So, I believe the proposed 2nd trusty might accidentally allow MD5 everywhere, when the problem only is root certificates with MD5 self signatures. I believe this might be related:
https://gitlab.com/gnutls/gnutls/commit/b93ae1abf1b84fdc094f2474f1b2e4848081810e
But I'm not sure if it fixes the issue and if any other patches are needed from 2.12.24.
So, I believe the proposed 2nd trusty might accidentally allow MD5 everywhere, when the problem only is root certificates with MD5 self signatures. I believe this might be related:
https:/ /gitlab. com/gnutls/ gnutls/ commit/ b93ae1abf1b84fd c094f2474f1b2e4 848081810e
But I'm not sure if it fixes the issue and if any other patches are needed from 2.12.24.