The GTE CyberTrust Global Root certificate was removed by the following security update:
http://www.ubuntu.com/usn/usn-2913-1/ Here is some more information on why that CA was removed: https://blog.mozilla.org/security/2015/01/28/phase-2-phasing-out-certificates-with-1024-bit-rsa-keys/ https://bugzilla.mozilla.org/show_bug.cgi?id=1047011 The filelist links you provided above compare the original version of ca-certificates with the one in trusty-updates, which is why you're seeing the missing CA. ** Bug watch added: Mozilla Bugzilla #1047011 https://bugzilla.mozilla.org/show_bug.cgi?id=1047011 -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to ca-certificates in Ubuntu. https://bugs.launchpad.net/bugs/1570394 Title: Missing GTE CyberTrust Global Root in trusty-updates repo Status in ca-certificates package in Ubuntu: Incomplete Bug description: Hi, I noticed that my Eclipse keeps asking about eclipse.org certificate that has subj CA. I found that it is completely missing in my system. Still the interesting thing that makes me think this is a kind of a bug that the ca-certificates package from trusty-security *has* this certificate, while the one located at trusty-updates hasn't. Otherwise these packages have the same version. There are also other differences in certificate list. Probably some build time bug. Compare files at http://packages.ubuntu.com/trusty-updates/all/ca- certificates/filelist and http://packages.ubuntu.com/trusty/all/ca- certificates/filelist Ubuntu release: Description: Ubuntu 14.04.4 LTS Release: 14.04 package details: ca-certificates: Installed: 20160104ubuntu0.14.04.1 Candidate: 20160104ubuntu0.14.04.1 Version table: *** 20160104ubuntu0.14.04.1 0 500 http://archive.ubuntu.com/ubuntu/ trusty-updates/main amd64 Packages 500 http://security.ubuntu.com/ubuntu/ trusty-security/main amd64 Packages 100 /var/lib/dpkg/status 20130906ubuntu2 0 500 http://archive.ubuntu.com/ubuntu/ trusty/main amd64 Packages /Alex To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ca-certificates/+bug/1570394/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
