We have moved to a new Sailfish OS Forum. Please start new discussions there.

Revision history [back]

click to hide/show revision 1
initial version

posted 2016-08-21 12:03:25 +0200

Outdated ca-certificates

@Federico is right, it is an issue worth separate question.

Package ca-certificates in SailfishOS has version 2014.2.1, meaning it's outdated by 2 years. It is a security issue, as SailfishOS will still trust certificates revoked since then (due to being compromised among other reasons).

Along with tzdata package, it requires regular updates, as certificates are being issued and revoked quite often, new CAs come (Let's Encrypt went into beta in 2015).


It is possible installing ca-certificates from CentOS will work fine, but I haven't tested it yet. Latest rpm can be fund here — http://mirror.centos.org/centos/6/os/i386/Packages/ca-certificates-2015.2.6-65.0.1.el6_7.noarch.rpm
Please note it's marked 2015, so it is still a bit outdated too. Newer are in Debian Sid and latest Fedora, so it can be considered testing.

Outdated ca-certificates

@Federico is right, it is an issue worth separate question.

Package ca-certificates in SailfishOS has version 2014.2.1, meaning it's outdated by 2 years. It is a security issue, as SailfishOS will still trust certificates revoked since then (due to being compromised among other reasons).

Along with tzdata package, it requires regular updates, as certificates are being issued and revoked quite often, new CAs come (Let's Encrypt went into beta in 2015).


It is possible installing ca-certificates from CentOS will work fine, but I haven't tested it yet. Latest rpm can be fund here — http://mirror.centos.org/centos/6/os/i386/Packages/ca-certificates-2015.2.6-65.0.1.el6_7.noarch.rpm
Please note it's marked 2015, so it is still a bit outdated too. Newer are in Debian Sid and latest Fedora, so it can be considered testing.

Outdated ca-certificates

@Federico is right, it is an issue worth separate question.

Package ca-certificates in SailfishOS has version 2014.2.1, meaning it's outdated by 2 years. It is a security issue, as SailfishOS will still trust certificates revoked since then (due to being compromised among other reasons).

Along with tzdata package, it requires regular updates, as certificates are being issued and revoked quite often, new CAs come (Let's Encrypt went into beta in 2015).


It is possible installing ca-certificates from CentOS will work fine, but I haven't tested it yet. Latest rpm can be fund here — http://mirror.centos.org/centos/6/os/i386/Packages/ca-certificates-2015.2.6-65.0.1.el6_7.noarch.rpm
Please note it's marked 2015, so it is still a bit outdated too. Newer are in Debian Sid and latest Fedora, so it can be considered testing.