Re: How to submit Root CA to ship with Fedora

2019-05-21 Thread Nico Kadel-Garcia
On Mon, May 20, 2019 at 9:20 AM Stephen Gallagher wrote: > > On Mon, May 20, 2019 at 8:53 AM Danishka Navin wrote: > > Seems government is working with Chinese tech people to run mass online > > surveillance system. > > http://www.themorning.lk/china-styled-mass-online-surveillance/ > > > > > >

Re: How to submit Root CA to ship with Fedora

2019-05-20 Thread Stephen Gallagher
On Mon, May 20, 2019 at 8:53 AM Danishka Navin wrote: > Seems government is working with Chinese tech people to run mass online > surveillance system. > http://www.themorning.lk/china-styled-mass-online-surveillance/ > > > But I am not clear how Root CA can use to SSL MITM attack instead of user

Re: How to submit Root CA to ship with Fedora

2019-05-20 Thread Danishka Navin
On Fri, Apr 26, 2019 at 2:06 AM Stephen Gallagher wrote: > On Thu, Apr 25, 2019 at 1:42 PM Danishka Navin wrote: > > > > > > > > On Wed, Apr 24, 2019 at 6:02 PM Sérgio Basto wrote: > >> > >> On Wed, 2019-04-24 at 11:35 +0530, Danishka Navin wrote: > >> > >> Hi, > >> > >> Sri Lanka Cert is gonna

Re: How to submit Root CA to ship with Fedora

2019-04-25 Thread Stephen Gallagher
On Thu, Apr 25, 2019 at 1:42 PM Danishka Navin wrote: > > > > On Wed, Apr 24, 2019 at 6:02 PM Sérgio Basto wrote: >> >> On Wed, 2019-04-24 at 11:35 +0530, Danishka Navin wrote: >> >> Hi, >> >> Sri Lanka Cert is gonna implement local Root CA. >> How we can submit this Root CA with Fedora? >> >> I

Re: How to submit Root CA to ship with Fedora

2019-04-25 Thread Danishka Navin
On Wed, Apr 24, 2019 at 6:02 PM Sérgio Basto wrote: > On Wed, 2019-04-24 at 11:35 +0530, Danishka Navin wrote: > > Hi, > > Sri Lanka Cert is gonna implement local Root CA. > How we can submit this Root CA with Fedora? > > I could not find enough information on this. > > > you can do one custom c

(fix some typos) Re: How to submit Root CA to ship with Fedora

2019-04-24 Thread Sérgio Basto
On Wed, 2019-04-24 at 11:35 +0530, Danishka Navin wrote: > Hi, > > Sri Lanka Cert is gonna implement local Root CA. > How we can submit this Root CA with Fedora? > > I could not find enough information on this. You can do one custom ca-certificates.noarch package and add your certificate to ca-t

Re: How to submit Root CA to ship with Fedora

2019-04-24 Thread Sérgio Basto
On Wed, 2019-04-24 at 11:35 +0530, Danishka Navin wrote: > Hi, > > Sri Lanka Cert is gonna implement local Root CA. > How we can submit this Root CA with Fedora? > > I could not find enough information on this. you can do one custom ca-certificates-2018.2.26-2.fc29.noarch package and add your c

Re: How to submit Root CA to ship with Fedora

2019-04-24 Thread Vitaly Zaitsev
Hello, Danishka Navin. Wed, 24 Apr 2019 14:12:44 +0530 you wrote: > I have already a passwed relavent information and asked to create a > ticket against NSS product and 'CA Certificate Root Program' component. Mozilla will never accept CA certificates for government MITM. -- Sincerely, Vitaly

Re: How to submit Root CA to ship with Fedora

2019-04-24 Thread Tomas Mraz
On Wed, 2019-04-24 at 09:15 +0200, Dominik 'Rathann' Mierzejewski wrote: > Hi, > > On Wednesday, 24 April 2019 at 08:05, Danishka Navin wrote: > > Sri Lanka Cert is gonna implement local Root CA. > > How we can submit this Root CA with Fedora? > > > > I could not find enough information on this.

Re: How to submit Root CA to ship with Fedora

2019-04-24 Thread Danishka Navin
On Wed, Apr 24, 2019 at 12:46 PM Dominik 'Rathann' Mierzejewski < domi...@greysector.net> wrote: > Hi, > > On Wednesday, 24 April 2019 at 08:05, Danishka Navin wrote: > > Sri Lanka Cert is gonna implement local Root CA. > > How we can submit this Root CA with Fedora? > > > > I could not find enoug

Re: How to submit Root CA to ship with Fedora

2019-04-24 Thread Dominik 'Rathann' Mierzejewski
Hi, On Wednesday, 24 April 2019 at 08:05, Danishka Navin wrote: > Sri Lanka Cert is gonna implement local Root CA. > How we can submit this Root CA with Fedora? > > I could not find enough information on this. The best path would be to get it included in Mozilla's root CA trust store, which Fedo