[Bug 1795242] Re: Digicert certificate is not included

2018-10-09 Thread Schroeffu
@seth-arnold more and more intermediate certificates are also included in Chrome/Firefox, because a lot of website admins forget to include them in their .pem file of their domain certificate. To prevent showing an ugly error message, browsers are integrate all the intermediates too. thats what i

Re: [Bug 1795242] Re: Digicert certificate is not included

2018-10-03 Thread Seth Arnold
On Wed, Oct 03, 2018 at 05:55:59AM -, Stan Janssen wrote: > (I wonder why DigiCert has not been able to convice Mozilla to include > this certificate, yet they still sign certificates that are intended for Most CAs have multiple levels of certificates. The ones that the browsers include in tru

[Bug 1795242] Re: Digicert certificate is not included

2018-10-02 Thread Stan Janssen
I have reported this to Marktplaats.nl, suggesting they include the certificate in the chain that is being sent out by the server. (I wonder why DigiCert has not been able to convice Mozilla to include this certificate, yet they still sign certificates that are intended for public verification usi

[Bug 1795242] Re: Digicert certificate is not included

2018-10-02 Thread Stan Janssen
** Description changed: - The "DigiCert High Assurance EV Root CA" certificate is missing, which - means that the system does not trust web sites that are using SSL - certificates signed by that root. An example is a popular website in the - Netherlands https://marktplaats.nl. The result is that n

[Bug 1795242] Re: Digicert certificate is not included

2018-10-02 Thread Seth Arnold
Aha! https://s.marktplaats.com/ indeed gives different results on Qualys: "This server's certificate chain is incomplete. Grade capped to B." https://www.ssllabs.com/ssltest/analyze.html?d=s.marktplaats.com At the moment I think this is a misconfigured server at marktplaats.com. Probably we're

[Bug 1795242] Re: Digicert certificate is not included

2018-10-02 Thread Seth Arnold
** Changed in: ca-certificates (Ubuntu) Status: Incomplete => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1795242 Title: Digicert certificate is not included To manage notificati

[Bug 1795242] Re: Digicert certificate is not included

2018-10-02 Thread Stan Janssen
This is on ElementaryOS 0.4.1, which is based on Ubuntu 16.04: sudo dpkg -s ca-certificates | grep Version: Version: 20170717~16.04.1 And also on ElementaryOS 5 Beta 2, which is based on Ubuntu 18.04: sudo dpkg -s ca-certificates | grep Version: Version: 20180409 I was directed

Re: [Bug 1795242] Re: Digicert certificate is not included

2018-10-02 Thread Stan Janssen
Thanks, Seth, for looking into this. You're right; that certificate is indeed installed by default. I seem to have misstated the name of the certificate in my original bug report and post. It should have been the "DigiCert SHA2 Secure Server CA" certificate, which is the one I describe in the step

[Bug 1795242] Re: Digicert certificate is not included

2018-10-01 Thread Seth Arnold
This certificate does appear to be installed by default in the ca- certificates package: $ dpkg -L ca-certificates | grep DigiCert /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_CA.crt /usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G2.crt /usr/share/ca-certificates/mozill

[Bug 1795242] Re: Digicert certificate is not included

2018-10-01 Thread Seth Arnold
** Changed in: ca-certificates (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1795242 Title: Digicert certificate is not included To manage notifications ab