Many security certificates at the last Ubuntu update - Page 1
Forum section: electronics / general

author: RoGeorge
author_rank: Super Contributor
timestamp: May 26, 2023, 11:10:48 am
content: Never seen this before, is it normal at an update?Code:Processing triggers for ca-certificates (20230311ubuntu0.22.04.1) ...Updating certificates in /etc/ssl/certs...0 added, 0 removed; done.Running hooks in /etc/ca-certificates/update.d...done.Updating Mono key storeMono Certificate Store Sync - version 6.8.0.105Populate Mono certificate store from a concatenated list of certificates.Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed.Importing into legacy system store:I already trust 124, your new list has 137Certificate added: C=US, O=Google Trust Services LLC, CN=GTS Root R1Certificate added: C=US, O=Google Trust Services LLC, CN=GTS Root R2Certificate added: C=US, O=Google Trust Services LLC, CN=GTS Root R3Certificate added: C=US, O=Google Trust Services LLC, CN=GTS Root R4Certificate added: C=HK, S=Hong Kong, L=Hong Kong, O=Hongkong Post, CN=Hongkong Post Root CA 3Certificate added: C=US, O=Microsoft Corporation, CN=Microsoft ECC Root Certificate Authority 2017Certificate added: C=US, O=Microsoft Corporation, CN=Microsoft RSA Root Certificate Authority 2017Certificate added: C=KR, O=NAVER BUSINESS PLATFORM Corp., CN=NAVER Global Root Certification AuthorityCertificate added: C=US, S=Illinois, L=Chicago, O="Trustwave Holdings, Inc.", CN=Trustwave Global Certification AuthorityCertificate added: C=US, S=Illinois, L=Chicago, O="Trustwave Holdings, Inc.", CN=Trustwave Global ECC P256 Certification AuthorityCertificate added: C=US, S=Illinois, L=Chicago, O="Trustwave Holdings, Inc.", CN=Trustwave Global ECC P384 Certification AuthorityCertificate added: C=CN, O=UniTrust, CN=UCA Extended Validation RootCertificate added: C=CN, O=UniTrust, CN=UCA Global G2 RootCertificate added: C=RO, O=CERTSIGN SA, OU=certSIGN ROOT CA G2Certificate added: C=HU, L=Budapest, O=Microsec Ltd., OID.2.5.4.97=VATHU-23584497, CN=e-Szigno Root CA 2017Certificate added: C=US, OU=emSign PKI, O=eMudhra Inc, CN=emSign ECC Root CA - C3Certificate added: C=IN, OU=emSign PKI, O=eMudhra Technologies Limited, CN=emSign ECC Root CA - G3Certificate added: C=US, OU=emSign PKI, O=eMudhra Inc, CN=emSign Root CA - C1Certificate added: C=IN, OU=emSign PKI, O=eMudhra Technologies Limited, CN=emSign Root CA - G1Certificate added: C=ES, O=FNMT-RCM, OU=Ceres, OID.2.5.4.97=VATES-Q2826004J, CN=AC RAIZ FNMT-RCM SERVIDORES SEGUROSCertificate added: SERIALNUMBER=G63287510, C=ES, O=ANF Autoridad de Certificacion, OU=ANF CA Raiz, CN=ANF Secure Server Root CACertificate added: C=PL, O=Asseco Data Systems S.A., OU=Certum Certification Authority, CN=Certum EC-384 CACertificate added: C=PL, O=Asseco Data Systems S.A., OU=Certum Certification Authority, CN=Certum Trusted Root CACertificate added: C=AT, O=e-commerce monitoring GmbH, CN=GLOBALTRUST 2020Certificate added: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Root E46Certificate added: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Root R46Certificate added: C=ES, CN=Autoridad de Certificacion Firmaprofesional CIF A62634068Certificate added: C=US, O=Certainly, CN=Certainly Root E1Certificate added: C=US, O=Certainly, CN=Certainly Root R1Certificate added: C=DE, O=D-Trust GmbH, CN=D-TRUST BR Root CA 1 2020Certificate added: C=DE, O=D-Trust GmbH, CN=D-TRUST EV Root CA 1 2020Certificate added: C=US, O="DigiCert, Inc.", CN=DigiCert TLS ECC P384 Root G5Certificate added: C=US, O="DigiCert, Inc.", CN=DigiCert TLS RSA4096 Root G5Certificate added: C=TR, L=Ankara, O=E-Tugra EBG A.S., OU=E-Tugra Trust Center, CN=E-Tugra Global Root CA ECC v3Certificate added: C=TR, L=Ankara, O=E-Tugra EBG A.S., OU=E-Tugra Trust Center, CN=E-Tugra Global Root CA RSA v3Certificate added: C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA TLS ECC Root CA 2021Certificate added: C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA TLS RSA Root CA 2021Certificate added: C=TW, O="Chunghwa Telecom Co., Ltd.", CN=HiPKI Root CA - G1Certificate added: C=US, O=Internet Security Research Group, CN=ISRG Root X2Certificate added: C=JP, O="SECOM Trust Systems CO.,LTD.", CN=Security Communication ECC RootCA1Certificate added: C=JP, O="SECOM Trust Systems CO.,LTD.", CN=Security Communication RootCA3Certificate added: C=FI, O=Telia Finland Oyj, CN=Telia Root CA v2Certificate added: C=TN, O=Agence Nationale de Certification Electronique, CN=TunTrust Root CACertificate added: C=CN, O="iTrusChina Co.,Ltd.", CN=vTrus ECC Root CACertificate added: C=CN, O="iTrusChina Co.,Ltd.", CN=vTrus Root CA45 new root certificates were added to your trust store.Import process completed.Importing into BTLS system store:I already trust 124, your new list has 137Certificate added: C=US, O=Google Trust Services LLC, CN=GTS Root R1Certificate added: C=US, O=Google Trust Services LLC, CN=GTS Root R2Certificate added: C=ES, CN=Autoridad de Certificacion Firmaprofesional CIF A62634068Certificate added: C=US, O=Certainly, CN=Certainly Root R1Certificate added: C=DE, O=D-Trust GmbH, CN=D-TRUST BR Root CA 1 2020Certificate added: C=DE, O=D-Trust GmbH, CN=D-TRUST EV Root CA 1 2020Certificate added: C=US, O="DigiCert, Inc.", CN=DigiCert TLS ECC P384 Root G5Certificate added: C=US, O="DigiCert, Inc.", CN=DigiCert TLS RSA4096 Root G5Certificate added: C=TR, L=Ankara, O=E-Tugra EBG A.S., OU=E-Tugra Trust Center, CN=E-Tugra Global Root CA ECC v3Certificate added: C=TR, L=Ankara, O=E-Tugra EBG A.S., OU=E-Tugra Trust Center, CN=E-Tugra Global Root CA RSA v3Certificate added: C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA TLS ECC Root CA 2021Certificate added: C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA TLS RSA Root CA 2021Certificate added: C=TW, O="Chunghwa Telecom Co., Ltd.", CN=HiPKI Root CA - G1Certificate added: C=US, O=Internet Security Research Group, CN=ISRG Root X2Certificate added: C=JP, O="SECOM Trust Systems CO.,LTD.", CN=Security Communication ECC RootCA1Certificate added: C=JP, O="SECOM Trust Systems CO.,LTD.", CN=Security Communication RootCA3Certificate added: C=FI, O=Telia Finland Oyj, CN=Telia Root CA v2Certificate added: C=TN, O=Agence Nationale de Certification Electronique, CN=TunTrust Root CACertificate added: C=CN, O="iTrusChina Co.,Ltd.", CN=vTrus ECC Root CACertificate added: C=CN, O="iTrusChina Co.,Ltd.", CN=vTrus Root CA20 new root certificates were added to your trust store.Import process completed.Donedone.

author: tatel
author_rank: Frequent Contributor
timestamp: May 26, 2023, 12:22:52 pm
content: Shuttleworth --Ubuntu's owner-- made his money selling cheap (Thawte) security certifications IIRC. So perhaps Ubuntu is providing you more root certificates out of the box than other distros? Or perhaps it's just coming down the stream from Debian.I wouldn't worry much about it --provided fingerprint of the download coincides with the one published in the repository. It looks as if your system already trusted 124 root certificates and the list is now 137 root certificates

author: ataradov
author_rank: Super Contributor
timestamp: May 26, 2023, 03:42:55 pm
content: Here is a reference to the updatehttps://ubuntu.com/security/notices/USN-6105-1. It looks like a lot of stuff was just outdated and this update cleans it up.

author: RoGeorge
author_rank: Super Contributor
timestamp: May 26, 2023, 07:43:18 pm
content: Thank you, I've searched before asking here, and no significant result popped in the first pages.