ca-certificates: DST_Root_CA_X3.crt expired, so why is it still included in Bullseye?

Path	csiph.com!aioe.org!bofh.it!news.nic.it!robomod
From	Harald Dunkel <harald.dunkel@aixigo.com>
Newsgroups	linux.debian.user
Subject	ca-certificates: DST_Root_CA_X3.crt expired, so why is it still included in Bullseye?
Date	Thu, 12 May 2022 17:00:01 +0200
Message-ID	<Emish-eZM8-1@gated-at.bofh.it> (permalink)
X-Mailbox-Line	From debian-user-request@lists.debian.org Thu May 12 14:57:08 2022
Old-Return-Path	<harald.dunkel@aixigo.com>
X-Amavis-Spam-Status	No, score=-5.55 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, LDO_WHITELIST=-5, SARE_MLH_Stock10=1.66, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=no autolearn_force=no
X-Policyd-Weight	using cached result; rate: -4.6
MIME-Version	1.0
User-Agent	Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.9.0
Content-Language	en-US
Content-Type	text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding	7bit
X-Virus-Status	Clean
X-Mailing-List	<debian-user@lists.debian.org> archive/latest/789037
List-ID	<debian-user.lists.debian.org>
List-URL	<https://lists.debian.org/debian-user/>
List-Archive	https://lists.debian.org/msgid-search/03cfe428-2da9-a5a6-a134-e673fb4d0e5c@aixigo.com
Approved	robomod@news.nic.it
Lines	14
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Date	Thu, 12 May 2022 16:40:12 +0200
X-Original-Message-ID	<03cfe428-2da9-a5a6-a134-e673fb4d0e5c@aixigo.com>
Xref	csiph.com linux.debian.user:248130

Show key headers only | View raw

Hi folks,

apparently /usr/share/ca-certificates/mozilla/DST_Root_CA_X3.crt expired last year:

% openssl x509 -in /usr/share/ca-certificates/mozilla/DST_Root_CA_X3.crt -noout -dates
notBefore=Sep 30 21:12:19 2000 GMT
notAfter=Sep 30 14:01:15 2021 GMT

I wonder why it is still included in ca-certificates for Bullseye?


Regards

Harri

Back to linux.debian.user | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

ca-certificates: DST_Root_CA_X3.crt expired, so why is it still  included in Bullseye? Harald Dunkel <harald.dunkel@aixigo.com> - 2022-05-12 17:00 +0200
  Re: ca-certificates: DST_Root_CA_X3.crt expired, so why is it still  included in Bullseye? IL Ka <kazakevichilya@gmail.com> - 2022-05-12 17:10 +0200
    Re: ca-certificates: DST_Root_CA_X3.crt expired, so why is it still  included in Bullseye? <tomas@tuxteam.de> - 2022-05-12 17:20 +0200

csiph-web