Description of problem: Since upgrading from Fedora 13 to 14, I receive every day the following message: /etc/cron.daily/x509watch: /etc/pki/tls/certs/ca-bundle.trust.crt (TC TrustCenter Class 2 CA) is not valid since 2011-01-01 /etc/pki/tls/certs/ca-bundle.trust.crt (TC TrustCenter Class 3 CA) is not valid since 2011-01-01 Version-Release number of selected component (if applicable): openssl-1.0.0d-1.fc14.i686 x509watch-0.3.0-1.fc14.noarch How reproducible: Every time x509watch is run Steps to Reproduce: 1. Upgrade a FC13 system to FC14 2. Make sure x509watch is installed 3. Observe daily x509watch reports Actual results: Message: ca-bundle.trust.crt is not valid. Expected results: No such message Additional info:
Please provide a new ca-bundle.trust.crt.
Fedora 14 ca-certificates is version 2010.63-3.fc14. I see in Fedora 15 repo version 2011.70-2.fc15 is current. Do I need to upgrade to Fedora 15 just to get a newer ca-bundle.trust.crt?
Even while ca-bundle.trust.crt might be outdated, the reported issue is a bug in x509watch, because the system CA bundles need to be ignored. Further, newer versions like ca-certificates-2011.74-1.fc16 even trigger a year 2038 issue within perl and cause some exotic CAs valid till > 2037 to be reported by accident on 32 bit systems running perl < 5.12.
x509watch-0.5.0-1.fc15 has been submitted as an update for Fedora 15. https://admin.fedoraproject.org/updates/x509watch-0.5.0-1.fc15
x509watch-0.5.0-1.fc14 has been submitted as an update for Fedora 14. https://admin.fedoraproject.org/updates/x509watch-0.5.0-1.fc14
x509watch-0.5.0-1.el6 has been submitted as an update for Fedora EPEL 6. https://admin.fedoraproject.org/updates/x509watch-0.5.0-1.el6
x509watch-0.5.0-1.el5 has been submitted as an update for Fedora EPEL 5. https://admin.fedoraproject.org/updates/x509watch-0.5.0-1.el5
x509watch-0.5.0-1.el4 has been submitted as an update for Fedora EPEL 4. https://admin.fedoraproject.org/updates/x509watch-0.5.0-1.el4
x509watch-0.5.0-1.fc15 has been pushed to the Fedora 15 stable repository. If problems still persist, please make note of it in this bug report.
x509watch-0.5.0-1.fc14 has been pushed to the Fedora 14 stable repository. If problems still persist, please make note of it in this bug report.
x509watch-0.5.0-1.el5 has been pushed to the Fedora EPEL 5 stable repository. If problems still persist, please make note of it in this bug report.
x509watch-0.5.0-1.el6 has been pushed to the Fedora EPEL 6 stable repository. If problems still persist, please make note of it in this bug report.
x509watch-0.5.0-1.el4 has been pushed to the Fedora EPEL 4 stable repository. If problems still persist, please make note of it in this bug report.
It is fixed, thank you. You can close the bug. Regards, Eddie.