Hi Salvo, On 04/14/2015 12:53 AM, Sebastiaan Couwenberg wrote: > On 04/13/2015 09:01 PM, Salvo Tomaselli wrote: >>> On a Debian unstable VM without customizations the cacerts file is >>> 207196, about half the size of my Debian unstable workstation, but still >>> significantly larger than yours. >>> >>> Try reconfiguring the ca-certificates package and enable at least the >>> COMODO/Comodo certificates because those are used for >>> *.tile.openstreetmap.org: >> I only have Mozilla/Comodo, no COMODO/Comodo. And they were already enabled. > > Most entries start with "mozilla/", I only meant the two different > capitalizations of the name. > >> It seems I have some weird certificate problem. Perhaps I should just try to >> reinstall the package? > > Reinstalling the ca-certificates package shouldn't hurt to try. > > Can you also check the contents of your keystore? > > keytool -v -list -keystore /etc/ssl/certs/java/cacerts \ > -storepass changeit | less > > > You should have an entry with an alias like equifax_secure_ca with: > > Certificate fingerprint (SHA1): > D2:32:09:AD:23:D3:14:23:21:74:E4:0D:7F:9D:62:13:97:86:63:3A > > This is the root CA for the OSM tile server SSL certificate chain.
Can you confirm that you've reinstalled the ca-certificates package? And can you also send the output for the keytool command? Kind Regards, Bas -- GPG Key ID: 4096R/6750F10AE88D4AF1 Fingerprint: 8182 DE41 7056 408D 6146 50D1 6750 F10A E88D 4AF1 -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
