedora Silverblue 29

Flatpak version

v1.2.3

Description of the problem

Flatpaks apps do not pick up PEM certificates placed in /etc/pki/ca-trust/source/anchors/ on the host.

Steps to reproduce

• Place custom trusted cert in /etc/pki/ca-trust/source/anchors/
• Install Riot.im or Firefox Nightly flatpak
• In Riot.im: Try to log in to a Matrix server that uses that cert -> not possible
• In Firefox Nightly: Navigate to an URL that uses that cert -> 'Warning: Potential Security Risk Ahead' page is shown