cloudflare refers NTS users to wrong page

Udo van den Heuvel udovdh at xs4all.nl
Fri Dec 13 10:31:26 UTC 2019


On 13-12-2019 11:21, Udo van den Heuvel via devel wrote:
> On 13-12-2019 11:09, Udo van den Heuvel via devel wrote:
>> So is this an isseu in the ca-certificates rpm?
> 
> https://letsencrypt.org/certificates/ shows the relationships between
> certificates.
> Could it be that the Fedora rpm has no info on the X3 cert?

Using the info at
https://www.happyassassin.net/2015/01/14/trusting-additional-cas-in-fedora-rhel-centos-dont-append-to-etcpkitlscertsca-bundle-crt-or-etcpkitlscert-pem/
I palced some pem files (sans .txt) in /etc/pki/ca-trust/source/anchors/
and ran sudo update-ca-trust.
Stuff looks like:
# ls -tl
total 12
-rw-r--r-- 1 root root 1647 Dec 13 11:27 lets-encrypt-x3-cross-signed.pem
-rw-r--r-- 1 root root 2016 Dec 13 11:27 letsencryptauthorityx3.pem
-rw-r--r-- 1 root root 1200 Dec 13 11:25 trustid-x3-root.pem

No change in ntpd behaviour...

Udo


More information about the devel mailing list