Hi Everyone. I just verified that in 9.04 the two correct certifiactes for GlobalSign are present.
inside /etc/ssl/certs and /usr/share/ca-certificates/mozilla I'll double check debian next, however we have been inside for many years initially via OpenSSL until the ca-certificates list was stopped (I can't give a specific date or revision level when we were included). Now we are included via NSS, and there should be no issues. Our roots are available here:- https://secure.globalsign.net/cacert/Root-R1.crt as GlobalSign_Root_CA.crt https://secure.globalsign.net/cacert/Root-R2.crt as GlobalSign_Root_CA_-_R2.crt Please let me know if you see any interaction issues with our previous root. https://secure.globalsign.net/cacert/Root.crt Expiring in 2014 this has the same key material, SKI, start date etc as the R1 root above (Which expires in 2028) but to be RFC compliant it has a different serial number. If this issue is to do with this please let me know. Firefox, Opera, IE etc all treat the roots equally. Only MACOSX sees them as two roots so we have all 3 in the MAC keystore. I checked https://opensource.adobe.com/wiki/display/site/Home and it's fine on 9.04 which uses Fox 3.08 Kind Regards Steve Roylance - Business Development Director for GlobalSIgn -- Consider adding GlobalSign CA certificate https://bugs.launchpad.net/bugs/343798 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs