Connecting to some sites via glib-networking is broken due to removed certificates

Bug #1469797 reported by Iain Lane
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
ca-certificates (Ubuntu)
Invalid
Undecided
Unassigned

Bug Description

See

  https://bugzilla.redhat.com/show_bug.cgi?id=1166614 and
  https://rt.openssl.org/Ticket/Display.html?id=3621&user=guest&pass=guest

- this situation still exists in the wild (e.g. Facebook's CDN), but our ca-certificates package has dropped these certs, as of 20150426.

For example run the attached script on wily or try to use Facebook in epiphany.

Fedora have kept some of these certificates and called them "legacy" - I suggest that we could do the same, at least until glib-networking is fixed.

Revision history for this message
Iain Lane (laney) wrote :
Iain Lane (laney)
Changed in ca-certificates (Ubuntu):
status: New → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Bug attachments

Remote bug watches

Bug watches keep track of this bug in other bug trackers.