I mean, the bug is three years old and presumably by now the vast majority of web sites have renewed their certificates and the new ones are compatible with SECLEVEL=2 since all of the signing authorities stopped issuing incompatible ones years ago, so it's kind of moot at this point.
I mean, the bug is three years old and presumably by now the vast majority of web sites have renewed their certificates and the new ones are compatible with SECLEVEL=2 since all of the signing authorities stopped issuing incompatible ones years ago, so it's kind of moot at this point.