[Touch-packages] [Bug 1656054] Re: Unable to validate GoDaddy signed certs

2017-01-12 Thread Michael Shuler
https://casecurity.ssllabs.com/analyze.html?d=api-v1.weather.gov That's a good link to send them to show the "Chain issues - Incomplete" and "Extra download" on the intermediate. Also https://www.godaddy.com/help/install-ssl-certificates-16623 -- You received this bug notification because you

[Touch-packages] [Bug 1656054] Re: Unable to validate GoDaddy signed certs

2017-01-12 Thread Michael Shuler
s: = subject i: = issuer The server certificate "CN=nws.noaa.gov" was issued by (signed by) "CN=Go Daddy Secure Certificate Authority - G2" This issuer is an intermediate. There is nothing provided by the server to chain this intermediate to a root certificate. I'm pretty sure the root that

[Touch-packages] [Bug 1656054] Re: Unable to validate GoDaddy signed certs

2017-01-12 Thread Michael Shuler
The site is probably not configured correctly. See a similar example: https://bugzilla.mozilla.org/show_bug.cgi?id=926163 FYI, a better test than curl is: echo "HEAD /" | openssl s_client -CApath /etc/ssl/certs -connect api-v1.weather.gov:443 ** Bug watch added: Mozilla Bugzilla #926163

[Touch-packages] [Bug 1638268] Re: certbot-auto claims parse error in apache config, but doesn't tell me which line

2016-11-02 Thread Michael Shuler
** Package changed: ca-certificates (Ubuntu) => python-certbot (Ubuntu) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to ca-certificates in Ubuntu. https://bugs.launchpad.net/bugs/1638268 Title: certbot-auto claims parse

[Touch-packages] [Bug 1465243] Re: Missing root certificate COMODO RSA Certification Authority

2015-06-15 Thread Michael Shuler
Online Root Certification Authority 2 - E-Guven Kok Elektronik Sertifika Hizmet Saglayicisi - GTE CyberTrust Global Root - Thawte Premium Server CA - Thawte Server CA -- Michael Shuler mich...@pbandjelly.org Sun, 26 Apr 2015 10:37:48 -0500 ** Changed in: ca-certificates (Ubuntu

[Touch-packages] [Bug 1425710] Re: can install or remove any applications

2015-03-01 Thread Michael Shuler
What does this have to do with ca-certificates? Marked incomplete. ** Changed in: ca-certificates (Ubuntu) Status: New = Incomplete -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to ca-certificates in Ubuntu.

[Touch-packages] [Bug 1394771] Re: package ca-certificates 20141019 failed to install/upgrade: Trigger bilden eine Schleife, aufgegeben

2014-11-21 Thread Michael Shuler
I looked at the logs and see no issue with the ca-certificates package install. Please, post the specific ca-certificates install error, if I missed it. (I do not speak German, but did find what looks like all the normal package install states in the logs) ** Changed in: ca-certificates (Ubuntu)

[Touch-packages] [Bug 1359695] Re: Missing Microsoft Root Certificate Authority cert

2014-10-09 Thread Michael Shuler
Have Microsoft go through the Mozilla CA Inclusion process :) All the CA certificates in the ca-certificates package come from Mozilla, and one CA certificate from SPI, which is a Debian Trusted Organization. ** Changed in: ca-certificates (Ubuntu) Status: Confirmed = Invalid -- You

[Touch-packages] [Bug 1365913] Re: ca-certificates installing a link to libnss3.so in root directory

2014-10-09 Thread Michael Shuler
** Package changed: ca-certificates (Ubuntu) = ca-certificates-java (Ubuntu) ** Tags removed: ca-certificates -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to ca-certificates in Ubuntu. https://bugs.launchpad.net/bugs/1365913

[Touch-packages] [Bug 1283997] Re: terena ssl certificate issue

2014-10-09 Thread Michael Shuler
I'm marking this as Invalid, since we've established that with a current version of ca-certificates, the connection is fine. I don't know how backports are done in Ubuntu, since I work primarily in Debian and just look at bug reports in launchpad from time to time. I imagine that if you install