Date: Thu, 24 Nov 2005 17:50:47 +1100 (EST) From: PeterJeremy@optushome.com.au To: FreeBSD-gnats-submit@FreeBSD.org Cc: PeterJeremy@optushome.com.au Subject: ports/89483: Request to add CAcert.org keys to security/ca-roots Message-ID: <200511240650.jAO6olt0044060@server.vk2pj.dyndns.org> Resent-Message-ID: <200511240700.jAO707OV002790@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 89483 >Category: ports >Synopsis: Request to add CAcert.org keys to security/ca-roots >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: change-request >Submitter-Id: current-users >Arrival-Date: Thu Nov 24 07:00:07 GMT 2005 >Closed-Date: >Last-Modified: >Originator: Peter Jeremy >Release: FreeBSD 7.0-CURRENT i386 >Organization: n/a >Environment: System: FreeBSD server.vk2pj.dyndns.org 7.0-CURRENT FreeBSD 7.0-CURRENT #13: Mon Nov 14 19:37:17 EST 2005 root@server.vk2pj.dyndns.org:/var/obj/k7/usr/src/sys/server i386 >Description: security/ca-roots provides a X.509 root certificate database. To quite CAcert's website (www.cacert.org): "CAcert.org is a community driven, Certificate Authority that issues certificates to the public at large for free." CAcert's aim meshes well with FreeBSD's aims and that including CAcert's root certificates in FreeBSD would benefit both projects. CAcert has its root certificates included in Debian, Knoppix 3.8, Gentoo, MirBSD, CentOS 4 and the Nokia 770. Negotiations are underway with Mozilla, Grml and Fedora. Disclaimer: My only interest in CAcert.org is as a validated assurer. >How-To-Repeat: grep -y cacert /usr/ports/security/ca-roots/files/ca-root.crt >Fix: Import CAcert.org's root certificates from http://www.cacert.org/certs/class3.crt http://www.cacert.org/certs/root.crt (authenticating these certificates is left as an exercise for the reader :-) >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200511240650.jAO6olt0044060>