From owner-freebsd-gecko@FreeBSD.ORG  Tue Apr 21 15:56:20 2015
Return-Path: <owner-freebsd-gecko@FreeBSD.ORG>
Delivered-To: gecko@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 946E2D92
 for <gecko@freebsd.org>; Tue, 21 Apr 2015 15:56:20 +0000 (UTC)
Received: from mail-wi0-x229.google.com (mail-wi0-x229.google.com
 [IPv6:2a00:1450:400c:c05::229])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 2D25919F1
 for <gecko@freebsd.org>; Tue, 21 Apr 2015 15:56:20 +0000 (UTC)
Received: by wiun10 with SMTP id n10so26854848wiu.1
 for <gecko@freebsd.org>; Tue, 21 Apr 2015 08:56:18 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=message-id:date:from:user-agent:mime-version:to:subject
 :content-type:content-transfer-encoding;
 bh=br44hfntKwW/wxkysMJUV9I6QmhnMyHRT/bvBmDf3sM=;
 b=DKUrDsuiuyKUyyWuQHSpj8HajKts47pENY8CqW1R5O+oinuI56iM91Zejal9+9El4D
 CSyAf5tEfAlqxKB70AkdB+qYTwR/xdA6q8ub3cxXEZTgtzQUFrO8UpsdXksn6VqNa7tx
 zkQt1/pZokkEGowq3SNAfmLYdWkMxI/lYj8G4OXpU5qcVql6dtRDajqXYvToDzP6tJlM
 rUW9MwtA8FBGmtCjPvlwUyjkKWoQvfV4PzPMFV7sOeKwlYO7xcfcJMBJzkJbUmDdSPJ5
 sTw+5oAh72zlBoAvZLKJ+tvL/YSPIjYVtgZN4AHRpU0jpicpXPzdBRnyUnpRUo6GSo75
 mqKA==
X-Received: by 10.194.104.71 with SMTP id gc7mr40613664wjb.114.1429631778721; 
 Tue, 21 Apr 2015 08:56:18 -0700 (PDT)
Received: from ?IPv6:2001:470:26:52f:dcc4:786e:1da6:6e95?
 ([2001:470:26:52f:dcc4:786e:1da6:6e95])
 by mx.google.com with ESMTPSA id z12sm3197190wjw.39.2015.04.21.08.56.17
 for <gecko@freebsd.org>
 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
 Tue, 21 Apr 2015 08:56:17 -0700 (PDT)
Message-ID: <5536732C.6080403@gmail.com>
Date: Tue, 21 Apr 2015 17:56:28 +0200
From: Ingo Flaschberger <ingo.flaschberger@gmail.com>
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64;
 rv:31.0) Gecko/20100101 Thunderbird/31.6.0
MIME-Version: 1.0
To: gecko@FreeBSD.org
Subject: Thawte Premium Server CA missing in ca_root_nss-3.18
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
X-BeenThere: freebsd-gecko@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: Gecko Rendering Engine issues <freebsd-gecko.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-gecko>,
 <mailto:freebsd-gecko-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-gecko/>
List-Post: <mailto:freebsd-gecko@freebsd.org>
List-Help: <mailto:freebsd-gecko-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-gecko>,
 <mailto:freebsd-gecko-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 21 Apr 2015 15:56:20 -0000

Hello,

the Thawte Premium Server CA is missing.

Details:
https://www.thawte.com/roots/
Root 2
Thawte Premium Server CA

openssl s_client -CAfile /usr/local/share/certs/ca-root-nss.crt 
-showcerts -connect ssltest28.bbtest.net:443
Verify return code: 21 (unable to verify the first certificate)

with cert:
Verify return code: 0 (ok)

Kind regards,
     Ingo Flaschberger