On 04/13/2015 09:01 PM, Salvo Tomaselli wrote: >> On a Debian unstable VM without customizations the cacerts file is >> 207196, about half the size of my Debian unstable workstation, but still >> significantly larger than yours. >> >> Try reconfiguring the ca-certificates package and enable at least the >> COMODO/Comodo certificates because those are used for >> *.tile.openstreetmap.org: > I only have Mozilla/Comodo, no COMODO/Comodo. And they were already enabled.
Most entries start with "mozilla/", I only meant the two different capitalizations of the name. > It seems I have some weird certificate problem. Perhaps I should just try to > reinstall the package? Reinstalling the ca-certificates package shouldn't hurt to try. Can you also check the contents of your keystore? keytool -v -list -keystore /etc/ssl/certs/java/cacerts \ -storepass changeit | less You should have an entry with an alias like equifax_secure_ca with: Certificate fingerprint (SHA1): D2:32:09:AD:23:D3:14:23:21:74:E4:0D:7F:9D:62:13:97:86:63:3A This is the root CA for the OSM tile server SSL certificate chain. Kind Regards, Bas -- GPG Key ID: 4096R/6750F10AE88D4AF1 Fingerprint: 8182 DE41 7056 408D 6146 50D1 6750 F10A E88D 4AF1 -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org