Recently, the CAcert root certificates have been removed from Debian (more precisely, from the
ca-certificates package). Since I want to keep them, I backed up the directory
.crt files before the upgrade and copied it to
afterwards. Then I ran
# update-ca-certificates Updating certificates in /etc/ssl/certs... 2 added, 0 removed; done. Running hooks in /etc/ca-certificates/update.d.... Adding debian:cacert.org_class3.pem Adding debian:cacert.org_root.pem done. done.
It looks like all went well. However, Firefox (Iceweasel) still refuses certificates signed by CAcert as untrusted.
Is there anything I missed? Do I have to do something special to make Firefox actually re-read the system certificates?