Since updating to nss-pem-1.0.3-1.fc25 from updates-testing, I have had problems with certificate trust errors. Here's two examples: [adamw@xps13k bodhi (develop)]$ git pull fatal: unable to access 'https://github.com/fedora-infra/bodhi.git/': Peer's certificate issuer has been marked as not trusted by the user. [adamw@xps13k bodhi (develop)]$ curl https://fedorapeople.org/groups/qa/openqa-repos/openqa-testrepo-1.repo curl: (60) Peer's certificate issuer has been marked as not trusted by the user. More details here: https://curl.haxx.se/docs/sslcerts.html After downgrading to nss-pem-1.0.2-2.fc25 , both these issues go away. Attaching rpm -qa output as requested.
Created attachment 1259610 [details] rpm -qa output
Thanks! This is caused by loading nss-pem into older nss package than it was built against. I will introduce stricter dependency requirements in nss-pem.
fixed by http://pkgs.fedoraproject.org/cgit/rpms/nss-pem.git/commit/?id=e8a06477
nss-pem-1.0.3-2.fc25 has been submitted as an update to Fedora 25. https://bodhi.fedoraproject.org/updates/FEDORA-2017-9778e2d516
nss-pem-1.0.3-2.fc24 has been submitted as an update to Fedora 24. https://bodhi.fedoraproject.org/updates/FEDORA-2017-e83e8f94b5
nss-pem-1.0.3-2.fc25 has been pushed to the Fedora 25 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-9778e2d516
nss-pem-1.0.3-2.fc24 has been pushed to the Fedora 24 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-e83e8f94b5
nss-pem-1.0.3-2.fc25 has been pushed to the Fedora 25 stable repository. If problems still persist, please make note of it in this bug report.
nss-pem-1.0.3-2.fc24 has been pushed to the Fedora 24 stable repository. If problems still persist, please make note of it in this bug report.