Bug 1418734

Summary: Update p11-kit to support the new nss-mozilla-ca-policy attribute
Product: [Fedora] Fedora Reporter: Kai Engert (:kaie) (inactive account) <kengert>
Component: p11-kitAssignee: Stef Walter <stefw>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: rawhideCC: dueno, kengert, mpreisle, stefw, tmraz
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: p11-kit-0.23.4-1.fc26 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-02-23 18:30:37 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1400293, 1418739    

Description Kai Engert (:kaie) (inactive account) 2017-02-02 15:22:21 UTC 
An enhancement is required to fix bug 1400293.

Firefox must be able to distinguish between Mozilla-CA roots and other locally installed roots.

The necessary enhancement to p11-kit has been suggested upstream at
https://bugs.freedesktop.org/show_bug.cgi?id=99453

This bug requests to pick up this change in Fedora, after the changes have been added to upstream NSS and p11-kit projects.
Comment 1 Stef Walter 2017-02-06 10:01:45 UTC 
https://github.com/p11-glue/p11-kit/pull/46
Comment 2 Kai Engert (:kaie) (inactive account) 2017-02-23 18:30:37 UTC 
Fixed in p11-kit 0.23.4