Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-121822

CA-Cert latest package for RHEL 9 showing expired certificate.

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • rhel-9.6
    • ca-certificates
    • None
    • None
    • Low
    • rhel-security-crypto-clubs
    • None
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • Unspecified
    • Unspecified
    • Unspecified
    • x86_64
    • None

      What were you trying to do that didn't work?

      The package:

      ca-certificates-2024.2.69_v8.0.303-91.4.el9_4.noarch

      showing the expired certificates.

       

      What is the impact of this issue to you?

      The lastest ca-certificate package for RHEL9 is ca-certificates-2024.2.69_v8.0.303-91.4.el9_4.noarch contains an expired certificate.

      Openssl verifies the A-Trust-Qual-02 certificate expired in 2024.

      Please provide the package NVR for which the bug is seen:

       

      ca-certificates-2024.2.69_v8.0.303-91.4.el9_4.noarch

       

      How reproducible is this bug?:

       

      # openssl x509 -in objsign-ca-bundle.pem -noout -text -dates 
      
      Certificate:
          Data:
              Version: 3 (0x2)
              Serial Number: 1330660 (0x144de4)
              Signature Algorithm: sha1WithRSAEncryption
              Issuer: C=AT, O=A-Trust Ges. f. Sicherheitssysteme im elektr. Datenverkehr GmbH, OU=A-Trust-Qual-02, CN=A-Trust-Qual-02
              Validity
                  Not Before: Jul  1 11:23:33 2014 GMT
                  Not After : Jul  1 09:23:33 2024 GMT      <-------------
              Subject: C=AT, O=A-Trust Ges. f. Sicherheitssysteme im elektr. Datenverkehr GmbH, OU=A-Trust-Qual-02, CN=A-Trust-Qual-02
              Subject Public Key Info:
                  Public Key Algorithm: rsaEncryption
                      Public-Key: (2048 bit)
      

              fkrenzel František Krenželok
              rhn-support-gasoni Gaurav Soni
              František Krenželok František Krenželok
              Joao Silva Joao Silva
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated: