Fedora User Certificates

Martin Sourada martin.sourada at gmail.com
Fri Aug 22 19:33:38 UTC 2008


On Fri, 2008-08-22 at 21:04 +0200, Kai Engert wrote:
> Parts of the Fedora infrastructure do not use certificates issued by a
> CA already trusted by Firefox, but from Fedora's own certificate authority.
> 
> If you decide to trust Fedora to issue certificates that can identify
> web sites, you could decide to import that CA cert to your set of
> trusted roots.
> 
> You could go to https://admin.fedoraproject.org/fingerprints and install
> the CA certificate available from the bottom of that page.
> 
> (Unfortunately the mime type currently is not application/x-x509-ca-cert
> so you have to safe that file, and then open it, you might even have to
> go to certificate manager and open the authorities tab, then import from
> there.)
> 
> You can confirm the origin of the certificate by comparing the
> fingerprint presented by Firefox with the one listed on the fingerprints
> page (at least you'll know that the fingerprints page and the CA are
> controlled by the same people).
> 
> Hope that helps,
> Kai
> 
I've already added an exception for https://koji.fedoraproject.org/ both
in epiphany and firefox (I trust the fedora issued certificates),
however this pages seems rather like my certificate is not being
recognized by koji as signed by "known CA authority"...

Martin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/fedora-devel-list/attachments/20080822/27273977/attachment.sig>


More information about the fedora-devel-list mailing list