A proper fix for missing ln utility during post-install.
This update introduces the ca-legacy utility and a ca-legacy.conf configuration file.
Several legacy roots, which have been removed from the active trust list by the upstream Mozilla CA maintainers, are still required to be trusted for OpenSSL/GnuTLS compatibility, and are therefore kept enabled in the ca-certificates package by default.
Using the new ca-legacy utility, it is possible to opt-in to disable the trust for the legacy root CA certificates.
If disabled, the system will use the trust set as provided by the upstream Mozilla CA list, and as a consequence software based on OpenSSL/GnuTLS might fail to validate affected certificates.
(See also: #1158197)
How to install
Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:
This update has been submitted for testing by peter.
Taskotron: depcheck test PASSED on i386. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/12763/steps/runtask/logs/stdio (results are informative only)
Taskotron: depcheck test PASSED on x86_64. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/12763/steps/runtask/logs/stdio (results are informative only)
This update is currently being pushed to the Fedora 21 testing updates repository.
peter has edited this update. New build(s): ca-certificates-2014.2.1-1.5.fc21. Removed build(s): ca-certificates-2014.2.1-1.4.fc21.
This update has been submitted for testing by peter.
Taskotron: depcheck test PASSED on i386. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/12988/steps/runtask/logs/stdio (results are informative only)
Taskotron: depcheck test PASSED on x86_64. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/12988/steps/runtask/logs/stdio (results are informative only)
This update has been pushed to testing
No problems noted
Critical path update approved
Works for me
This update has been submitted for stable by peter.
Taskotron: upgradepath test PASSED on noarch. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/13678/steps/runtask/logs/stdio (results are informative only)
This update is currently being pushed to the Fedora 21 stable updates repository.
This update is currently being pushed to the Fedora 21 stable updates repository.
This update has been pushed to stable