Microsoft Certificates in SSL store

3 Antworten [Letzter Beitrag]
amtrakuk
Offline
Beigetreten: 11/25/2019

After watching the latest Rob Braxman Q&A I was surprised to find Microsoft root certificates languishing in ~\etc\ssl\certs. Should I be worried? Can I delete them?

jxself
Offline
Beigetreten: 09/13/2010

Trisquel is free software. You can do whatever you want, and for whatever reason you want.

andyprough
Online
Beigetreten: 02/12/2015

If you run
sudo dpkg-reconfigure ca-certificates
then you will get an ncurses series of prompts allowing you to accept or reject any of the certificates.

It appears to me that Trisquel just pulls in the standard list of Certificate Authorities from Mozilla, and that Mozilla includes the two Microsoft certificate authorities, probably because those certificates allow you to interact with a large number of websites via openssl. Microsoft runs Azure, which, I assume, serves up a lot of websites, including a lot of websites that have nothing to do with Microsoft.

amtrakuk
Offline
Beigetreten: 11/25/2019

Thanks for the replies. Yeah it seems its in most GNU/Linux builds. Watching the video again he does suggest to move the cert files to another area which sounds a bit belt and braces, I do like the suggestion you have given Andy.

Thanks all