Please note that this is a very serious concern. There is NO SAFE WAY to install these certificates in Ubuntu or any Linux distro, because the official certificate website mentioned above is not secure. Thus, since DNS is not secure, you can never be sure if the ITI website is the real one, at a given moment.
Microsoft Windows comes with the certificate pre-installed, which is correct. And so should Ubuntu come at least with the root certificates from http://www.iti.gov.br/icp-brasil/repositorio This makes every official brazilian site pottentially insecure affecting every brazilian user that accesses every brazilian government website that needs secure access, including some state bank institutions. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/587096 Title: Add ICP-Brasil certificates To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ca-certificates/+bug/587096/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
