openSUSE / ca-certificates

Utilities for system wide CA certificate installation
GNU General Public License v2.0
24 stars 21 forks source link

Possible NuGet restore failures #10

Closed loic-sharma closed 3 years ago

loic-sharma commented 3 years ago

Hello,

I am from the NuGet team at Microsoft. NuGet is the package manager for the .NET ecosystem, including the C# language. Network Security Services (NSS) 3.63 and newer distrusts Symantec which will cause failures when installing NuGet packages. For more information, please see: https://github.com/NuGet/Announcements/issues/56

Does openSUSE or SUSE Enterprise Linux use NSS to maintain its list of trusted root certificates? If so, does openSUSE or SUSE Enterprise Linux have a timeline for when it will update to NSS 3.63 or newer?

If you need any additional information, feel free to reach out to me at loshar@microsoft.com.

Best, Loic

lnussel commented 3 years ago

I don't know whether and when nss gets updated. What you seem to be looking for is the root CA list though. That gets extracted from mozilla-nss and shipped as separate package (https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla). So even if mozilla-nss itself may be at an older version, the root CA list on the distro is current in general.