Hello,

On 20/07/15 17:30, Cedric Dufour wrote:
> On 07/20/2015 09:57 AM, Cédric Dufour - Idiap Research Institute wrote:
>> In Debian/Wheezy (oldstable), QuoVadis three "G3" Root CAs -
>> https://www.quovadisglobal.ch/Repository/DownloadRootsAndCRL.aspx -
>> are missing from the 'ca-certificates' package (while they are
>> present in Debian/Jessie).
>>
>> Would it be possible to add them (as we now receive server
>> certificates that trace back to such "G3" root issuing CAs) ?
>
> Does installing the ca-certificates package from Jessie cause any issues for 
> you?
>
> Typically, backports is for packages that need rebuilding, due to the newer 
> package not being installable, due to newer dependencies, etc. I'm pretty 
> sure in your case, this should "Just Work" installing the newer version. Let 
> me know if the version from Jessie does not install cleanly.
>

Jessie package does install cleanly. As we have our own local mirror of Debian 
APT repository, I can deploy it easily enought to all our Wheezy hosts (we have 
300+ Linux/Debian hosts).

The only problem I see with this approach is that I have to monitor Jessie 
security updates closely and make sure to "import" any updated package in our 
Wheezy repository.
I'd rather not mess with the APT configuration of our Wheezy hosts and add 
Jessie repositories along preferences/priorities/pinning, unless you tell me 
this is the recommended course of action from Debian point of view.

Thanks for your reply (and the good work on Debian, our favorite OS  )

Best,

Cédric


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to