From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Date: Thu, 21 Dec 2017 18:48:16 +0300 From: Mikhail Efremov To: ALT Linux Team development discussions Message-ID: <20171221184816.2968172e@sem.office.basealt.ru> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Subject: [devel] RFC: ca-certificates a la Fedora X-BeenThere: devel@lists.altlinux.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: ALT Linux Team development discussions List-Id: ALT Linux Team development discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Dec 2017 15:48:18 -0000 Archived-At: List-Archive: List-Post: Hello! =D0=AF =D1=81=D0=B5=D0=B9=D1=87=D0=B0=D1=81 =D0=B3=D0=BE=D1=82=D0=BE=D0=B2= =D0=BB=D1=8E ca-certificates (=D1=81=D0=B5=D0=B3=D0=BE=D0=B4=D0=BD=D1=8F = =D1=81=D0=B4=D0=B5=D0=BB=D0=B0=D1=8E =D1=82=D0=B5=D1=81=D1=82=D0=BE=D0=B2= =D0=BE=D0=B5 =D0=B7=D0=B0=D0=B4=D0=B0=D0=BD=D0=B8=D0=B5) =D1=81 =D0=B8=D1=81=D0=BF=D0=BE=D0=BB=D1=8C=D0=B7=D0=BE=D0=B2=D0=B0=D0=BD=D0=B8=D0= =B5=D0=BC p11-kit (https://p11-glue.freedesktop.org/), =D0=BA=D0=B0=D0=BA = =D0=B2 =D0=A4=D0=B5=D0=B4=D0=BE=D1=80=D0=B5. =D0=98=D1=85 =D1=81=D1=85=D0=B5=D0=BC=D0=B0 =D0=B2=D1=8B=D0=B3=D0=BB=D1=8F= =D0=B4=D0=B8=D1=82 =D0=B2=D0=BF=D0=BE=D0=BB=D0=BD=D0=B5 =D1=80=D0=B0=D0=B7= =D1=83=D0=BC=D0=BD=D0=BE=D0=B9, =D1=81=D0=BA=D1=80=D0=B8=D0=BF=D1=82 =D0=BD= =D0=B0 =D0=BF=D0=B8=D1=82=D0=BE=D0=BD=D0=B5 =D0=B4=D0=BB=D1=8F =D0=B3=D0=B5= =D0=BD=D0=B5=D1=80=D0=B0=D1=86=D0=B8=D0=B8 p11-kit-=D0=B1=D0=B0=D0=BD=D0=B4=D0=BB=D0=B0 =D1=8F =D1=82=D0=BE=D0=B6=D0= =B5 =D0=B2=D0=B7=D1=8F=D0=BB =D0=B8=D0=B7 =D0=A4=D0=B5=D0=B4=D0=BE=D1=80=D1= =8B (=D1=82=D0=B0=D0=BC =D0=B5=D1=81=D1=82=D1=8C =D1=87=D0=B0=D1=81=D1=82= =D1=8C =D0=BF=D1=80=D0=BE legacy trust, =D0=BA=D0=BE=D1=82=D0=BE=D1=80=D0=B0=D1=8F =D1=83 =D0=BD=D0=B0=D1=81 =D0=BD= =D0=B5 =D0=B0=D0=BA=D1=82=D1=83=D0=B0=D0=BB=D1=8C=D0=BD=D0=B0, =D0=BD=D0=BE= =D0=BE=D0=BD=D0=B0 =D0=BD=D0=B5 =D0=BC=D0=B5=D1=88=D0=B0=D0=B5=D1=82 =D0= =B8 =D0=BF=D1=80=D0=BE=D1=89=D0=B5 =D0=BE=D1=81=D1=82=D0=B0=D0=B2=D0=B8=D1= =82=D1=8C, =D1=87=D0=B5=D0=BC =D0=B2=D1=8B=D0=BA=D0=B8=D0=B4=D1=8B=D0=B2=D0=B0=D1=82=D1=8C). =D0=9F=D1=80=D0=B8 =D0=B8=D1=81=D0=BF=D0=BE=D0=BB=D1=8C=D0=B7=D0=BE=D0=B2= =D0=B0=D0=BD=D0=B8=D0=B8 =D1=8D=D1=82=D0=BE=D0=B9 =D1=81=D1=85=D0=B5=D0=BC= =D1=8B, =D0=B4=D0=BE=D0=B1=D0=B0=D0=B2=D0=BB=D0=B5=D0=BD=D0=B8=D0=B5 =D0=B4= =D0=BE=D0=BF=D0=BE=D0=BB=D0=BD=D0=B8=D1=82=D0=B5=D0=BB=D1=8C=D0=BD=D1=8B=D1= =85 CA =D1=81=D0=B5=D1=80=D1=82=D0=B8=D1=84=D0=B8=D0=BA=D0=B0=D1=82=D0=BE= =D0=B2 (=D0=B8=D0=BB=D0=B8 blacklist =D0=BD=D0=B5=D1=83=D0=B3=D0=BE=D0=B4=D0=BD=D1= =8B=D1=85), =D1=81=D1=82=D0=B0=D0=BD=D0=BE=D0=B2=D0=B8=D1=82=D1=81=D1=8F = =D0=BE=D1=87=D0=B5=D0=BD=D1=8C =D0=BF=D1=80=D0=BE=D1=81=D1=82=D1=8B=D0=BC = =D0=B4=D0=B5=D0=BB=D0=BE=D0=BC. =D0=9F=D0=B0=D0=BA=D0=B5=D1=82=D1=8B ca-gost-certificates =D0=B8 ca-gost-ce= rtificates-auc =D0=B4=D0=BE=D0=BB=D0=B6=D0=BD=D1=8B =D0=B1=D1=83=D0=B4=D1= =83=D1=82 =D0=BF=D1=80=D0=BE=D1=81=D1=82=D0=BE =D0=BF=D0=BE=D0=BB=D0=BE=D0=B6=D0=B8= =D1=82=D1=8C =D1=81=D0=B5=D1=80=D1=82=D0=B8=D1=84=D0=B8=D0=BA=D0=B0=D1=82= =D1=8B, =D0=BA=D0=BE=D1=82=D0=BE=D1=80=D1=8B=D0=BC =D0=BD=D1=83=D0=B6=D0=BD= =D0=BE =D0=B4=D0=BE=D0=B2=D0=B5=D1=80=D1=8F=D1=82=D1=8C, =D0=B2 /usr/share/pki/ca-trust-source/anchors/ (=D0=BC=D0=BE=D0=B6=D0=BD=D0= =BE =D0=BF=D1=80=D1=8F=D0=BC =D0=B2 DER =D1=84=D0=BE=D1=80=D0=BC=D0=B0=D1= =82=D0=B5) =D0=B8 =D0=B1=D0=BE=D0=BB=D1=8C=D1=88=D0=B5 =D0=BD=D0=B5 =D0=B4=D0=B5=D0=BB= =D0=B0=D1=82=D1=8C =D0=BD=D0=B8=D1=87=D0=B5=D0=B3=D0=BE. =D0=AD=D1=82=D0=BE =D0=B4=D0=BE=D0=BB=D0=B6=D0=BD=D0=BE =D1=80=D0=B0=D0=B1= =D0=BE=D1=82=D0=B0=D1=82=D1=8C =D1=81 openssl =D0=B8 gnutls, =D0=B0 =D0=B2= =D0=BE=D1=82 =D1=81 nss =D0=BF=D1=80=D0=BE=D0=B1=D0=BB=D0=B5=D0=BC=D0=B0: = =D1=8F =D1=82=D0=B0=D0=BA =D0=BF=D0=BE=D0=BD=D0=B8=D0=BC=D0=B0=D1=8E, =D1=87=D1=82=D0=BE nss =D0=B8= =D1=81=D0=BF=D0=BE=D0=BB=D1=8C=D0=B7=D1=83=D0=B5=D1=82 =D1=81=D0=BE=D0=B1= =D1=81=D1=82=D0=B2=D0=B5=D0=BD=D0=BD=D1=8B=D0=B9 =D0=B1=D0=B0=D0=BD=D0=B4= =D0=BB, =D0=B0 =D0=BD=D0=B5 =D1=81=D0=B8=D1=81=D1=82=D0=B5=D0=BC=D0=BD=D1= =8B=D0=B9, =D0=B8 =D0=B8=D1=81=D0=BF=D0=BE=D0=BB=D1=8C=D0=B7=D1=83=D0=B5=D1=82 libnssckbi.so = =D0=B4=D0=BB=D1=8F =D1=80=D0=B0=D0=B1=D0=BE=D1=82=D1=8B =D1=81 =D0=BD=D0=B8= =D0=BC. =D0=92 p11-kit =D0=B8=D1=81=D0=BF=D0=BE=D0=BB=D1=8C=D0=B7=D1=83=D0= =B5=D1=82=D1=81=D1=8F =D0=BC=D0=BE=D0=B4=D1=83=D0=BB=D1=8C pkcs11/p11-kit-trust.so =D0=B8 =D1=83=D1=82=D0=B2=D0=B5=D1=80=D0=B6=D0=B4= =D0=B0=D0=B5=D1=82=D1=81=D1=8F, =D1=87=D1=82=D0=BE =D0=BE=D0=BD =D0=B1=D0= =B8=D0=BD=D0=B0=D1=80=D0=BD=D0=BE =D1=81=D0=BE=D0=B2=D0=BC=D0=B5=D1=81=D1= =82=D0=B8=D0=BC =D1=81 libnssckbi.so, =D1=82=D0=B0=D0=BA =D1=87=D1=82=D0=BE =D0=B2 =D0=A4=D0=B5=D0= =B4=D0=BE=D1=80=D0=B5 =D0=BD=D0=B5=D0=BA=D0=BE=D1=82=D0=BE=D1=80=D0=BE=D0= =B5 =D0=B2=D1=80=D0=B5=D0=BC=D1=8F =D0=B8=D0=BC=D0=B5=D0=BB=D0=B8 =D0=BC=D0= =BE=D0=B4=D1=83=D0=BB=D0=B8 libnssckbi.so =D0=B8 p11-kit-trust.so =D0=BD=D0=B0 =D0=B0=D0=BB=D1=8C=D1=82= =D0=B5=D1=80=D0=BD=D0=B0=D1=82=D0=B8=D0=B2=D0=B0=D1=85, =D0=B0 =D1=81=D0=B5= =D0=B9=D1=87=D0=B0=D1=81 =D0=BF=D1=80=D0=BE=D1=81=D1=82=D0=BE =D0=B2=D1=8B=D0=BA=D0=B8=D0=BD=D1=83=D0=BB=D0=B8 libnssckbi.so =D0=B8=D0=B7= nss (https://bugzilla.redhat.com/show_bug.cgi?id=3D1484449). =D0=9D=D0=BE =D0=B4=D0=B0=D0=B6=D0=B5 =D0=B5=D1=81=D0=BB=D0=B8 =D0=BF=D1=80= =D0=BE =D0=B1=D0=B8=D0=BD=D0=B0=D1=80=D0=BD=D1=83=D1=8E =D1=81=D0=BE=D0=B2= =D0=BC=D0=B5=D1=81=D1=82=D0=B8=D0=BC=D0=BE=D1=81=D1=82=D1=8C - =D1=8D=D1=82= =D0=BE =D0=BF=D1=80=D0=B0=D0=B2=D0=B4=D0=B0, =D1=82=D0=BE =D1=83 =D0=BC=D0= =B5=D0=BD=D1=8F =D0=B5=D1=81=D1=82=D1=8C =D1=81=D0=BE=D0=BC=D0=BD=D0=B5=D0=BD=D0=B8=D1=8F, =D1=87=D1=82=D0=BE =D1=8D= =D1=82=D0=BE =D0=B2=D1=81=D0=B5=D0=B3=D0=B4=D0=B0 =D0=B1=D1=83=D0=B4=D0=B5= =D1=82 =D1=82=D0=B0=D0=BA =D0=B2 =D1=81=D0=BB=D0=B5=D0=B4=D1=83=D1=8E=D1=89= =D0=B8=D1=85 =D0=B2=D0=B5=D1=80=D1=81=D0=B8=D1=8F=D1=85 nss =D0=B8 p11-kit = =D0=B8 =D0=BD=D0=B0=D1=81 =D0=BD=D0=B5=D1=82 =D0=B0=D0=B2=D1=82=D0=BE=D0=BC=D0=B0= =D1=82=D0=B8=D1=87=D0=B5=D1=81=D0=BA=D0=BE=D0=B9 =D0=BF=D1=80=D0=BE=D0=B2= =D0=B5=D1=80=D0=BA=D0=B8 =D1=82=D0=B0=D0=BA=D0=B8=D1=85 =D0=B2=D0=B5=D1=89= =D0=B5=D0=B9 =D0=BF=D1=80=D0=B8 =D1=81=D0=B1=D0=BE=D1=80=D0=BA=D0=B5. =D0=9D=D0=BE =D0=B2=D0=BE=D0=BE=D0=B1=D1=89=D0=B5 =D1=85=D0=BE=D1=80=D0=BE= =D1=88=D0=BE =D0=B1=D1=8B =D0=B7=D0=B0=D1=81=D1=82=D0=B0=D0=B2=D0=B8=D1=82= =D1=8C nss =D0=B8=D1=81=D0=BF=D0=BE=D0=BB=D1=8C=D0=B7=D0=BE=D0=B2=D0=B0=D1= =82=D1=8C p11-kit-trust.so =D0=B2=D0=BC=D0=B5=D1=81=D1=82=D0=BE libnssckbi.so, =D1=82=D0=BE=D0=B3=D0=B4=D0=B0 =D1=83 =D0=BD=D0=B0=D1=81 =D0= =B4=D0=B5=D0=B9=D1=81=D1=82=D0=B2=D0=B8=D1=82=D0=B5=D0=BB=D1=8C=D0=BD=D0=BE= =D0=B1=D1=83=D0=B4=D0=B5=D1=82 =D0=B5=D0=B4=D0=B8=D0=BD=D0=BE=D0=B5 =D0=BC= =D0=B5=D1=81=D1=82=D0=BE =D0=B4=D0=BB=D1=8F =D1=85=D1=80=D0=B0=D0=BD=D0=B5=D0=BD=D0=B8=D1=8F CA =D1=81=D0=B5=D1=80=D1= =82=D0=B8=D1=84=D0=B8=D0=BA=D0=B0=D1=82=D0=BE=D0=B2. =D0=AD=D1=82=D1=83 =D0= =BF=D1=80=D0=BE=D0=B1=D0=BB=D0=B5=D0=BC=D1=83 =D0=BF=D1=80=D0=B8=D0=B4=D0= =B5=D1=82=D1=81=D1=8F =D0=BA=D0=B0=D0=BA-=D1=82=D0=BE =D1=80=D0=B5=D1=88=D0= =B0=D1=82=D1=8C. =D0=92 =D0=BF=D0=B5=D1=80=D0=B2=D1=83=D1=8E =D0=BE=D1=87=D0=B5=D1=80=D0=B5= =D0=B4=D1=8C =D0=BC=D0=BD=D0=B5 =D0=B1=D1=8B =D1=85=D0=BE=D1=82=D0=B5=D0=BB= =D0=BE=D1=81=D1=8C =D1=83=D1=81=D0=BB=D1=8B=D1=88=D0=B0=D1=82=D1=8C =D0=BA= =D0=BE=D0=BC=D0=BC=D0=B5=D0=BD=D1=82=D0=B0=D1=80=D0=B8=D0=B8 =D0=BE=D1=82 l= akostis@, =D0=BA=D0=BE=D1=82=D0=BE=D1=80=D1=8B=D0=B9 =D1=83=D0=B6=D0=B5 =D0=BD=D0=B5= =D1=81=D0=BA=D0=BE=D0=BB=D1=8C=D0=BA=D0=BE =D0=BB=D0=B5=D1=82 =D0=BF=D0=BE= =D0=B4=D0=B4=D0=B5=D1=80=D0=B6=D0=B8=D0=B2=D0=B0=D0=B5=D1=82 ca-certificate= s =D0=B2 =D0=B0=D0=BA=D1=82=D1=83=D0=B0=D0=BB=D1=8C=D0=BD=D0=BE=D0=BC =D1=81=D0=BE=D1=81=D1=82=D0=BE=D1=8F=D0=BD=D0=B8=D0=B8, =D0=B8 legion@, =D0= =BA=D0=B0=D0=BA =D0=BC=D0=B0=D0=BD=D1=82=D0=B5=D0=B9=D0=BD=D0=B5=D1=80=D0= =B0 libnss. --=20 WBR, Mikhail Efremov