Bug#779974: josm: invalid certificate

[Sebastiaan Couwenberg]

Hi Salvo,

On 04/14/2015 12:53 AM, Sebastiaan Couwenberg wrote:
> On 04/13/2015 09:01 PM, Salvo Tomaselli wrote:
>>> On a Debian unstable VM without customizations the cacerts file is
>>> 207196, about half the size of my Debian unstable workstation, but still
>>> significantly larger than yours.
>>>
>>> Try reconfiguring the ca-certificates package and enable at least the
>>> COMODO/Comodo certificates because those are used for
>>> *.tile.openstreetmap.org:
>> I only have Mozilla/Comodo, no COMODO/Comodo. And they were already enabled.
> 
> Most entries start with "mozilla/", I only meant the two different
> capitalizations of the name.
> 
>> It seems I have some weird certificate problem. Perhaps I should just try to 
>> reinstall the package?
> 
> Reinstalling the ca-certificates package shouldn't hurt to try.
> 
> Can you also check the contents of your keystore?
> 
>  keytool -v -list -keystore /etc/ssl/certs/java/cacerts \
>          -storepass changeit | less
> 
> 
> You should have an entry with an alias like equifax_secure_ca with:
> 
> Certificate fingerprint (SHA1):
> D2:32:09:AD:23:D3:14:23:21:74:E4:0D:7F:9D:62:13:97:86:63:3A
> 
> This is the root CA for the OSM tile server SSL certificate chain.

Can you confirm that you've reinstalled the ca-certificates package?

And can you also send the output for the keytool command?

Kind Regards,

Bas

-- 
 GPG Key ID: 4096R/6750F10AE88D4AF1
Fingerprint: 8182 DE41 7056 408D 6146  50D1 6750 F10A E88D 4AF1