Hi All,

I am getting mixed up with update-ca-certificates.  It reports that I have 
duplicates:
=================================================
# update-ca-certificates 
Updating certificates in /etc/ssl/certs....WARNING: SPI_CA_2006-cacert.pem 
does not contain a certificate or CRL: skipping
WARNING: Verisign_Class_1_Public_Primary_OCSP_Responder.pem does not contain a 
certificate or CRL: skipping
WARNING: cacert.org.pem does not contain a certificate or CRL: skipping
WARNING: Skipping duplicate certificate QuoVadis_Root_CA.pem
WARNING: Skipping duplicate certificate Verisign_RSA_Secure_Server_CA.pem
WARNING: Skipping duplicate certificate 
America_Online_Root_Certification_Authority_1.pem
WARNING: Skipping duplicate certificate 
America_Online_Root_Certification_Authority_2.pem
WARNING: Verisign_Class_3_Public_Primary_OCSP_Responder.pem does not contain a 
certificate or CRL: skipping
WARNING: Skipping duplicate certificate thawteCb.pem
WARNING: Skipping duplicate certificate Wells_Fargo_Root_CA.pem
WARNING: Skipping duplicate certificate thawteCp.pem
WARNING: Skipping duplicate certificate vsign3.pem
WARNING: spi-ca.pem does not contain a certificate or CRL: skipping
WARNING: Verisign_Secure_Server_OCSP_Responder.pem does not contain a 
certificate or CRL: skipping
WARNING: Skipping duplicate certificate aoltw1.pem
WARNING: Skipping duplicate certificate aoltw2.pem
WARNING: Verisign_Class_2_Public_Primary_OCSP_Responder.pem does not contain a 
certificate or CRL: skipping
done.
Running hooks in /etc/ca-certificates/update.d....done.
=================================================

However, when I check for e.g. vsign3.pem I see this:

# ls -la /etc/ssl/certs/vsign*    
-rw-r--r-- 1 root root  984 Jun  1 09:43 /etc/ssl/certs/vsign1.pem
-rw-r--r-- 1 root root  989 Dec  4  2005 /etc/ssl/certs/vsign2.pem
-rw-r--r-- 1 root root  984 Jun  1 09:43 /etc/ssl/certs/vsign3.pem
-rw-r--r-- 1 root root  976 Jun  1 09:43 /etc/ssl/certs/vsignss.pem
-rw-r--r-- 1 root root 1084 Dec  4  2005 /etc/ssl/certs/vsigntca.pem

Also, what should I do with those that report "does not contain a certificate 
or CRL: skipping"?
-- 
Regards,
Mick

Attachment: signature.asc
Description: This is a digitally signed message part.

Reply via email to