Bug#558283: nss: please add a certificate package
Philipp Kern
pkern at debian.org
Fri Nov 27 15:53:48 UTC 2009
Package: nss
Version: 3.12.4-1
Severity: wishlist
Hi Mike,
attached is a proposal for a ca-certificates-nss package. I had initially
thought to name it ca-certificates-mozilla, but considering that we add some
certificates through patches it looked a bit like a lie to do it like this.
Currently I fetch certdata.txt myself into the ca-certificates package and
then explode it into many files. I feel that it should instead be done in
the data source directly. Thus I copied the script to debian/.
I implemented a blacklist because the way we organize certificates in the
file system does not support negative trust values, thus the one currently
in certdata.txt is blocked from the export.
I would revamp ca-certificates in a similar way with subpackages putting
certificates into /usr/share/ca-certificates/<suffix> and I then intend to
recommend ca-certificates-nss, which should provide us with the basic set
almost everyone needs.
Any input on this would be cool. :-)
Kind regards,
Philipp Kern
More information about the pkg-mozilla-maintainers
mailing list