Bug 148995

Summary: please insert cacert.org in your ca-lists
Product: [openSUSE] SUSE Linux 10.1 Reporter: Micha Glave <suse>
Component: SecurityAssignee: E-mail List <bnc-team-screening>
Status: RESOLVED WONTFIX QA Contact: E-mail List <qa-bugs>
Severity: Enhancement    
Priority: P5 - None CC: bjacke, kde-maintainers, security-team, suse-beta, wolfgang.rosenauer
Version: unspecified   
Target Milestone: ---   
Hardware: Other   
OS: All   
Whiteboard:
Found By: Customer Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---

Description Micha Glave 2006-02-08 06:55:49 UTC
CAcert.org is a volunteer organization that offers FREE digital certificates for everyone. 
It's based on a web of trust (WOT), so any participant was checked by an other. 
Please see: http://www.cacert.org/index.php?id=51 

It would be fine to have konqueror and firefox (wget, links etc.) to accept/trust SSL-certs signed by cacert.org.
Comment 1 Christian Boltz 2006-02-08 11:16:56 UTC
This is no bug in bugzilla - please select the correct product (SUSE Linux X.Y), version and component. And don't forget to set the bug back to ASSIGNED when you have done this.

That said, I second your wish ;-)
Comment 2 Michael Gross 2006-02-08 11:24:16 UTC
I've added the maintainers of these tools to CC.
Comment 3 Michael Gross 2006-02-08 11:25:00 UTC
I'm closing this bug right now, people were notified by mail.
Comment 4 Wolfgang Rosenauer 2006-02-08 11:35:01 UTC
short answer for Firefox: we are not allowed to include other certificates than used by the Mozilla Foundation for trademark reasons.
Comment 5 Stephan Kulow 2006-02-08 12:22:42 UTC
and KDE does not include what isn't in either Firefox or IE - so first Mozilla :)
Comment 6 Dirk Mueller 2006-02-08 12:24:49 UTC
KDE also doubts integrity of cacert.org - so this one in particular will be impossible to include upstream. and novell can't do guarantees either. 
Comment 7 Peter Bowen 2007-05-29 12:43:39 UTC
*** Bug 95516 has been marked as a duplicate of this bug. ***
Comment 8 Marcus Meissner 2007-05-31 20:22:50 UTC
if you do not cc securitty team, we will not see it.
Comment 9 Stephan Kulow 2008-06-25 09:35:26 UTC
mass reopening all SuSE Linux bugs that are set to REMIND+LATER to change the resolution to WONTFIX (adapting to new policy)
Comment 10 Stephan Kulow 2008-06-25 09:37:33 UTC
mass reopening all SuSE Linux bugs that are set to REMIND+LATER to change the resolution to WONTFIX (adapting to new policy)
Comment 11 Stephan Kulow 2008-06-25 09:42:09 UTC
mass reopening all SuSE Linux bugs that are set to REMIND+LATER to change the resolution to WONTFIX (adapting to new policy)
Comment 12 Stephan Kulow 2008-06-25 09:53:33 UTC
Closing old LATER+REMIND bugs as WONTFIX - if you still plan to work on it, feel free to reopen and set to ASSIGNED.

In case the report saw repeated reopen comments, it's due to bugzilla timing out on the huge request ;(