Hi,

for a while now, I had failures when trying to access
https://softwareupdate.vmware.com/ via curl/libcurl, specifically when
trying to use the VMware Player update functionality.

Digging a bit deeper, I found that https://softwareupdate.vmware.com/
uses the GTE_CyberTrust_Global_Root.crt certificate, and apparently that
certificate was disabled, as "dpkg-reconfigure ca-certificates" showed.

After re-enabling that CA the problem was gone.

Since I never explicitly disabled that CA, I assume something went wrong
in the package itself, since a fresh installation does enable that CA.

Maybe this is related to the changes in 20140223, where this certificate
was disabled, and the subsequent upload 20140325 not properly
re-enabling it?


Cheers,
Michael

When ca-certificates_20150117 is released, this 1025-bit CA will be
removed again.

You might wish to let vmware know that their site will cease to verify
with the next Mozilla release of NSS, Firefox, et. al.

http://anonscm.debian.org/cgit/collab-maint/ca-certificates.git/tree/debian/changelog

Yes, this is what happened. The re-addition of a removed CA was not
automatically re-enabled, since the configuration only sees a saved
"untrusted" line.  https://bugs.debian.org/743339

Am 03.02.2015 um 18:36 schrieb Michael Shuler:

Thanks for the heads up.

I didn't find a public bug tracker for VMware, meh.

Ok, feel free to merge the two bug reports. It's about the same issue,
really.


Michael