Bug#721976: ca-certificates contains both server and email certificates

2017-07-21 Thread Michael Shuler
The patch was committed to collab-maint master a few days ago and I tagged this bug as pending yesterday. It's on the way :) -- Kind regards, Michael

Bug#721976: ca-certificates contains both server and email certificates

2017-07-21 Thread Jacob Hoffman-Andrews
Hi, sending you a gentle ping on this. Would love to get this fix landed. Thanks!

Bug#721976: ca-certificates contains both server and email certificates

2017-05-26 Thread Michael Shuler
On 05/26/2017 02:18 PM, Jacob Hoffman-Andrews wrote: > Hi, just checking in on the status of this. I provided a patch above; > does it look good to you? The patch is simple, so I see no particular issue with it. My time has been crunched lately, but I have some vacation soon with plans for some

Bug#721976: ca-certificates contains both server and email certificates

2017-03-20 Thread Michael Shuler
I appreciate the research and suggestions. I'd be happy to review a patch submission to fix this. I'm not a mutt nor S/MIME user, so perhaps there may be some fallout from simple removal of email-only roots, if there are people using them. There's no way I know of to tell how many users use

Bug#721976: ca-certificates contains both server and email certificates

2017-03-17 Thread Jacob Hoffman-Andrews
Hi Marc, I work on EFF's Encrypt the Web project and the Let's Encrypt certificate authority. I'd like to lend support to what Andrew's saying: It's both urgent and important to remove the email roots from the default set of certificates trusted on Debian. I think Andrew's proposal is good;

Bug#721976: ca-certificates contains both server and email certificates

2013-09-06 Thread Marc Deslauriers
Package: ca-certificates Version: 20130610 Severity: normal The ca-certificates package ships certificates which are trusted for either CKA_TRUST_SERVER_AUTH or CKA_TRUST_EMAIL_PROTECTION. Some of those CA certs are only valid for one or the other, and bundling them together is problematic. For