GNOME Bugzilla – Bug 629432
Certificate manager does not delete certificates
Last modified: 2013-09-13 01:05:18 UTC
There's a comment in e_cert_db_delete_cert() saying that we only remove all trust from the cert, instead of deleting it. It lies -- we leave the certificate with c,c,c bits set, and it's still accepted as a valid cert for an IMAP server.
Hm, no -- the c bits aren't set but even like this we do manage to connect to the IMAP server: CAcert Class 3 Root - Root CA ,,
Oh, this is an NSS bug with the system db. Doesn't happen without.
https://bugzilla.redhat.com/show_bug.cgi?id=633043