On 13-12-2019 11:21, Udo van den Heuvel via devel wrote: > On 13-12-2019 11:09, Udo van den Heuvel via devel wrote: >> So is this an isseu in the ca-certificates rpm? > > https://letsencrypt.org/certificates/ shows the relationships between > certificates. > Could it be that the Fedora rpm has no info on the X3 cert?
Using the info at https://www.happyassassin.net/2015/01/14/trusting-additional-cas-in-fedora-rhel-centos-dont-append-to-etcpkitlscertsca-bundle-crt-or-etcpkitlscert-pem/ I palced some pem files (sans .txt) in /etc/pki/ca-trust/source/anchors/ and ran sudo update-ca-trust. Stuff looks like: # ls -tl total 12 -rw-r--r-- 1 root root 1647 Dec 13 11:27 lets-encrypt-x3-cross-signed.pem -rw-r--r-- 1 root root 2016 Dec 13 11:27 letsencryptauthorityx3.pem -rw-r--r-- 1 root root 1200 Dec 13 11:25 trustid-x3-root.pem No change in ntpd behaviour... Udo _______________________________________________ devel mailing list devel@ntpsec.org http://lists.ntpsec.org/mailman/listinfo/devel
