When certificate anchors (or other trust policy) is loaded multiple times by the p11-kit trust module, the extract command extracts multiple instances of the policy. Instead the extract command should combine the policy in the expected manner (taking into account the stacking of the various sources) and the extracted data should only contain the results.
*** Bug 61498 has been marked as a duplicate of this bug. ***
Created attachment 76549 [details] [review] extract: Combine trust policy when extracting
Created attachment 76550 [details] [review] extract: Combine trust policy when extracting
commit 64b47aa5c8a4d9c758f6ed286b24beb4eae1a965 Author: Stef Walter <stefw@gnome.org> Date: Fri Mar 15 09:22:57 2013 +0100 extract: Combine trust policy when extracting * Collapse multiple identical certificates coming from different tokens. Note that if a certificate should not be placed multiple times on a token. We cannot know which one to respect. * Add a new extract filter: --trust-policy This extracts all anchor and blacklist information
Created attachment 76575 [details] [review] extract: Combine trust policy when extracting
Attachment 76575 [details] pushed as 07a53ce - extract: Combine trust policy when extracting
Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.