Oh no, I'm stuck now. I got this dialogue, and pressed enter thinking it would select all certs. It seems to have selected NO certs to trust! Now I have a certs.pem file with only my own cert!
>> You can check your current setting by doing: debconf-show ca- certificates Yes, I can confirm on my system, a-certificates/trust_new_crts: ask so how do I CHANGE that setting? How do I re-run certbot and get a complete certs file now? -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to ca-certificates in Ubuntu. https://bugs.launchpad.net/bugs/1297800 Title: During upgrades, new certificates will be added. Please choose those you trust. Status in ca-certificates package in Ubuntu: Expired Bug description: While upgrading ca-certificates from version 20111211 to 20130906ubuntu0.12.04.1 I got the following dialog: │ During upgrades, new certificates will be added. Please choose those you trust. │ │ │ │ New certificates to activate: │ │ │ │ [ ] mozilla/Actalis_Authentication_Root_CA.crt │ │ [ ] mozilla/Buypass_Class_2_Root_CA.crt │ │ [ ] mozilla/Buypass_Class_3_Root_CA.crt │ │ [ ] mozilla/CA_Disig_Root_R1.crt │ │ [ ] mozilla/CA_Disig_Root_R2.crt │ │ [ ] mozilla/China_Internet_Network_Information_Center_EV_Certificates_Root.crt │ │ [ ] mozilla/D-TRUST_Root_Class_3_CA_2_2009.crt │ │ [ ] mozilla/D-TRUST_Root_Class_3_CA_2_EV_2009.crt │ │ [ ] mozilla/EC-ACC.crt │ │ [ ] mozilla/EE_Certification_Centre_Root_CA.crt │ │ [ ] mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2011.crt │ │ │ │ │ │ <Ok> │ Is it really reasonable to expect most users to know what to do with this and what the fallout is of making incorrect choices? I know my mom certainly would not have a clue about what to do with this. Hell, I am a software and network engineer and I don't know which of the above I should trust and what the fallout of not trusting some/all of them. And in reality, I need (way) more information that is presented in that dialog to make a decision about any one of those certificate/CAs. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ca-certificates/+bug/1297800/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp