[gentoo-project] Gentoo SSL certificates switching to CACert

[gentoo-project] Gentoo SSL certificates switching to CACert

[Robin H. Johnson]

[-- Attachment #1: Type: text/plain, Size: 1096 bytes --]

In the past, all of the SSL certificates for Gentoo services
(forums.g.o, bugs.g.o, etc) were all self-signed. Now that the
foundation is in good legal standing again, we are making headway with
replacing the certificates with those from CACert, via their
Organization assurance program.

From the perspective of users, if their browsers trust the CACert Level
3 certificate or the Level 1, then the browser should trust the new
Gentoo certificates.

One of the new certificates is live on forums.gentoo.org as of today,
but exposed the need for some further display improvements only (wrong
email address) - it still functions perfectly.

If your browser doesn't include the CACert roots, see either:
http://wiki.cacert.org/wiki/BrowserClients
https://www.cacert.org/index.php?id=3
Or make sure you have the latest ca-certificates package (if the browser
uses it), and that update-ca-certificates was run properly.

-- 
Robin Hugh Johnson
Gentoo Linux Developer & Infra Guy
E-Mail     : robbat2@gentoo.org
GnuPG FP   : 11AC BA4F 4778 E3F6 E4ED  F38E B27B 944E 3488 4E85

[-- Attachment #2: Type: application/pgp-signature, Size: 329 bytes --]