https://bugzilla.novell.com/show_bug.cgi?id=868884 https://bugzilla.novell.com/show_bug.cgi?id=868884#c0 Summary: package ca-certificates-cacert contains a not used certificate Classification: openSUSE Product: openSUSE 13.1 Version: Final Platform: All OS/Version: openSUSE 13.1 Status: NEW Severity: Normal Priority: P5 - None Component: Security AssignedTo: security-team@suse.de ReportedBy: reinhard.mutz@ohne-elf.de QAContact: qa-bugs@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux i686; rv:27.0) Gecko/20100101 Firefox/27.0 the package ca-certificates-cacert-1-15.1.2.noarch contains 2 certificates from cacert.org. Class 1 root certificate, fingerprints SHA1 Fingerabdruck: 13:5C:EC:36:F4:9C:B8:E9:3B:1A:B2:70:CD:80:88:46:76:CE:8F:33 MD5 Fingerabdruck: A6:1B:37:5E:39:0D:9C:36:54:EE:BD:20:31:46:1F:6B is ok, class 3 certificate is not. The packages deploys a certificate which is valid but was never used to sign any certificate. Please change it with the actual class 3 certificate which has finderprints SHA1 Fingerabdruck: AD:7C:3F:64:FC:44:39:FE:F4:E9:0B:E8:F4:7C:6C:FA:8A:AD:FD:CE MD5 Fingerabdruck: F7:25:12:82:4E:67:B5:D0:8D:92:B7:7C:0B:86:7A:42 You get all information about this from support@cacert.org. I am member of cacert inc. Reinhard Mutz, CARS Reproducible: Always Steps to Reproduce: 1. certtool -i < /usr/share/pki/trust/anchors/CAcert_class3.pem 2. cpmpare the fingerprints to certificates from http://www.cacert.org/index.php?id=3 3. Actual Results: The certificate class 3 was never used by cacert to sign any certificate. The workaround is to copy class 3 certificate from the website to /usr/share/pki/trust/anchors/CAcert_class3.pem -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.