Microsoft Certificates in SSL store

3 respuestas [Último envío]
amtrakuk
Desconectado/a
se unió: 11/25/2019

After watching the latest Rob Braxman Q&A I was surprised to find Microsoft root certificates languishing in ~\etc\ssl\certs. Should I be worried? Can I delete them?

jxself
Desconectado/a
se unió: 09/13/2010

Trisquel is free software. You can do whatever you want, and for whatever reason you want.

andyprough
Desconectado/a
se unió: 02/12/2015

If you run
sudo dpkg-reconfigure ca-certificates
then you will get an ncurses series of prompts allowing you to accept or reject any of the certificates.

It appears to me that Trisquel just pulls in the standard list of Certificate Authorities from Mozilla, and that Mozilla includes the two Microsoft certificate authorities, probably because those certificates allow you to interact with a large number of websites via openssl. Microsoft runs Azure, which, I assume, serves up a lot of websites, including a lot of websites that have nothing to do with Microsoft.

amtrakuk
Desconectado/a
se unió: 11/25/2019

Thanks for the replies. Yeah it seems its in most GNU/Linux builds. Watching the video again he does suggest to move the cert files to another area which sounds a bit belt and braces, I do like the suggestion you have given Andy.

Thanks all