After building an installing a new package using the above patch the validation works OK:
$ openssl s_client -connect <REDACTED>:443 -servername <REDACTED> -verify_hostname <REDACTED> -verify_return_error -showcerts </dev/null Connecting to 10.1.8.90 CONNECTED(00000003) depth=2 C=US, O=ISRG, CN=Root YR verify return:1 $ openssl verify <(curl -q https://letsencrypt.org/certs/gen-y/root-yr.pem) % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 1850 100 1850 0 0 16989 0 0 /dev/fd/63: OK -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2162678 Title: Missing Y generation roots results in validation errors To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ca-certificates/+bug/2162678/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
