Comment 60 for bug 2036873

Revision history for this message
Thomas Ward (teward) wrote :

Personal opinion: Checking the list of CA certs expected via test vs. what's available on the system sounds redundant, unhelpful, and in fact can be a problem.

Case in point: the December 2022 Trustcor certificates being removed as 'trusted' from ca-certificates and other components. If the cert list in the package expects Trustcor but they're removed from ca-certificates and the system store, you're going to always have failing tests then until you update the tests.

It makes more sense for jtreg to *not* do a CA Certificates validation/check. CA certificate trust/validation should be a ca-certificates, etc. job, not a jtreg build test test.