Re: ca-certificates 2014.2.1 will remove several still valid CA certificates with weak keys

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



----- Original Message -----
> On Tue, 2014-08-19 at 10:07 -0400, Miloslav Trmač wrote:
> > That’s the right thing to do of course, but leaves the users with an
> > unusable system in the mean time.  Could the update description at
> > least generally point to how to work around this if the certificate
> > owner is not (sufficiently quickly) responsive?
> 
> I'd expect that users would be blocked from using just one application,

Isn’t that enough?  Imagine Fedora contributors being blocked from using “just” koji :)

> A general workaround is to downgrade to the previous package version, do
> you think we need to state that explicitly in the update description?

Well, it’s not a _long-term_ workaround but it does resolve the way I have worded the issue, where everyone involved wants to upgrade the certificate and only the timing isn’t right.  Fair enough.
    Mirek
-- 
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct





[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux