obsolete

ca-certificates-2014.2.1-1.3.fc21

FEDORA-2014-13900 created by kengert 8 years ago for Fedora 21

This update introduces the ca-legacy utility and a ca-legacy.conf configuration file. Several legacy roots, which have been removed from the active trust list by the upstream Mozilla CA maintainers, are still required to be trusted for OpenSSL/GnuTLS compatibility, and are therefore kept enabled in the ca-certificates package by default. Using the new ca-legacy utility, it is possible to opt-in to disable the trust for the legacy root CA certificates. If disabled, the system will use the trust set as provided by the upstream Mozilla CA list, and as a consequence software based on OpenSSL/GnuTLS might fail to validate affected certificates. (See also: #1158197)

This update has been submitted for testing by kengert.

8 years ago

Taskotron: depcheck test PASSED on i386. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/6765/steps/runtask/logs/stdio (results are informative only)

Taskotron: depcheck test PASSED on x86_64. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/6765/steps/runtask/logs/stdio (results are informative only)

Taskotron: depcheck test PASSED on i386. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/6779/steps/runtask/logs/stdio (results are informative only)

Taskotron: depcheck test PASSED on x86_64. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/6779/steps/runtask/logs/stdio (results are informative only)

This update is currently being pushed to the Fedora 21 testing updates repository.

8 years ago

This update has been pushed to testing

8 years ago
User Icon chr77 commented & provided feedback 8 years ago
karma

Works for me

Critical path update approved

8 years ago
User Icon cairo provided feedback 8 years ago
karma
User Icon kuosmanen commented & provided feedback 8 years ago
karma

no regression

User Icon robert commented & provided feedback 8 years ago
karma

Noticed no regressions

User Icon nonamedotc commented & provided feedback 8 years ago
karma

did not notice any problems

This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes

8 years ago

Please login to add feedback.

Metadata
Type
enhancement
Karma
5
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
disabled
Stable by Time
disabled
Dates
submitted
8 years ago
in testing
8 years ago
modified
8 years ago
BZ#1158197 Allow disabling of legacy root CA certificates as a system configuration
0
0

Automated Test Results