On Thu, Apr 25, 2019 at 1:42 PM Danishka Navin danishka@gmail.com wrote:
On Wed, Apr 24, 2019 at 6:02 PM Sérgio Basto sergio@serjux.com wrote:
On Wed, 2019-04-24 at 11:35 +0530, Danishka Navin wrote:
Hi,
Sri Lanka Cert is gonna implement local Root CA. How we can submit this Root CA with Fedora?
I could not find enough information on this.
you can do one custom ca-certificates-2018.2.26-2.fc29.noarch package and add your certificate to ca-truted in you system
Its about officially distributed using formal channels, i.e: Operating Systems and Browsers. This is not about testing locally. I mean it required to be in ca-certificates-2018.2.26-2.fc29.noarch package by default.
That package comes from Mozilla's collection. If Mozilla approves it, Fedora will pick it up as soon as an updated ca-certificates package is released. That said, it sounds like the intent of that CA is for a government-mandated man-in-the-middle attack to monitor secure traffic. It is highly unlikely that will be accepted by Mozilla.