Our ca-certificates package uses the Mozilla certificate authority bundle without modification as they are able to perform the due diligence necessary to maintain a secure CA cert bundle.
NACK from the security team on adding CA certs manually to the package. If we want the Y generation roots in the ca-certificates package, we need to update to a Mozilla bundle which includes them. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2162678 Title: Missing Y generation roots results in validation errors To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ca-certificates/+bug/2162678/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
