Bug#779974: josm: invalid certificate

[Sebastiaan Couwenberg]

On 04/13/2015 09:01 PM, Salvo Tomaselli wrote:
>> On a Debian unstable VM without customizations the cacerts file is
>> 207196, about half the size of my Debian unstable workstation, but still
>> significantly larger than yours.
>>
>> Try reconfiguring the ca-certificates package and enable at least the
>> COMODO/Comodo certificates because those are used for
>> *.tile.openstreetmap.org:
> I only have Mozilla/Comodo, no COMODO/Comodo. And they were already enabled.

Most entries start with "mozilla/", I only meant the two different
capitalizations of the name.

> It seems I have some weird certificate problem. Perhaps I should just try to 
> reinstall the package?

Reinstalling the ca-certificates package shouldn't hurt to try.

Can you also check the contents of your keystore?

 keytool -v -list -keystore /etc/ssl/certs/java/cacerts \
         -storepass changeit | less


You should have an entry with an alias like equifax_secure_ca with:

Certificate fingerprint (SHA1):
D2:32:09:AD:23:D3:14:23:21:74:E4:0D:7F:9D:62:13:97:86:63:3A

This is the root CA for the OSM tile server SSL certificate chain.

Kind Regards,

Bas

-- 
 GPG Key ID: 4096R/6750F10AE88D4AF1
Fingerprint: 8182 DE41 7056 408D 6146  50D1 6750 F10A E88D 4AF1