Comment 2 for bug 1721712

Revision history for this message
Marc Deslauriers (mdeslaur) wrote :

Hi,

In the 20170717 package, we no longer ship email signing certificates.

Per Mozilla, "SwissSign Platinum CA - G2" is marked as an email signing certificate only:

CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE

This is the Debian bug where email signing certificates were removed:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=721976