Bug#999568: wordpress: WordPress package should not ship separate root store

2021-11-12 Thread Christer Mjellem Strand
Looking at this more closely, I now see line 209 in class-http.php: 'sslcertificates' => '/etc/ssl/certs/ca-certificates.crt', This would explain the dependency on ca-certificates, and I guess the core issue here as such is already solved. Apologies for not finding this sooner. That said

Bug#999568: wordpress: WordPress package should not ship separate root store

2021-11-12 Thread Christer Mjellem Strand
Package: wordpress Version: 5.8.1+dfsg1-1 Severity: normal Dear Maintainer, It seems this package includes a WordPress-provided root store, which like Debian's is based on Mozilla, but which includes a workaround for an issue from six years ago concerning 1024-bit roots (