p11-kit: couldn't remove read-only certificate

[enjk-54L4]

Trying to remove some obsolete certificates I got:

# trust anchor --remove /etc/ssl/certs/SLES11*
p11-kit: couldn't remove read-only certificate
p11-kit: couldn't remove read-only certificate
p11-kit: couldn't remove read-only certificate
p11-kit: 3 errors while processing

There are two issues here:

1. The name of the certificate or file in question is not shown
2. If a certificate is read-only (one shouldn't change it anyway), it still can be removed (in UNIX systems at least).

So this makes not sense. Seen in p11-kit-0.23.22 of SLES15 SP6.

Interestingly even after a "chmod u+w /etc/ssl/certs/SLES11*" I get the same error message.

[enjk-54L4]

I solved the problem via:

rm /etc/pki/trust/SLES11*
rm /etc/ssl/certs/SLES11*
rm /etc/pki/trust/anchors/SLES11*