Package: ca-certificates Version: 20240203 Severity: normal File: /usr/share/ca- certificates/mozilla/Security_Communication_Root_CA.crt
I noticed that there is one expired certificate in ca-certificates: $ cat test now=$(date -u) date -d "$now" now="$(date -d "$now" +%s)" for f in /usr/share/ca-certificates/mozilla/* ; do date="$(openssl x509 -enddate -noout -in "$f" | cut -d= -f2)" d="$(date -d "$date" +%s)" if [ $((d<=now)) -eq 1 ] ; then echo Expired: $f $date $d $now fi done $ sh test Mon 05 Feb 2024 10:13:46 AWST Expired: /usr/share/ca-certificates/mozilla/Security_Communication_Root_CA.crt Sep 30 04:20:49 2023 GMT 1696047649 1707099226 It might be a good idea to add an autopkgtest to check them. -- System Information: Debian Release: trixie/sid APT prefers testing-debug APT policy: (900, 'testing-debug'), (900, 'testing'), (800, 'unstable-debug'), (800, 'unstable'), (790, 'buildd-unstable'), (700, 'experimental-debug'), (700, 'experimental'), (690, 'buildd-experimental') Architecture: amd64 (x86_64) Kernel: Linux 6.6.13-amd64 (SMP w/4 CPU threads; PREEMPT) Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8), LANGUAGE=en_AU:en Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages ca-certificates depends on: ii debconf [debconf-2.0] 1.5.83 ii openssl 3.1.5-1 ca-certificates recommends no packages. ca-certificates suggests no packages. -- bye, pabs https://wiki.debian.org/PaulWise
signature.asc
Description: This is a digitally signed message part
