Bug 16747 - DSlib needs update due to change of CA certificate by ISDS provider
Summary: DSlib needs update due to change of CA certificate by ISDS provider
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: 5
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact:
URL:
Whiteboard: advisory mga5-64-ok
Keywords: validated_update
Depends on:
Blocks:
 
Reported: 2015-09-13 16:57 CEST by Tomas Kindl
Modified: 2015-09-19 20:59 CEST (History)
1 user (show)

See Also:
Source RPM: dslib-3.0-8.mga5.src.rpm
CVE:
Status comment:


Attachments

Description Tomas Kindl 2015-09-13 16:57:24 CEST
I have uploaded a updated package for Mageia 5(+Cauldron).

Formerly packaged version 3.0 is unusable due to change of CA certificate used by service provider asi of Sep 13th. CA change is user unfriendly and beyond capabilities of common users (by design to prevent casual users from changing them). 

Added new CA certificate, tested on both i586/x86_64, working again.

Suggested advisory:
========================

Updated dslib packages to fix 'datovka' app and make it work again.

As of 2015/09/13, ISDS (databox provider) changed CA certificate making Datovka app inoperable. Therefore patched dslib library was released which mitigates this problem.

References:
https://www.datoveschranky.info/-/upozorneni-na-prechod-na-sha-256-k-13-9-2015


========================

Updated packages in {core/updates_testing:
========================
dslib-3.0-8.2.mga5

Source RPM: 
dslib-3.0-8.2.mga5.src.rpm

Reproducible: 

Steps to Reproduce:
Comment 1 David Walser 2015-09-15 15:37:15 CEST
Reposting my comment from the dev list:

Is this list of CA certs supposed to be different than the system ones? If not, you should actually remove the all_trusted.pem file and link it to /etc/pki/tls/certs/ca-bundle.crt.

Whiteboard: (none) => feedback

Comment 2 Tomas Kindl 2015-09-15 19:28:56 CEST
Very different - those CA certs are not included in standard CA bundle.

Sole CA provider for DataBox system is http://www.postsignum.cz/
Comment 3 David Walser 2015-09-15 20:37:56 CEST
OK, thanks for the answer.

Whiteboard: feedback => (none)

Comment 4 claire robinson 2015-09-18 18:26:22 CEST
Tested the package updates cleanly. Tomas states in comment 1 that this resolves the issue both arches but we have no way to independently verify this.

Validating. Advisory uplaoded.

Please push to 5 updates

Thanks

Keywords: (none) => validated_update
Whiteboard: (none) => advisory mga5-64-ok
CC: (none) => sysadmin-bugs

Comment 5 Mageia Robot 2015-09-19 20:59:08 CEST
An update for this issue has been pushed to Mageia Updates repository.

http://advisories.mageia.org/MGAA-2015-0131.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.