[Bug 296517] secure/caroot: ePKI_Root_Certification_Authority.pem should be untrusted rather than trusted

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296517

--- Comment #1 from Helge Oldach <freebsd@oldach.net> ---
Ah, the certdata.txt pulled from Mozilla NSS_3_123_1_RTM says:

# Certificate "ePKI Root Certification Authority"
# For Server Distrust After: Tue Apr 15 23:59:59 2025

So this is a certificate that is now expired (but wasn't during the latest
import). So we should regen, or import a more recent NSS.

FWIW, we also have

# Certificate "Izenpe.com"
# For Server Distrust After: Wed Apr 15 23:59:59 2026

in the import, which should be expired as well, however this cert still remains
trusted for whatever reason. Maybe a text/octal mismatch in the pulled
certdata.txt.

-- 
You are receiving this mail because:
You are the assignee for the bug.