Ubuntu
ca-certificates package

  1. Bug #1647285
  2. Comment #5

Comment 5 for bug 1647285

Revision history for this message
dwmw2 (dwmw2) wrote :

I believe we need to update p11-kit to v0.23.4 to make the key pinning work correctly in the recommended configuration, by adding the CKA_NSS_MOZILLA_CA_POLICY attribute.

https://bugs.freedesktop.org/show_bug.cgi?id=99453
https://bugzilla.mozilla.org/show_bug.cgi?id=1324096