Public bug reported:

There is now the same problem on Ubuntu 14.04 as there is currently on
Debian 7.

See:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=812708
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=812488

Gist:
Openssl 1.0.1f can not verify certificates that have an alternative chain 
without both root certificates present. The update 20160104ubuntu0.14.04.1 
removes 1024bit certificates that are used within those chains.

Please don't push this update to vivid too!

** Affects: ca-certificates (Ubuntu)
     Importance: Undecided
         Status: New

** Affects: ca-certificates (Debian)
     Importance: Unknown
         Status: Unknown

** Bug watch added: Debian Bug tracker #812708
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=812708

** Also affects: ca-certificates (Debian) via
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=812708
   Importance: Unknown
       Status: Unknown

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1551615

Title:
  Alternative chain verification failure after 1024b root CAs removal

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ca-certificates/+bug/1551615/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to