View Issue Details

IDProjectCategoryView StatusLast Update
0001527Main CAcert Websitecertificate issuingpublic2021-05-24 16:29
Reporteralkas Assigned To 
PriorityhighSeveritymajorReproducibilityalways
Status confirmedResolutionopen 
PlatformDefaultOSanyOS Versionany
Summary0001527: Debian package needs to be upgraded
DescriptionDebian package ca-cacert (2019.0411-2) needs to be upgraded!
(file ca-cacert_2019.0411-2_all.deb)
Steps To Reproduce1. Download the file via https://packages.debian.org/sid/ca-cacert
2. Unpack the file, locate CAcert roots
3. Serial # of class3 is 0E. (and root - #0F is OK)
4. Serial # of class3 should be 14E228.
Tagsca-cacert, class3, debian-package
Reviewed by
Test Instructions

Activities

jandd

2021-05-21 16:59

administrator   ~0006004

@alkas the Debian package is not maintained by CAcert, please file a bug report against the Debian package using

reportbug ca-cacert

alkas

2021-05-22 12:25

manager   ~0006010

Already submitted:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=988512
contains:
Debian Bug report logs - #988512
ca-cacert: class3 certificate will expire soon (on May 20 17:48:02 2021 GMT)
version graph
Package: ca-cacert; Maintainer for ca-cacert is Dmitry Smirnov <onlyjob@debian.org>; Source for ca-cacert is src:ca-cacert (PTS, buildd, popcon).
Reported by: Johannes Schulz <js@mailplus.co.at>
Date: Fri, 14 May 2021 13:03:02 UTC
Severity: normal
Tags: patch
Found in version ca-cacert/2019.0411-2
From: Johannes Schulz <js@mailplus.co.at>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: ca-cacert: class3 certificate will expire soon (on May 20 17:48:02 2021 GMT)
Date: Fri, 14 May 2021 14:58:33 +0200

Package: ca-cacert
Version: 2019.0411-2
Severity: normal
Tags: patch
(...)
Dear Maintainer,

`openssl x509 -noout -enddate -in /usr/share/ca-certificates/CAcert/class3_X0E.crt`
says: notAfter=May 20 17:48:02 2021 GMT

cacert has recently issued a replacement which can be downloaded here:
        https://www.cacert.org/class3.crt

See also http://blog.cacert.org/2021/05/re-signed-class-3-certificate-take-
action-now/

Please put the new certificate in the package.
(...)

dops

2021-05-24 16:29

reporter   ~0006011

A debian bug is already filed as https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=988512 . (As Debian packages must be signed by Debian people, CAcert can't provide this directly.)

Any Debian developer around?

Issue History

Date Modified Username Field Change
2021-05-21 13:58 alkas New Issue
2021-05-21 13:58 alkas Tag Attached: ca-cacert
2021-05-21 13:58 alkas Tag Attached: class3
2021-05-21 13:58 alkas Tag Attached: debian-package
2021-05-21 16:59 jandd Note Added: 0006004
2021-05-21 16:59 jandd Status new => confirmed
2021-05-22 12:25 alkas Note Added: 0006010
2021-05-24 16:29 dops Note Added: 0006011