At least in Spain certificates are used to sign official documents with okular or with a software called autofirma, and it works fine in Fedora 40. It is also possible to sign using browsers and certificates in browsers serve to be identified (mainly in official sites). To do this, one needs to import the certificate into the browser. With crypto policy DEFAULT, it is not possible to import them (or, if the system come from an update, to export previously imported certificates); this is probably due to obsolete protocols. With LEGACY, it is possible. Enrique. PS. There was a typo in the first reply, it is update-crypto-policies -- _______________________________________________ users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue