Arch Linux

ckolos

Member

Registered: 2016-05-05

Posts: 2

ca-certificates-mozilla-3.131.1-1 removes emsign ECC certificates G3

Due to an upstream key compromise (https://groups.google.com/a/mozilla.org … MMvs?pli=1) the G3 Root was removed from the ca-certificates-mozilla-3.131.1-1 package.

This is a pretty serious change and at a minimum, broke sync'ing from several upstream pacman mirrors; rit.edu among them.

I didn't see a notice go out for this change but it feels like somewhat of a big deal. Am I just impatient?

Lone_Wolf

Administrator

From: Netherlands, Europe

Registered: 2005-10-04

Posts: 15,507

Re: ca-certificates-mozilla-3.131.1-1 removes emsign ECC certificates G3

https://archlinux.org/news/update-to-ca … e-attacks/

Anything that still uses those certificates could be a fake and is not to be trusted.

---

Disliking systemd intensely, but not satisfied with alternatives so focusing on taming systemd.

clean chroot building not flexible enough ?
Try clean chroot manager by graysky

ckolos

Member

Registered: 2016-05-05

Posts: 2

Re: ca-certificates-mozilla-3.131.1-1 removes emsign ECC certificates G3

Excellent. Thank you!