Package: debian-edu-config
Version: 2.10.65+deb10u4
Severity: important
Since some time, new users are faced with an 'insecure certificate' and
have to accept it if they want to use mail inside the internal Debian Edu
network.
Reason for this has been a change in the way Thunderbird sets up
profiles (randomly named subdir).
Now that Thunderbird support for system-wide policies has been enabled,
it is easy to fix it:
A policy file /usr/lib/thunderbird/distribution/policies.json will make
sure that the Debian-Edu_rootCA.crt file gets installed as trusted
certificate for Thunderbird.
File content:
{
"policies": {
"Certificates": {
"ImportEnterpriseRoots": true,
"Install": [
"/etc/ssl/certs/Debian-Edu_rootCA.crt"
]
}
}
}
Wolfgang
Attachment:
signature.asc
Description: PGP signature