- diff-from-upstream-2.2.patch:

Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=68

ca-certificates-mozilla.changes

@@ -1,3 +1,20 @@
+-------------------------------------------------------------------
+Wed Jan 14 09:40:00 UTC 2015 - meissner@suse.com
+
+- diff-from-upstream-2.2.patch:
+  Temporary reenable some root ca trusts, as openssl/gnutls
+  have trouble using intermediates as root CA.
+
+  - GTE CyberTrust Global Root
+  - Thawte Server CA
+  - Thawte Premium Server CA
+  - ValiCert Class 1 VA
+  - ValiCert Class 2 VA
+  - RSA Root Certificate 1
+  - Entrust.net Secure Server CA
+  - America Online Root Certification Authority 1
+  - America Online Root Certification Authority 2
+
 -------------------------------------------------------------------
 Mon Jan 12 16:45:23 UTC 2015 - meissner@suse.com
 

ca-certificates-mozilla.spec

@@ -49,6 +49,9 @@ Source10:       certdata2pem.py
 Source11:       %{name}.COPYING
 Source12:       compareoldnew
 
+# temporary legacy patch
+Patch0:         diff-from-upstream-2.2.patch
+
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 BuildArch:      noarch
 # for update-ca-certificates
@@ -68,6 +71,8 @@ from MozillaFirefox
 %setup -qcT
 
 /bin/cp %{SOURCE0} .
+patch <%{PATCH0}
+
 install -m 644 %{SOURCE11} COPYING
 ver=`sed -ne '/NSS_BUILTINS_LIBRARY_VERSION /s/.*"\(.*\)"/\1/p' < "%{SOURCE1}"`
 if [ "%{version}" != "$ver" ]; then