SLFO-pool/ca-certificates-mozilla
SHA256
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Sync from SUSE:SLFO:Main ca-certificates-mozilla revision f79b2006864f2d60904a7830b442b56b

Browse Source
This commit is contained in:
Adrian Schröter 2025-02-07 18:25:17 +01:00
parent 6ab45da130
commit 5d34ad5a87
6 changed files with 834 additions and 326 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ca-certificates-mozilla-prebuilt.spec
View File

@ -1,7 +1,7 @@
#
# spec file for package ca-certificates-mozilla-prebuilt
#
# Copyright (c) 2024 SUSE LLC
# Copyright (c) 2025 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed

37
ca-certificates-mozilla.changes
View File

@ -1,3 +1,28 @@
-------------------------------------------------------------------
Tue Feb 4 09:55:01 UTC 2025 - Dirk Müller <dmueller@suse.com>
- remove extensive signature printing in comments of the cert
bundle
-------------------------------------------------------------------
Thu Jan 23 08:23:15 UTC 2025 - Steve Kowalik <steven.kowalik@suse.com>
- Define two macros to break a build cycle with p11-kit.
-------------------------------------------------------------------
Sun Dec 15 21:07:58 UTC 2024 - Dirk Müller <dmueller@suse.com>
- Updated to 2.72 state of Mozilla SSL root CAs (bsc#1234798)
Removed:
- SecureSign RootCA11
- Security Communication RootCA3
Added:
- TWCA CYBER Root CA
- TWCA Global Root CA G2
- SecureSign Root CA12
- SecureSign Root CA14
- SecureSign Root CA15
-------------------------------------------------------------------
Mon Jul 8 15:19:02 UTC 2024 - Marcus Meissner <meissner@suse.com>
@ -158,7 +183,7 @@ Mon May 2 11:35:33 UTC 2022 - Marcus Meissner <meissner@suse.com>
- GTS Root R2
- GTS Root R3
- GTS Root R4
-------------------------------------------------------------------
Sat Oct 2 07:33:52 UTC 2021 - Marcus Meissner <meissner@suse.com>
@ -203,7 +228,7 @@ Mon Jul 5 12:16:33 UTC 2021 - Marcus Meissner <meissner@suse.com>
-------------------------------------------------------------------
Sun Jul 4 09:14:00 UTC 2021 - Dirk Müller <dmueller@suse.com>
- fix mozila typo in installed files
- fix mozila typo in installed files
-------------------------------------------------------------------
Tue Feb 9 13:11:37 UTC 2021 - Marcus Meissner <meissner@suse.com>
@ -479,7 +504,7 @@ Tue Jan 24 12:46:29 UTC 2017 - meissner@suse.com
emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
is able to do so.
-------------------------------------------------------------------
@ -902,7 +927,7 @@ Wed Sep 30 13:17:45 UTC 2009 - lnussel@suse.de
Tue Dec 2 11:29:03 CET 2008 - cfarrell@suse.de
- Add openssl-certs.COPYING to fix bnc#441356
-------------------------------------------------------------------
Thu Oct 9 17:49:57 CEST 2008 - lnussel@suse.de
@ -912,6 +937,6 @@ Thu Oct 9 17:49:57 CEST 2008 - lnussel@suse.de
-------------------------------------------------------------------
Wed Jul 9 15:15:38 CEST 2008 - mkoenig@suse.de
- split out the CA root certificates from the openssl certs
subpackage into a package of its own.
- split out the CA root certificates from the openssl certs
subpackage into a package of its own.

10
ca-certificates-mozilla.spec
View File

@ -1,7 +1,7 @@
#
# spec file for package ca-certificates-mozilla
#
# Copyright (c) 2024 SUSE LLC
# Copyright (c) 2025 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@ -33,11 +33,14 @@
%endif
%endif
#
# Taken from p11-kit, to avoid a build cycle
%define pkidir_static %{_datadir}/pki
%define trustdir_static %{pkidir_static}/trust
%define certdir %{trustdir_static}
Name: ca-certificates-mozilla
# Version number is NSS_BUILTINS_LIBRARY_VERSION in this file:
# http://hg.mozilla.org/projects/nss/file/default/lib/ckfw/builtins/nssckbi.h
Version: 2.68
Version: 2.72
Release: 0
Summary: CA certificates for OpenSSL
License: MPL-2.0
@ -61,11 +64,10 @@ Source11: %{name}.COPYING
Source12: compareoldnew
BuildRequires: ca-certificates
BuildRequires: openssl
BuildRequires: p11-kit-devel
BuildRequires: python3-base
# for update-ca-certificates
Requires(post): ca-certificates
Requires(postun):ca-certificates
Requires(postun): ca-certificates
#
# replaces this package from SLE11 times
Obsoletes: openssl-certs < %version

1105
certdata.txt
View File

File diff suppressed because it is too large Load Diff

2
certdata2pem.py
View File

@ -280,7 +280,7 @@ for tobj in objects:
# obtain certificate information suitable as a comment
comment_fname = "comment-" + fname
fcout = open(comment_fname, "w")
comment_command = ["openssl", "x509", "-in", cert_fname, "-noout", "-text"]
comment_command = ["openssl", "x509", "-in", cert_fname, "-noout", "-text", "-certopt", "no_pubkey,no_sigdump"]
subprocess.call(comment_command, stdout=fcout)
fcout.close()
sed_command = ["sed", "--in-place", "s/^/#/", comment_fname]

4
nssckbi.h
View File

@ -46,8 +46,8 @@
* It's recommend to switch back to 0 after having reached version 98/99.
*/
#define NSS_BUILTINS_LIBRARY_VERSION_MAJOR 2
#define NSS_BUILTINS_LIBRARY_VERSION_MINOR 68
#define NSS_BUILTINS_LIBRARY_VERSION "2.68"
#define NSS_BUILTINS_LIBRARY_VERSION_MINOR 72
#define NSS_BUILTINS_LIBRARY_VERSION "2.72"
/* These version numbers detail the semantic changes to the ckfw engine. */
#define NSS_BUILTINS_HARDWARE_VERSION_MAJOR 1