Comments on: Managing Certificate Authorities in Adobe Flash on Fedora/RHEL

By: Jonas Ådahl

Jonas Ådahl — Fri, 12 Mar 2010 07:06:43 +0000

I’m not arguing if Flash is good or bad, just that it is not in any way more cross platform than Firefox. Web users are not platforms, they are humans.

By: admin

admin — Thu, 11 Mar 2010 21:40:32 +0000

Götz: Yes, I just filed a bug here: https://bugzilla.redhat.com/show_bug.cgi?id=572725

Jerome: I think you’re right. It looks like the origin is this bug: https://bugzilla.redhat.com/show_bug.cgi?id=143392

Jonas: I’ve seen stats that say 98% of web users have flash installed. (Obviously that’s changing now that more people are using mobile devices) Firefox users make up 20-50% web users depending on your audience. I’m not that interested in arguing about whether Flash is good or bad. Happily, I’m not a flash developer. I simply want the software I use to work.

By: Jerome Haltom

Jerome Haltom — Thu, 11 Mar 2010 20:08:21 +0000

Sounds to me like Flash got this right, and the issue is that Fedora moved what seems to be a default location on most Unix systems.

The whole NSS debacle sucks, though.

By: Götz Waschk

Götz Waschk — Thu, 11 Mar 2010 13:35:09 +0000

Do you have a test case where the upload does not work without the symlink?

By: Jonas Ådahl

Jonas Ådahl — Thu, 11 Mar 2010 12:12:06 +0000

> There are some alternatives that don’t appear to be cross-platform,

Using flash is LESS cross-platform than using Firefox, AND it relies on proprietary software/protocols.

By: Peter Bowen

Peter Bowen — Thu, 11 Mar 2010 11:18:21 +0000

It sounds like Flash is just using the OpenSSL default location. Fedora does move this, but Flash is probably carrying around its only reference to /etc/ssl/certs.

As for the system default, things are complicated by the existence of multiple crypto libraries in most Linux distros. OpenSSL has a plain list (or directory) of CAs, while NSS uses a database format with additional info on each CA (email signer vs. SSL signer, etc).