Announcement

Collapse
No announcement yet.

CAcert.org root certificate

Collapse
This topic is closed.
X
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

    CAcert.org root certificate

    My server uses SSL certs that have been signed using CAcert's root certificate.

    After the latest updates to 13.10, all of the apps that were connected to my server started throwing SSL cert errors. I have checked, and it seems that the newest ca-certificates package (ca-certificates:amd64 (20130610, 20130906ubuntu0.13.10.1) may have removed the old cacert root when it was updated.

    Anyone else noticed this?

    I can't remember how I imported it last time, but I swear it was easier than KDE is making it now.

    For example, if I go here:

    http://www.cacert.org/index.php?id=3

    in rekonq and download the certs, I can't import them when I open them. I have also tried downloading them and then using the system settings GUI to add them, but that doesn't seem to be doing anything either!

    Firefox is still fine, since it uses its own cert management.
    samhobbs.co.uk

    #2
    On further investigation, I found this in the change log:

    http://changelogs.ubuntu.com/changel...10.1/changelog

    ca-certificates (20130906ubuntu0.13.10.1) saucy-security; urgency=medium * Update ca-certificates database to 20130906 (LP: #1257265): - backport changes from the Ubuntu 14.04 20130906ubuntu1 package - No longer ship cacert.org certificates (LP: #1258286) - mozilla/certdata2pem.py: Work around openssl issue by shipping both versions of the same signed roots. Previously, the script would simply overwrite the first one found in the certdata.txt with the later one since they both have the same CKA_LABEL, resulting in identical filenames. (LP: #1014640, LP: #1031333)
    I have a feeling the cert may have been installed by default but not enabled before, but my memory is a bit hazy on that at the moment.
    samhobbs.co.uk

    Comment

    Working...
    X