Sync from SUSE:SLFO:1.1 ca-certificates-mozilla revision 61732982ff124e6c11c913e79914c897

ca-certificates-mozilla.changes

@@ -1,3 +1,38 @@
+-------------------------------------------------------------------
+Fri Apr 11 10:42:18 UTC 2025 - Marcus Meissner <meissner@suse.com>
+
+- reenable the distrusted certs again. the distrust is only for certs
+  issued after the distrust date, not for all certs of a CA.
+  remove: remove-distrusted.patch
+
+-------------------------------------------------------------------
+Mon Mar 31 11:42:58 UTC 2025 - Marcus Meissner <meissner@suse.com>
+
+- explit remove distruted certs, as the distrust does not get exported
+  correctly and the SSL certs are still trusted. (bsc#1240343)
+  - Entrust.net Premium 2048 Secure Server CA
+  - Entrust Root Certification Authority
+  - AffirmTrust Commercial
+  - AffirmTrust Networking
+  - AffirmTrust Premium
+  - AffirmTrust Premium ECC
+  - Entrust Root Certification Authority - G2
+  - Entrust Root Certification Authority - EC1
+  - GlobalSign Root E46
+  - GLOBALTRUST 2020
+- remove-distrusted.patch: apply to certdata.txt
+
+-------------------------------------------------------------------
+Tue Mar 25 09:45:30 UTC 2025 - Elisei Roca <eroca@suse.com>
+
+- Fix awk to compare (missing a =) and give the following output:
+  # NSS_BUILTINS_LIBRARY_VERSION "2.74"
+
+-------------------------------------------------------------------
+Tue Mar 25 08:11:46 UTC 2025 - Marcus Meissner <meissner@suse.com>
+
+- pass file argument to awk (bsc#1240009)
+
 -------------------------------------------------------------------
 Tue Feb  4 15:24:38 UTC 2025 - Dirk Müller <dmueller@suse.com>
 

ca-certificates-mozilla.spec

@@ -84,7 +84,9 @@ from MozillaFirefox
 %setup -qcT
 
 mkdir certs
-cp %{SOURCE0} certs
+cd certs
+cp %{SOURCE0} .
+cd ..
 
 install -m 644 %{SOURCE11} COPYING
 ver=`sed -ne '/NSS_BUILTINS_LIBRARY_VERSION /s/.*"\(.*\)"/\1/p' < "%{SOURCE1}"`
@@ -110,7 +112,7 @@ cd ..
 	#
 	# Generated from:
 	EOF
-   awk '$2 = "NSS_BUILTINS_LIBRARY_VERSION" {print "# " $2 " " $3}';
+   awk '$2 == "NSS_BUILTINS_LIBRARY_VERSION" {print "# " $2 " " $3}' %{SOURCE1}
    echo '#';
    ls -1 certs/*.tmp-p11-kit | sort | xargs cat
 ) > %{name}.trust.p11-kit