From b2cae8b25d30cee6412433139fbc323f08cffb8a Mon Sep 17 00:00:00 2001 From: Lars Wendler Date: Tue, 8 Aug 2017 09:38:15 +0200 Subject: [PATCH] app-misc/ca-certificates: Fixed removal of untrusted certs (#616002). Package-Manager: Portage-2.3.6, Repoman-2.3.3 --- .../ca-certificates-20161130.3.30.2.ebuild | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/app-misc/ca-certificates/ca-certificates-20161130.3.30.2.ebuild b/app-misc/ca-certificates/ca-certificates-20161130.3.30.2.ebuild index a72077ebef87..45efcd9d5817 100644 --- a/app-misc/ca-certificates/ca-certificates-20161130.3.30.2.ebuild +++ b/app-misc/ca-certificates/ca-certificates-20161130.3.30.2.ebuild @@ -138,9 +138,15 @@ src_compile() { fi if ! use insecure_certs ; then + elog "To prevent applications relying on system's trusted root certificate store" + elog "from using CAs where at least one major browser vendor Gentoo is following" + elog "has decided to apply trust level restrictions, the following" + elog "certificate(s) were removed:" # Remove untrusted certs from StartCom and WoSign (bug #598072) - rm "${c}"/mozilla/StartCom* || die - rm "${c}"/mozilla/WoSign* || die + elog "$(find "${c}" -type f \( \ + -iname '*startcom*' \ + -o -iname '*wosign*' \ + \) -printf '%P removed; see https://bugs.gentoo.org/598072 for details\n' -delete)" fi ( -- 2.26.2