Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 545842

Summary: app-misc/ca-certificates: "UNTRUSTED BUT NOT BLACKLISTED CERTIFICATE FOUND" messages while compiling
Product: Gentoo Linux Reporter: aditsu <aditsu>
Component: Current packagesAssignee: Gentoo's Team for Core System packages <base-system>
Status: RESOLVED UPSTREAM    
Severity: normal    
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---
Attachments: greater part of the emerge output

Description aditsu 2015-04-07 17:43:41 UTC
Created attachment 400768 [details]
greater part of the emerge output

While compiling ca-certificates-20140927.3.17.2 I'm getting a lot of messages like:

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
UNTRUSTED BUT NOT BLACKLISTED CERTIFICATE FOUND: "Distrust a pb.com certificate that does not comply with the baseline requirements."
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
UNTRUSTED BUT NOT BLACKLISTED CERTIFICATE FOUND: "Distrust: O=Egypt Trust, OU=VeriSign Trust Network (cert 1/3)"
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Other certificates in these messages are named "Bogus GMail", "Bogus Google", "Explicitly Distrust DigiNotar Root CA", etc.
Are there actual bad certificates being trusted on my system? Do I need to do something to fix that? Or are they just tests?
Comment 1 SpanKY gentoo-dev 2015-04-08 03:53:14 UTC
this is what mozilla chooses to do