Bug 919092

Summary: Pull in trust data from new Fedora source paths
Product: [Fedora] Fedora Reporter: Stef Walter <stefw>
Component: p11-kitAssignee: Kalev Lember <kalevlember>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: rawhideCC: kalevlember, kengert, mclasen, stefw, tmraz
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-03-19 14:29:41 EDT Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Bug Depends On:    
Bug Blocks: 466626    

Description Stef Walter 2013-03-07 10:21:05 EST
Update the p11-kit package to pull in trust data from new Fedora source paths. At this point these are:

%{_datadir}/pki/ca-trust-source
%{_sysconfdir}/pki/ca-trust/source

See: https://fedoraproject.org/wiki/Features/SharedSystemCertificates:SubTasks

In addition because ca-certificates is not yet placing data at these locations, we will temporarily pull in data from the old path:

%{_sysconfdir}/pki/tls/certs/ca-bundle.crt

We also want to split out the trust module from the main p11-kit package. This allows easier testing between the old and new systems, and allows the trust module to conflict with the libnssckbi.so file from older nss packages.
Comment 1 Stef Walter 2013-03-12 05:38:22 EDT
Done in p11-kit-0.6.3-1 package, which was uploaded to rawhide several days ago.