Bug#955978: should ship policies file to fix Thunderbird TLS/SSL setup

[Wolfgang Schweer]

Package: debian-edu-config
Version: 2.10.65+deb10u4
Severity: important

Since some time, new users are faced with an 'insecure certificate' and 
have to accept it if they want to use mail inside the internal Debian Edu 
network.

Reason for this has been a change in the way Thunderbird sets up 
profiles (randomly named subdir).

Now that Thunderbird support for system-wide policies has been enabled, 
it is easy to fix it:

A policy file /usr/lib/thunderbird/distribution/policies.json will make 
sure that the Debian-Edu_rootCA.crt file gets installed as trusted 
certificate for Thunderbird.

File content:

{
  "policies": {
    "Certificates": {
      "ImportEnterpriseRoots": true,
      "Install": [
        "/etc/ssl/certs/Debian-Edu_rootCA.crt"
      ]
    }
  }
}

Wolfgang

signature.asc
Description: PGP signature