On 6/18/26 00:55, Bill Cole via mailop wrote:
I deduce from this set of facts that DigiCert is withdrawing this intermediate but Microsoft didn't get the memo.
Yup. Figured that out yesterday shortly after I had sent this message to mailop.
which on a sidenote seemed unavailable most of yesterday... I sent the message at ~10:00 CEST and it finally got delivered around 22:00 CEST.
The root cert was removed from the Mozilla bundle on April 15 (https://knowledge.digicert.com/general-information/digicert-root-and-intermediate-ca-certificate-updates-2023) and then subsequently removed from the Ubuntu ca-certificates package June 16, which is what then caused the delivery issues for me when that package was upgraded.
Since Microsoft is toobigtofail™©®, and not delivering to them is not an option, I ended up putting the root CA back from the old version of the package for now. I guess Microsoft will fix this issue when they renew the cert some time in August (it expires August 26) and the rest of the world will just have to work around this issue until then...
It seems to me that maybe Ubuntu is ahead of the curve on yanking that CA out of the trust store though so other OS:es and flavors of Linux might not (yet) see this issue.
-- BR/Mvh. Dan Malm, Systems Engineer, one.com _______________________________________________ mailop mailing list [email protected] https://list.mailop.org/listinfo/mailop
