Bug#718471: iceweasel: Root Verisign cert allowed to sign code in ff but not iceweasel

2013-08-02 Thread Karl O. Pinc
On 08/02/2013 09:37:17 AM, Mike Hommey wrote: > Hu, my bad, this was supposed to be 3.13.6. Which suggests it should > be > good in stable... I just looked, and the signing bit seems to be on in the stable source code. I could simply be wrong and this isn't the problem, but I am getting a cert

Bug#718471: iceweasel: Root Verisign cert allowed to sign code in ff but not iceweasel

2013-08-02 Thread Mike Hommey
On Fri, Aug 02, 2013 at 03:34:56PM +0200, Thijs Kinkhorst wrote: > Hi Mike, > > On Thu, August 1, 2013 06:26, Mike Hommey wrote: > > Version: 2:3.14.6-1 > > I'm having trouble locating this version... Hu, my bad, this was supposed to be 3.13.6. Which suggests it should be good in stable... actua

Bug#718471: iceweasel: Root Verisign cert allowed to sign code in ff but not iceweasel

2013-08-02 Thread Thijs Kinkhorst
Hi Mike, On Thu, August 1, 2013 06:26, Mike Hommey wrote: > Version: 2:3.14.6-1 I'm having trouble locating this version... > On Wed, Jul 31, 2013 at 11:05:08PM -0500, Karl O. Pinc wrote: >> Package: iceweasel >> Version: 17.0.7esr-1~deb7u1 >> Severity: important >> >> Hi, >> >> I'm finding that

Bug#718471: closed by Mike Hommey (Re: Bug#718471: iceweasel: Root Verisign cert allowed to sign code in ff but not iceweasel)

2013-07-31 Thread Karl O. Pinc
Seems to be fixed in sid. For reasons I don't get even though wheezy iceweasel says it's version 17 it seems to be based off of version 10 ff, as far as I can tell from a position of ignorance. Karl Free Software: "You don't pay back, you pay forward." -- Robert A. Heinlein -

Bug#718471: closed by Mike Hommey (Re: Bug#718471: iceweasel: Root Verisign cert allowed to sign code in ff but not iceweasel)

2013-07-31 Thread Karl O. Pinc
On 07/31/2013 11:30:05 PM, Debian Bug Tracking System wrote: > Let's see with the security team. What's our policy on CA updates for > stable? Has this been fixed in testing or sid? Mozilla seems to handle this with a change to code, which means a backport would work. If it hasn't been fixed, it

Bug#718471: iceweasel: Root Verisign cert allowed to sign code in ff but not iceweasel

2013-07-31 Thread Karl O. Pinc
Package: iceweasel Version: 17.0.7esr-1~deb7u1 Severity: important Hi, I'm finding that the root cert "CN=VeriSign Class 3 Public Primary Certification Authority - G5" is not authorized to sign java code. Specifically, I'm running icetea and I get a cert popup when trying to run java code signed