[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: could somebody work with https://formulario-mre.serpro.gov.br/sci/pages/web/pacomPasesWebInicial.jsf and get them to fix the certificate issue.



At bottom :-

On 07/02/2019, Samuel Henrique <samueloph@debian.org> wrote:
> Hello shirish,
>
> It seems like you just hit a long known Brazilian government's IT problem.
>
> A much better way might be to get the certificate in
>>
>> https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/
>>
>
> This won't happen, please see
> https://bugzilla.mozilla.org/show_bug.cgi?id=438825
>
> I'm not sure there's any workarounds for that.
>
> Regards,
>
> --
> Samuel Henrique <samueloph>
>

Dear Samuel,

Thank you for the quick response. While I didn't read all of it as I
was most interested to know why it was finally fixed as won't fixed I
just got to the bottom end of the bug. It seems that 14 1st level sub
CA's need to certify themselves independently before the super-CA can
apply and do -

See from https://bugzilla.mozilla.org/show_bug.cgi?id=438825#c144
onwards which explains the issue threadbare.  There also seems to be
no clarity what certificates need to be manually downloaded and how in
order to proceed in a good manner.

For instance in
https://bugzilla.mozilla.org/show_bug.cgi?id=438825#c83 Ruy Ramos
shares about https://ccd.serpro.gov.br/certificados/index.htm but that
page and the links therein are in brazil/portugese language so it's
hard for a non-native Portugese reader to know what is for what.

At the very least, those pages should have been translated to English
or give some other place so people know of some workarounds rather
than just using permanent exception.

-- 
          Regards,
          Shirish Agarwal  शिरीष अग्रवाल
  My quotes in this email licensed under CC 3.0
http://creativecommons.org/licenses/by-nc/3.0/
http://flossexperiences.wordpress.com
EB80 462B 08E1 A0DE A73A  2C2F 9F3D C7A4 E1C4 D2D8


Reply to: