-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,

On 25.03.2014 21:47, Denis Knauf wrote:
> About the CAcert-problem and Debian. I trust and use CAcert, Debian
> not. Debian removed it, we use their ca-list in our
> ca-certificates-package:
> 
> DOWNLOADS="mirror://debian/pool/main/c/${PN}/${PN}_${PV}_all.deb"
> 
> No other sources. So we have to add CAcert manually.

I've done this now (65ff7cf in arbor;
app-misc/ca-certificates[=20140223-r1]):

- ----
ca-certificates-20140223-r1: Optionally re-add CAcert (default-enabled)

Debian, the package of which we're using, decided to remove CAcert's
certificates due to CAcert's failure to undergo security audits.
cf. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=718434

This decision was controversial and, thus, I feel it's appropriate to
give people a choice here and add an option to install CAcert's
certificates. Since CAcert has been included for years, the option is
enabled in the base profile (in a separate commit).
- ----

- -- 
Best regards, Wulf

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlNLz0gACgkQnuVXRcSi+5pTdACgx44scLtR07xvIQ4+0PQ71XDJ
pOUAoJbjnEWoCE/cq2OA9RMFM8QZXOgu
=IbQW
-----END PGP SIGNATURE-----

_______________________________________________
Exherbo-dev mailing list
[email protected]
http://lists.exherbo.org/mailman/listinfo/exherbo-dev

Reply via email to