diff --git a/ca-certificates-mozilla.changes b/ca-certificates-mozilla.changes index d5d6b9f..6b6c41b 100644 --- a/ca-certificates-mozilla.changes +++ b/ca-certificates-mozilla.changes @@ -1,7 +1,13 @@ +------------------------------------------------------------------- +Tue Feb 4 09:55:01 UTC 2025 - Dirk Müller + +- remove extensive signature printing in comments of the cert + bundle + ------------------------------------------------------------------- Thu Jan 23 08:23:15 UTC 2025 - Steve Kowalik -- Define two macros to break a build cycle with p11-kit. +- Define two macros to break a build cycle with p11-kit. ------------------------------------------------------------------- Sun Dec 15 21:07:58 UTC 2024 - Dirk Müller diff --git a/certdata2pem.py b/certdata2pem.py index e0aa79b..e0ee4f7 100644 --- a/certdata2pem.py +++ b/certdata2pem.py @@ -280,7 +280,7 @@ for tobj in objects: # obtain certificate information suitable as a comment comment_fname = "comment-" + fname fcout = open(comment_fname, "w") - comment_command = ["openssl", "x509", "-in", cert_fname, "-noout", "-text"] + comment_command = ["openssl", "x509", "-in", cert_fname, "-noout", "-text", "-certopt", "no_pubkey,no_sigdump"] subprocess.call(comment_command, stdout=fcout) fcout.close() sed_command = ["sed", "--in-place", "s/^/#/", comment_fname]