diff -ur p11-kit-0.24.1.orig/trust/trust-extract-compat p11-kit-0.24.1/trust/trust-extract-compat
--- p11-kit-0.24.1.orig/trust/trust-extract-compat	2021-07-22 08:43:53.000000000 -0700
+++ p11-kit-0.24.1/trust/trust-extract-compat	2023-05-01 03:37:14.743909005 -0700
@@ -17,16 +17,8 @@
         exit 0
 fi
 
-echo "trust: the placeholder extract-compat command has not been customized by your distribution." >&2
+# Copy existing anchor modifications to /etc/ssl/local
+/usr/libexec/make-ca/copy-trust-modifications
 
-# You can use commands like this to extract data from trust modules
-# into appropriate locations for your distribution.
-#
-# trust extract --format=openssl-bundle --filter=ca-anchors \
-# 	--overwrite /tmp/openssl-bundle.pem
-# trust extract --format=pem-bundle --filter=ca-anchors --overwrite \
-# 	--purpose server-auth /tmp/server-auth-bundle.pem
-# trust extract --format=java-cacerts --filter=ca-anchors --overwrite \
-# 	--purpose server-auth /tmp/cacerts
-
-exit 1
+# Update trust stores
+/usr/sbin/make-ca -r