thejipster 0 Posted January 7, 2016 Posted January 7, 2016 Does anyone know why the emby install script calls for a cert update? Just curious. Should I be concerned ? Updating certificates in /etc/ssl/certs... 0 added, 0 removed; done. Running hooks in /etc/ca-certificates/update.d.... done. Updating Mono key store Linux Cert Store Sync - version 4.2.1.0 Synchronize local certs with certs from local Linux trust store. Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed. I already trust 172, your new list has 173 Certificate added: C=IL, O=StartCom Ltd., OU=Secure Digital Certificate Signing, CN=StartCom Certification Authority 1 new root certificates were added to your trust store. Import process completed. Done
fc7 123 Posted January 7, 2016 Posted January 7, 2016 Is it emby-server or mono that updates this certificates? I owuld bet is mono. Sent from my iPhone using Tapatalk
thejipster 0 Posted January 7, 2016 Author Posted January 7, 2016 The output I had pasted above does indicate Mono. However, I am always a little concerned when an app updates my root certs.
fc7 123 Posted January 8, 2016 Posted January 8, 2016 We are using stock mono distribution from Xamarin. So it's just an upstream cert update. I would not worry. But if you have doubts the best thing to do is to ask in mono forums to get some peace of mind. In all honesty I don't know why mono touch root ca certs at all. Sent from my iPhone using Tapatalk
beardedgeek 0 Posted February 1, 2016 Posted February 1, 2016 I've just run through the install, and it's added 173 certs, some of which I really don't want on my system: Setting up emby-server (3.0.5857) ... emby-server start/running, process 8931 Processing triggers for libc-bin (2.19-0ubuntu6.6) ... Processing triggers for ca-certificates (20141019ubuntu0.14.04.1) ... Updating certificates in /etc/ssl/certs... 0 added, 0 removed; done. Running hooks in /etc/ca-certificates/update.d.... done. Updating Mono key store Linux Cert Store Sync - version 4.2.1.0 Synchronize local certs with certs from local Linux trust store. Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed. I already trust 0, your new list has 173 Certificate added: C=AT, O=A-Trust Ges. f. Sicherheitssysteme im elektr. Datenverkehr GmbH, OU=A-Trust-nQual-03, CN=A-Trust-nQual-03 Certificate added: CN=ACEDICOM Root, OU=PKI, O=EDICOM, C=ES Certificate added: C=CO, O=Sociedad Cameral de Certificación Digital - Certicámara S.A., CN=AC Raíz Certicámara S.A. Certificate added: C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root Certificate added: C=SE, O=AddTrust AB, OU=AddTrust TTP Network, CN=AddTrust Class 1 CA Root Certificate added: C=SE, O=AddTrust AB, OU=AddTrust TTP Network, CN=AddTrust Public CA Root Certificate added: C=SE, O=AddTrust AB, OU=AddTrust TTP Network, CN=AddTrust Qualified CA Root Certificate added: C=US, O=AffirmTrust, CN=AffirmTrust Commercial Certificate added: C=US, O=AffirmTrust, CN=AffirmTrust Networking Certificate added: C=US, O=AffirmTrust, CN=AffirmTrust Premium Certificate added: C=US, O=AffirmTrust, CN=AffirmTrust Premium ECC Certificate added: C=US, O=America Online Inc., CN=America Online Root Certification Authority 1 Certificate added: C=US, O=America Online Inc., CN=America Online Root Certification Authority 2 Certificate added: C=JP, O=Japanese Government, OU=ApplicationCA Certificate added: C=ES, CN=Autoridad de Certificacion Firmaprofesional CIF A62634068 Certificate added: C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root Certificate added: C=NO, O=Buypass AS-983163327, CN=Buypass Class 2 CA 1 Certificate added: C=NO, O=Buypass AS-983163327, CN=Buypass Class 3 CA 1 Certificate added: C=SK, L=Bratislava, O=Disig a.s., CN=CA Disig Certificate added: C=CN, O=CNNIC, CN=CNNIC ROOT Certificate added: C=GB, S=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Certification Authority Certificate added: C=GB, S=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO ECC Certification Authority Certificate added: C=EU, O=AC Camerfirma SA CIF A82743287, OU=http://www.chambersign.org, CN=Chambers of Commerce Root Certificate added: C=EU, O=AC Camerfirma SA CIF A82743287, OU=http://www.chambersign.org, CN=Global Chambersign Root Certificate added: C=FR, O=Dhimyotis, CN=Certigna Certificate added: C=FR, O=Certinomis, OU=0002 433998903, CN=Certinomis - Autorité Racine Certificate added: C=FR, O=Certplus, CN=Class 2 Primary CA Certificate added: C=PL, O=Unizeto Sp. z o.o., CN=Certum CA Certificate added: C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA Certificate added: C=EU, L=Madrid (see current address at www.camerfirma.com/address), OID.2.5.4.5=A82743287, O=AC Camerfirma S.A., CN=Chambers of Commerce Root - 2008 Certificate added: CN=ComSign CA, O=ComSign, C=IL Certificate added: CN=ComSign Secured CA, O=ComSign, C=IL Certificate added: C=GB, S=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services Certificate added: C=GB, S=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=Secure Certificate Services Certificate added: C=GB, S=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=Trusted Certificate Services Certificate added: O="Cybertrust, Inc", CN=Cybertrust Global Root Certificate added: C=US, O=Digital Signature Trust, OU=DST ACES, CN=DST ACES CA X6 Certificate added: O=Digital Signature Trust Co., CN=DST Root CA X3 Certificate added: C=DE, O=Deutsche Telekom AG, OU=T-TeleSec Trust Center, CN=Deutsche Telekom Root CA 2 Certificate added: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA Certificate added: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA Certificate added: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA Certificate added: C=US, O=Digital Signature Trust Co., OU=DSTCA E1 Certificate added: C=US, O=Digital Signature Trust Co., OU=DSTCA E2 Certificate added: C=TR, O=Elektronik Bilgi Guvenligi A.S., CN=e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi Certificate added: CN=EBG Elektronik Sertifika Hizmet Sağlayıcısı, O=EBG Bilişim Teknolojileri ve Hizmetleri A.Ş., C=TR Certificate added: O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=© 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048) Certificate added: C=US, O="Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, OU="© 2006 Entrust, Inc.", CN=Entrust Root Certification Authority Certificate added: C=US, O=Equifax, OU=Equifax Secure Certificate Authority Certificate added: C=US, O=Equifax Secure Inc., CN=Equifax Secure Global eBusiness CA-1 Certificate added: C=US, O=Equifax Secure Inc., CN=Equifax Secure eBusiness CA-1 Certificate added: C=US, O=GTE Corporation, OU="GTE CyberTrust Solutions, Inc.", CN=GTE CyberTrust Global Root Certificate added: C=US, O=GeoTrust Inc., CN=GeoTrust Global CA Certificate added: C=US, O=GeoTrust Inc., CN=GeoTrust Global CA 2 Certificate added: C=US, O=GeoTrust Inc., CN=GeoTrust Primary Certification Authority Certificate added: C=US, O=GeoTrust Inc., OU=© 2007 GeoTrust Inc. - For authorized use only, CN=GeoTrust Primary Certification Authority - G2 Certificate added: C=US, O=GeoTrust Inc., OU=© 2008 GeoTrust Inc. - For authorized use only, CN=GeoTrust Primary Certification Authority - G3 Certificate added: C=US, O=GeoTrust Inc., CN=GeoTrust Universal CA Certificate added: C=US, O=GeoTrust Inc., CN=GeoTrust Universal CA 2 Certificate added: C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA Certificate added: OU=GlobalSign Root CA - R2, O=GlobalSign, CN=GlobalSign Certificate added: OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign Certificate added: C=EU, L=Madrid (see current address at www.camerfirma.com/address), OID.2.5.4.5=A82743287, O=AC Camerfirma S.A., CN=Global Chambersign Root - 2008 Certificate added: C=US, O="The Go Daddy Group, Inc.", OU=Go Daddy Class 2 Certification Authority Certificate added: C=US, S=Arizona, L=Scottsdale, O="GoDaddy.com, Inc.", CN=Go Daddy Root Certificate Authority - G2 Certificate added: C=HK, O=Hongkong Post, CN=Hongkong Post Root CA 1 Certificate added: C=FR, S=France, L=Paris, O=PM/SGDN, OU=DCSSI, CN=IGC/A, E=igca@sgdn.pm.gouv.fr Certificate added: C=ES, O=IZENPE S.A., CN=Izenpe.com Certificate added: E=pki@sk.ee, C=EE, O=AS Sertifitseerimiskeskus, CN=Juur-SK Certificate added: C=HU, L=Budapest, O=Microsec Ltd., OU=e-Szigno CA, CN=Microsec e-Szigno Root CA Certificate added: C=HU, L=Budapest, O=Microsec Ltd., CN=Microsec e-Szigno Root CA 2009, E=info@e-szigno.hu Certificate added: C=HU, L=Budapest, O=NetLock Kft., OU=Tanúsítványkiadók (Certification Services), CN=NetLock Arany (Class Gold) Főtanúsítvány Certificate added: C=HU, L=Budapest, O=NetLock Halozatbiztonsagi Kft., OU=Tanusitvanykiadok, CN=NetLock Uzleti (Class Tanusitvanykiado Certificate added: C=HU, L=Budapest, O=NetLock Halozatbiztonsagi Kft., OU=Tanusitvanykiadok, CN=NetLock Expressz (Class C) Tanusitvanykiado Certificate added: C=HU, S=Hungary, L=Budapest, O=NetLock Halozatbiztonsagi Kft., OU=Tanusitvanykiadok, CN=NetLock Kozjegyzoi (Class A) Tanusitvanykiado Certificate added: C=HU, L=Budapest, O=NetLock Halozatbiztonsagi Kft., OU=Tanusitvanykiadok, CN=NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado, E=info@netlock.hu Certificate added: C=US, O=Network Solutions L.L.C., CN=Network Solutions Certificate Authority Certificate added: C=CH, O=WISeKey, OU=Copyright © 2005, OU=OISTE Foundation Endorsed, CN=OISTE WISeKey Global Root GA CA Certificate added: C=BM, O=QuoVadis Limited, OU=Root Certification Authority, CN=QuoVadis Root Certification Authority Certificate added: C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2 Certificate added: C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 3 Certificate added: O=RSA Security Inc, OU=RSA Security 2048 V3 Certificate added: C=ES, O=Generalitat Valenciana, OU=PKIGVA, CN=Root CA Generalitat Valenciana Certificate added: C=DE, S=Baden-Wuerttemberg (BW), L=Stuttgart, O=Deutscher Sparkassen Verlag GmbH, CN=S-TRUST Authentication and Encryption Root CA 2005:PN Certificate added: C=JP, O="Japan Certification Services, Inc.", CN=SecureSign RootCA11 Certificate added: C=US, O=SecureTrust Corporation, CN=SecureTrust CA Certificate added: C=US, O=SecureTrust Corporation, CN=Secure Global CA Certificate added: C=JP, O="SECOM Trust Systems CO.,LTD.", OU=Security Communication EV RootCA1 Certificate added: C=JP, O=SECOM Trust.net, OU=Security Communication RootCA1 Certificate added: C=FI, O=Sonera, CN=Sonera Class1 CA Certificate added: C=FI, O=Sonera, CN=Sonera Class2 CA Certificate added: C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden Root CA Certificate added: C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden Root CA - G2 Certificate added: C=US, O="Starfield Technologies, Inc.", OU=Starfield Class 2 Certification Authority Certificate added: C=US, S=Arizona, L=Scottsdale, O="Starfield Technologies, Inc.", CN=Starfield Root Certificate Authority - G2 Certificate added: C=US, S=Arizona, L=Scottsdale, O="Starfield Technologies, Inc.", CN=Starfield Services Root Certificate Authority - G2 Certificate added: C=IL, O=StartCom Ltd., OU=Secure Digital Certificate Signing, CN=StartCom Certification Authority Certificate added: C=CH, O=SwissSign AG, CN=SwissSign Gold CA - G2 Certificate added: C=CH, O=SwissSign AG, CN=SwissSign Platinum CA - G2 Certificate added: C=CH, O=SwissSign AG, CN=SwissSign Silver CA - G2 Certificate added: C=ch, O=Swisscom, OU=Digital Certificate Services, CN=Swisscom Root CA 1 Certificate added: C=DE, O=TC TrustCenter GmbH, OU=TC TrustCenter Class 2 CA, CN=TC TrustCenter Class 2 CA II Certificate added: C=DE, O=TC TrustCenter GmbH, OU=TC TrustCenter Class 3 CA, CN=TC TrustCenter Class 3 CA II Certificate added: C=DE, O=TC TrustCenter GmbH, OU=TC TrustCenter Universal CA, CN=TC TrustCenter Universal CA I Certificate added: CN=TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı, C=TR, L=ANKARA, O=© 2005 TÜRKTRUST Bilgi İletişim ve Bilişim Güvenliği Hizmetleri A.Ş. Certificate added: CN=TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı, C=TR, L=Ankara, O=TÜRKTRUST Bilgi İletişim ve Bilişim Güvenliği Hizmetleri A.Ş. © Kasım 2005 Certificate added: C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA Root Certification Authority Certificate added: C=TW, O=Government Root Certification Authority Certificate added: C=ZA, S=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA, E=premium-server@thawte.com Certificate added: C=ZA, S=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Server CA, E=server-certs@thawte.com Certificate added: C=TR, L=Gebze - Kocaeli, O=Türkiye Bilimsel ve Teknolojik Araştırma Kurumu - TÜBİTAK, OU=Ulusal Elektronik ve Kriptoloji Araştırma Enstitüsü - UEKAE, OU=Kamu Sertifikasyon Merkezi, CN=TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3 Certificate added: C=US, S=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN - DATACorp SGC Certificate added: C=US, S=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Client Authentication and Email Certificate added: C=US, S=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Hardware Certificate added: C=US, O="VeriSign, Inc.", OU=VeriSign Trust Network, OU="© 2007 VeriSign, Inc. - For authorized use only", CN=VeriSign Class 3 Public Primary Certification Authority - G4 Certificate added: C=US, O="VeriSign, Inc.", OU=VeriSign Trust Network, OU="© 2006 VeriSign, Inc. - For authorized use only", CN=VeriSign Class 3 Public Primary Certification Authority - G5 Certificate added: C=US, O="VeriSign, Inc.", OU=VeriSign Trust Network, OU="© 2008 VeriSign, Inc. - For authorized use only", CN=VeriSign Universal Root Certification Authority Certificate added: C=US, O="VeriSign, Inc.", OU=Class 1 Public Primary Certification Authority Certificate added: C=US, O="VeriSign, Inc.", OU=Class 1 Public Primary Certification Authority - G2, OU="© 1998 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network Certificate added: C=US, O="VeriSign, Inc.", OU=VeriSign Trust Network, OU="© 1999 VeriSign, Inc. - For authorized use only", CN=VeriSign Class 1 Public Primary Certification Authority - G3 Certificate added: C=US, O="VeriSign, Inc.", OU=Class 2 Public Primary Certification Authority - G2, OU="© 1998 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network Certificate added: C=US, O="VeriSign, Inc.", OU=VeriSign Trust Network, OU="© 1999 VeriSign, Inc. - For authorized use only", CN=VeriSign Class 2 Public Primary Certification Authority - G3 Certificate added: C=US, O="VeriSign, Inc.", OU=Class 3 Public Primary Certification Authority Certificate added: C=US, O="VeriSign, Inc.", OU=Class 3 Public Primary Certification Authority - G2, OU="© 1998 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network Certificate added: C=US, O="VeriSign, Inc.", OU=VeriSign Trust Network, OU="© 1999 VeriSign, Inc. - For authorized use only", CN=VeriSign Class 3 Public Primary Certification Authority - G3 Certificate added: C=US, O="VeriSign, Inc.", OU=VeriSign Trust Network, OU="© 1999 VeriSign, Inc. - For authorized use only", CN=VeriSign Class 4 Public Primary Certification Authority - G3 Certificate added: C=US, O=VISA, OU=Visa International Service Association, CN=Visa eCommerce Root Certificate added: C=US, O=Wells Fargo WellsSecure, OU=Wells Fargo Bank NA, CN=WellsSecure Public Root Certificate Authority Certificate added: C=US, OU=www.xrampsecurity.com, O=XRamp Security Services Inc, CN=XRamp Global Certification Authority Certificate added: C=RO, O=certSIGN, OU=certSIGN ROOT CA Certificate added: C=TW, O="Chunghwa Telecom Co., Ltd.", OU=ePKI Root Certification Authority Certificate added: C=US, O="thawte, Inc.", OU=Certification Services Division, OU="© 2006 thawte, Inc. - For authorized use only", CN=thawte Primary Root CA Certificate added: C=US, O="thawte, Inc.", OU="© 2007 thawte, Inc. - For authorized use only", CN=thawte Primary Root CA - G2 Certificate added: C=US, O="thawte, Inc.", OU=Certification Services Division, OU="© 2008 thawte, Inc. - For authorized use only", CN=thawte Primary Root CA - G3 Certificate added: C=US, S=Indiana, L=Indianapolis, O=Software in the Public Interest, OU=hostmaster, CN=Certificate Authority, E=hostmaster@spi-inc.org Certificate added: C=IT, L=Milan, O=Actalis S.p.A./03358520967, CN=Actalis Authentication Root CA Certificate added: C=NO, O=Buypass AS-983163327, CN=Buypass Class 2 Root CA Certificate added: C=NO, O=Buypass AS-983163327, CN=Buypass Class 3 Root CA Certificate added: C=SK, L=Bratislava, O=Disig a.s., CN=CA Disig Root R1 Certificate added: C=SK, L=Bratislava, O=Disig a.s., CN=CA Disig Root R2 Certificate added: C=CN, O=China Internet Network Information Center, CN=China Internet Network Information Center EV Certificates Root Certificate added: C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 2009 Certificate added: C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 EV 2009 Certificate added: C=ES, O=Agencia Catalana de Certificacio (NIF Q-0801176-I), OU=Serveis Publics de Certificacio, OU=Vegeu https://www.catcert.net/verarrel©03, OU=Jerarquia Entitats de Certificacio Catalanes, CN=EC-ACC Certificate added: C=EE, O=AS Sertifitseerimiskeskus, CN=EE Certification Centre Root CA, E=pki@sk.ee Certificate added: C=GR, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions RootCA 2011 Certificate added: E=contacto@procert.net.ve, L=Chacao, S=Miranda, OU=Proveedor de Certificados PROCERT, O=Sistema Nacional de Certificacion Electronica, C=VE, CN=PSCProcert Certificate added: C=JP, O="SECOM Trust Systems CO.,LTD.", OU=Security Communication RootCA2 Certificate added: C=IL, O=StartCom Ltd., OU=Secure Digital Certificate Signing, CN=StartCom Certification Authority Certificate added: C=IL, O=StartCom Ltd., CN=StartCom Certification Authority G2 Certificate added: C=ch, O=Swisscom, OU=Digital Certificate Services, CN=Swisscom Root CA 2 Certificate added: C=ch, O=Swisscom, OU=Digital Certificate Services, CN=Swisscom Root EV CA 2 Certificate added: C=GB, O=Trustis Limited, OU=Trustis FPS Root CA Certificate added: C=DE, O=T-Systems Enterprise Services GmbH, OU=T-Systems Trust Center, CN=T-TeleSec GlobalRoot Class 3 Certificate added: CN=TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı, C=TR, L=Ankara, O=TÜRKTRUST Bilgi İletişim ve Bilişim Güvenliği Hizmetleri A.Ş. © Aralık 2007 Certificate added: C=US, O="VeriSign, Inc.", OU=Class 3 Public Primary Certification Authority Certificate added: CN=ACCVRAIZ1, OU=PKIACCV, O=ACCV, C=ES Certificate added: CN=Atos TrustedRoot 2011, O=Atos, C=DE Certificate added: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root G2 Certificate added: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root G3 Certificate added: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2 Certificate added: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3 Certificate added: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Trusted Root G4 Certificate added: C=TR, L=Ankara, O=E-Tuğra EBG Bilişim Teknolojileri ve Hizmetleri A.Ş., OU=E-Tugra Sertifikasyon Merkezi, CN=E-Tugra Certification Authority Certificate added: C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 1 G3 Certificate added: C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2 G3 Certificate added: C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 3 G3 Certificate added: CN=SG TRUST SERVICES RACINE, OU=0002 43525289500022, O=SG TRUST SERVICES, C=FR Certificate added: O=TeliaSonera, CN=TeliaSonera Root CA v1 Certificate added: C=DE, O=T-Systems Enterprise Services GmbH, OU=T-Systems Trust Center, CN=T-TeleSec GlobalRoot Class 2 Certificate added: C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA Global Root CA Certificate added: C=CN, O=WoSign CA Limited, CN=CA 沃通根证书 Certificate added: C=CN, O=WoSign CA Limited, CN=Certification Authority of WoSign
Luke 42077 Posted February 2, 2016 Posted February 2, 2016 Must be coming from a dependency because we are not doing that explicitly ourselves
thefirstofthe300 292 Posted February 2, 2016 Posted February 2, 2016 (edited) Actually neither Mono nor Emby is adding any certs to your system. All of those certs were installed on your system to begin with. Mono by default trusts NO ONE for obvious security reasons. It also has its own cert store. Consequently, HTTPS connections won't work at all unless Mono gets certs from somewhere. That output is the result of Mono running the cert-sync tool, taking all of the certs from your root store and adding them to the Mono cert store; consequently, Mono will only trust the certs that your root store trusts. I took a look at the output Updating certificates in /etc/ssl/certs... 0 added, 0 removed; done. ... Synchronize local certs with certs from local Linux trust store. and Mono security FAQ to come to my answer. Edited February 2, 2016 by thefirstofthe300 1
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now