id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
105	Update ca-certificates bundle	Lewis Rosenthal		"The current ca-certificates bundle dates from 2011. Since then, Fedora has actually modified its bundle from the stock Mozilla one to retain trust status for some older ones for compatibility reasons. We should determine whether these inclusions in the Fedora project are worth maintaining or whether we should simply package the Mozilla bundle for distribution on OS/2.

Links:

https://fedoraproject.org/wiki/CA-Certificates
https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/
https://lists.mozilla.org/listinfo/dev-security-policy
https://wiki.mozilla.org/CA:FAQ

It should be noted that Fedora includes a script to toggle between the Fedora bundle and the Mozilla bundle, too."	task	closed	major		*none		medium	fixed