F-EOL versions of Firefox: How to remove co-opted Diginotar CA?

[Kevin Fenzi]

On Tue, 06 Sep 2011 07:19:22 -0700
"Daniel B. Thurman" <dant at cdkkt.com> wrote:

> For EOL FF versions, how can I remove the co-opted
> Diginotar CA certificate? Instructions given by Mozilla
> does not remove this certificate.
> 
> If the root CA's cannot be manually removed, Is there
> a FF rpm that has the fix?

Well, of course the first suggestion: upgrade to a supported release?

Failing that, you could look at the changes to the ca-certificates
package and see if you could duplicate them on your release: 
http://pkgs.fedoraproject.org/gitweb/?p=ca-certificates.git

Good luck. 

kevin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
Url : http://lists.fedoraproject.org/pipermail/users/attachments/20110906/d6903de1/attachment.bin