NOTEL This functionality was NOT available in XCA until 2.6.0.  It is
now available in 2.6.0-1 in Debian and will be in the jammy-backports
and noble-backports pocket - once it is built and available, you can use
`sudo apt-get install xca/RELEASE-backports` to install the software
from the Backports pocket if you have the Backports pocket enabled.
---

Unfortunately, the problem here is that OpenSSL in Ubuntu 22.04 and
later have moved those algorithms to the 'legacy' provider.
Additionally, XCA 2.4.0 (and 2.5.0 in Noble currently) has no mechanism
to enable legacy authentication mechanisms via OpenSSL.

Because this is now available in 2.6.0 as a **feature**, I have already
started the process of making this a backport so 2.6.0-1 will be
available via the Backports pocket.  (It fixes a bug in upstream Git,
however because this wasn't *available* in XCA, it's considered a "new
feature").

Fixing XCA 2.4 *itself* to fix this is much more invasive a process
because XCA has to first load the legacy provider AND change its export
functionality, which is something that is not SRUable because of the
extent of changes necessary to do this.  Therefore, just use the
Backports version which should be available within a few hours.

** Changed in: xca (Ubuntu)
   Importance: Low => Medium

** Changed in: xca (Ubuntu)
       Status: Triaged => Won't Fix

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1995095

Title:
  xca unusable pfx export for android / macos

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xca/+bug/1995095/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to