On Fri, Apr 26, 2019 at 2:06 AM Stephen Gallagher sgallagh@redhat.com wrote:
On Thu, Apr 25, 2019 at 1:42 PM Danishka Navin danishka@gmail.com wrote:
On Wed, Apr 24, 2019 at 6:02 PM Sérgio Basto sergio@serjux.com wrote:
On Wed, 2019-04-24 at 11:35 +0530, Danishka Navin wrote:
Hi,
Sri Lanka Cert is gonna implement local Root CA. How we can submit this Root CA with Fedora?
I could not find enough information on this.
you can do one custom ca-certificates-2018.2.26-2.fc29.noarch package
and add your certificate to ca-truted in you system
Its about officially distributed using formal channels, i.e: Operating
Systems and Browsers.
This is not about testing locally. I mean it required to be in ca-certificates-2018.2.26-2.fc29.noarch
package by default.
That package comes from Mozilla's collection. If Mozilla approves it, Fedora will pick it up as soon as an updated ca-certificates package is released. That said, it sounds like the intent of that CA is for a government-mandated man-in-the-middle attack to monitor secure traffic. It is highly unlikely that will be accepted by Mozilla.
Seems government is working with Chinese tech people to run mass online surveillance system. http://www.themorning.lk/china-styled-mass-online-surveillance/
But I am not clear how Root CA can use to SSL MITM attack instead of user cert.