Comment 5 for bug 2040094

The bug might actually be that snap-store tries to read the certificates from

/etc/pki/tls/certs/ca-bundle.crt (redhat)

instead of

/etc/ssl/certs/ca-certificates.crt (ubuntu)

If /etc/pki/tls/certs/ca-bundle.crt was generally accepted to be looked into by programs this path should be added to apparmor's abstractions:

dpkg -S /etc/apparmor.d/abstractions/ssl_certs
apparmor: /etc/apparmor.d/abstractions/ssl_certs

Otherwise the path should be fixed in snap-store or included in snap-store's apparmor profile.

Anyways, I added the path to /etc/apparmor.d/abstractions/ssl_certs.d/etc.pki.tls.certs.ca-bundle.crt as a work-around.