Package: ca-certificates
Version: 20140927
Severity: normal
Hi.
Apparrently, when certs are removed from the package upon Mozillas command
the following errors happen each time during upgrade:
Setting up ca-certificates (20140927) ...
Processing triggers for ca-certificates (20140927) ...
Updating certificates in /etc/ssl/certs... W:
/usr/share/ca-certificates/mozilla/Entrust.net_Secure_Server_CA.crt not found,
but listed in /etc/ca-certificates.conf.
W: /usr/share/ca-certificates/mozilla/RSA_Root_Certificate_1.crt not found, but
listed in /etc/ca-certificates.conf.
W: /usr/share/ca-certificates/mozilla/TDC_Internet_Root_CA.crt not found, but
listed in /etc/ca-certificates.conf.
W: /usr/share/ca-certificates/mozilla/ValiCert_Class_1_VA.crt not found, but
listed in /etc/ca-certificates.conf.
W: /usr/share/ca-certificates/mozilla/ValiCert_Class_2_VA.crt not found, but
listed in /etc/ca-certificates.conf.
Error opening Certificate RSA_Root_Certificate_1.pem
140074132829840:error:02001002:system library:fopen:No such file or
directory:bss_file.c:398:fopen('RSA_Root_Certificate_1.pem','r')
140074132829840:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:400:
unable to load certificate
WARNING: RSA_Root_Certificate_1.pem does not contain a certificate or CRL:
skipping
Error opening Certificate ValiCert_Class_1_VA.pem
140153506678416:error:02001002:system library:fopen:No such file or
directory:bss_file.c:398:fopen('ValiCert_Class_1_VA.pem','r')
140153506678416:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:400:
unable to load certificate
WARNING: ValiCert_Class_1_VA.pem does not contain a certificate or CRL: skipping
Error opening Certificate TDC_Internet_Root_CA.pem
139641791534736:error:02001002:system library:fopen:No such file or
directory:bss_file.c:398:fopen('TDC_Internet_Root_CA.pem','r')
139641791534736:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:400:
unable to load certificate
WARNING: TDC_Internet_Root_CA.pem does not contain a certificate or CRL:
skipping
Error opening Certificate Entrust.net_Secure_Server_CA.pem
140510059488912:error:02001002:system library:fopen:No such file or
directory:bss_file.c:398:fopen('Entrust.net_Secure_Server_CA.pem','r')
140510059488912:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:400:
unable to load certificate
WARNING: Entrust.net_Secure_Server_CA.pem does not contain a certificate or
CRL: skipping
Error opening Certificate ValiCert_Class_2_VA.pem
140492449592976:error:02001002:system library:fopen:No such file or
directory:bss_file.c:398:fopen('ValiCert_Class_2_VA.pem','r')
140492449592976:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:400:
unable to load certificate
WARNING: ValiCert_Class_2_VA.pem does not contain a certificate or CRL: skipping
8 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d....
Adding debian:DigiCert_Assured_ID_Root_G2.pem
Adding debian:DigiCert_Assured_ID_Root_G3.pem
Adding debian:DigiCert_Global_Root_G2.pem
Adding debian:DigiCert_Global_Root_G3.pem
Adding debian:DigiCert_Trusted_Root_G4.pem
Adding debian:QuoVadis_Root_CA_1_G3.pem
Adding debian:QuoVadis_Root_CA_2_G3.pem
Adding debian:QuoVadis_Root_CA_3_G3.pem
done.
done.
And "0 [are] removed".
It seems, though, that this is only a configuration file/cosmetic issue,
than the certs are in fact gone and /etc/ssl/certs only contains
dangling symlinks.
Also, /etc/ssl/certs/ca-certificates.crt should be save, as the following
call should demonstrate (in the most recent upgrade the ValiCert certs
were removed):
$ cat /etc/ssl/certs/ca-certificates.crt | while openssl x509 -noout -issuer ;
do true; done | grep ValiCert
which gives no results in my case.
Another run of
# update-ca-certificates
Updating certificates in /etc/ssl/certs... W:
/usr/share/ca-certificates/mozilla/Entrust.net_Secure_Server_CA.crt not found,
but listed in /etc/ca-certificates.conf.
W: /usr/share/ca-certificates/mozilla/RSA_Root_Certificate_1.crt not found, but
listed in /etc/ca-certificates.conf.
W: /usr/share/ca-certificates/mozilla/TDC_Internet_Root_CA.crt not found, but
listed in /etc/ca-certificates.conf.
W: /usr/share/ca-certificates/mozilla/ValiCert_Class_1_VA.crt not found, but
listed in /etc/ca-certificates.conf.
W: /usr/share/ca-certificates/mozilla/ValiCert_Class_2_VA.crt not found, but
listed in /etc/ca-certificates.conf.
0 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d....
done.
done.
won't cure the problem, though.
Only when I do:
# dpkg-reconfigure ca-certificates
Processing triggers for ca-certificates (20140927) ...
Updating certificates in /etc/ssl/certs... 0 added, 5 removed; done.
Running hooks in /etc/ca-certificates/update.d....
Removing debian:Entrust.net_Secure_Server_CA.pem
Removing debian:RSA_Root_Certificate_1.pem
Removing debian:TDC_Internet_Root_CA.pem
Removing debian:ValiCert_Class_1_VA.pem
Removing debian:ValiCert_Class_2_VA.pem
done.
done.
without any changes in the selections (I just click ok), the certificates
(rather said: there symlinks and config file entries) are removed.
Cheers,
Chris.
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
