Bug 1414560

Summary: Adjust ca-certificates to allow p11-kit-trust to distinguish between Mozilla-Policy-CAs and others [RHEL 6.x]
Product: Red Hat Enterprise Linux 6 Reporter: Kai Engert (:kaie) (inactive account) <kengert>
Component: ca-certificatesAssignee: Kai Engert (:kaie) (inactive account) <kengert>
Status: CLOSED WONTFIX QA Contact: BaseOS QE Security Team <qe-baseos-security>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 6.9CC: dueno
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-10-27 11:41:36 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On: 1414553    
Bug Blocks: 1414563    

Description Kai Engert (:kaie) (inactive account) 2017-01-18 20:29:57 UTC
Once bug 1414553 is fixed, we must update ca-certificates to make use of the new feature, by packaging the Mozilla-CAs in the correct way.

Also, we should improve the documentation of the ca-certificates package, to ensure that admins who install additional CAs, don't accidentally/unknowingly flag CAs as being from Mozilla.