Public bug reported:

See

  https://bugzilla.redhat.com/show_bug.cgi?id=1166614 and
  https://rt.openssl.org/Ticket/Display.html?id=3621&user=guest&pass=guest

- this situation still exists in the wild (e.g. Facebook's CDN), but our
ca-certificates package has dropped these certs, as of 20150426.

For example run the attached script on wily or try to use Facebook in
epiphany.

Fedora have kept some of these certificates and called them "legacy" - I
suggest that we could do the same, at least until glib-networking is
fixed.

** Affects: ca-certificates (Ubuntu)
     Importance: Undecided
     Assignee: Marc Deslauriers (mdeslaur)
         Status: New

** Attachment added: "soup.py"
   https://bugs.launchpad.net/bugs/1469803/+attachment/4421997/+files/soup.py

** Changed in: ca-certificates (Ubuntu)
     Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1469803

Title:
  Connecting to some sites via glib-networking is broken due to removed
  certificates

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ca-certificates/+bug/1469803/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to