Status changed to 'Confirmed' because the bug affects multiple users.

** Changed in: p11-kit (Ubuntu)
       Status: New => Confirmed

You received this bug notification because you are a member of Desktop
Packages, which is subscribed to thunderbird in Ubuntu.

  SSL trust not system-wide

Status in ca-certificates package in Ubuntu:
Status in nss package in Ubuntu:
Status in p11-kit package in Ubuntu:
Status in thunderbird package in Ubuntu:

Bug description:
  When I install a corporate CA trust root with update-ca-certificates,
  it doesn't seem to work everywhere. Various things like Firefox,
  Evolution, Chrome, etc. all fail to trust the newly-installed trusted

  This ought to work, and does on other distributions. In p11-kit there
  is a module which can be used as a drop-in
  replacement for NSS's own trust root module, but which
  reads from the system's configured trust setup instead of the hard-
  coded version.

  This allows us to install the corporate CAs just once, and then file a
  bug against any package that *doesn't* then trust them.

  for some of the historical details from when this feature was first
  implemented, but this is all now supported upstream and not at all
  distribution-specific. There shouldn't be any significant work
  required; it's mostly just a case of configuring and building it to
  make use of this functionality. (With 'alternatives' to let you
  substitute for the original NSS, etc.)

To manage notifications about this bug go to:

Mailing list:
Post to     :
Unsubscribe :
More help   :

Reply via email to