Bug#619587: FW: ca-certificate: blacklist invalid certs

2011-03-29 Thread giff g
>And you have a clue for us on how to do that? >Kind regards >Philipp Kern Some ideas that were proposed: 1) make use of the already existing openssl-blacklist infrastructure 2) drop the offending CA (this is already the third -publicly reported- incident specifically involving them) 3) take

Bug#619587: FW: ca-certificate: blacklist invalid certs

2011-03-25 Thread giff g
Package: ca-certificate Version: 20090814+nmu2 From: giffgi...@hotmail.com To: t...@security.debian.org Subject: ca-certificate: blacklist invalid certs Date: Thu, 24 Mar 2011 13:02:03 + Package: ca-certificate Version: 20090814+nmu2 Hello! This is in response to DSA 2200-1 http://l