It seems that RSA has changed the MD2 status: http://www.ietf.org/ietf-ftp/IPR/RSA-MD-all
"The following was recevied Fenbruary 23,2000 From: "Linn, John" February 19, 2000 The purpose of this memo is to clarify the status of intellectual property rights asserted by RSA Security Inc. ("RSA") in the MD2, MD4 and MD5 message-digest algorithms, which are documented in RFC-1319, RFC-1320, and RFC-1321 respectively. Implementations of these message-digest algorithms, including implementations derived from the reference C code in RFC-1319, RFC-1320, and RFC-1321, may be made, used, and sold without license from RSA for any purpose.[...]" -- Can't Import VeriSign Root CA Certificate https://bugs.launchpad.net/bugs/176251 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs