ca-certificates-mozilla/nssckbi.h

/* This Source Code Form is subject to the terms of the Mozilla Public
 * License, v. 2.0. If a copy of the MPL was not distributed with this
 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */

#ifndef NSSCKBI_H
#define NSSCKBI_H

/*
 * NSS BUILTINS Version numbers.
 *
 * These are the version numbers for the builtins module packaged with
 * this release on NSS. To determine the version numbers of the builtin
 * module you are using, use the appropriate PKCS #11 calls.
 *
 * These version numbers detail changes to the PKCS #11 interface. They map
 * to the PKCS #11 spec versions.
 */
#define NSS_BUILTINS_CRYPTOKI_VERSION_MAJOR 2
#define NSS_BUILTINS_CRYPTOKI_VERSION_MINOR 20

/* These version numbers detail the changes 
 * to the list of trusted certificates.
 *
 * The NSS_BUILTINS_LIBRARY_VERSION_MINOR macro needs to be bumped
 * for each NSS minor release AND whenever we change the list of
 * trusted certificates.  10 minor versions are allocated for each
 * NSS 3.x branch as follows, allowing us to change the list of
 * trusted certificates up to 9 times on each branch.
 *   - NSS 3.5 branch:  3-9
 *   - NSS 3.6 branch:  10-19
 *   - NSS 3.7 branch:  20-29
 *   - NSS 3.8 branch:  30-39
 *   - NSS 3.9 branch:  40-49
 *   - NSS 3.10 branch: 50-59
 *   - NSS 3.11 branch: 60-69
 *     ...
 *   - NSS 3.12 branch: 70-89
 *   - NSS 3.13 branch: 90-99
 *   - NSS 3.14 branch: 100-109
 *     ...
 *   - NSS 3.29 branch: 250-255
 *
 * NSS_BUILTINS_LIBRARY_VERSION_MINOR is a CK_BYTE.  It's not clear
 * whether we may use its full range (0-255) or only 0-99 because
 * of the comment in the CK_VERSION type definition.
 */
#define NSS_BUILTINS_LIBRARY_VERSION_MAJOR 2
#define NSS_BUILTINS_LIBRARY_VERSION_MINOR 2
#define NSS_BUILTINS_LIBRARY_VERSION "2.2"

/* These version numbers detail the semantic changes to the ckfw engine. */
#define NSS_BUILTINS_HARDWARE_VERSION_MAJOR 1
#define NSS_BUILTINS_HARDWARE_VERSION_MINOR 0

/* These version numbers detail the semantic changes to ckbi itself 
 * (new PKCS #11 objects), etc. */
#define NSS_BUILTINS_FIRMWARE_VERSION_MAJOR 1
#define NSS_BUILTINS_FIRMWARE_VERSION_MINOR 0

#endif /* NSSCKBI_H */
- add nssckbi.h that matches certdata.txt; make sure package has the correct version number which is currently 1.93. No actual content change in certdata.txt compared to 1.85, it's just that the versioning scheme changed. OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=40 2013-07-24 16:45:48 +02:00			`/* This Source Code Form is subject to the terms of the Mozilla Public`
			`* License, v. 2.0. If a copy of the MPL was not distributed with this`
			`* file, You can obtain one at http://mozilla.org/MPL/2.0/. */`

			`#ifndef NSSCKBI_H`
			`#define NSSCKBI_H`

			`/*`
			`* NSS BUILTINS Version numbers.`
			`*`
			`* These are the version numbers for the builtins module packaged with`
			`* this release on NSS. To determine the version numbers of the builtin`
			`* module you are using, use the appropriate PKCS #11 calls.`
			`*`
			`* These version numbers detail changes to the PKCS #11 interface. They map`
			`* to the PKCS #11 spec versions.`
			`*/`
			`#define NSS_BUILTINS_CRYPTOKI_VERSION_MAJOR 2`
			`#define NSS_BUILTINS_CRYPTOKI_VERSION_MINOR 20`

			`/* These version numbers detail the changes`
			`* to the list of trusted certificates.`
			`*`
			`* The NSS_BUILTINS_LIBRARY_VERSION_MINOR macro needs to be bumped`
			`* for each NSS minor release AND whenever we change the list of`
			`* trusted certificates. 10 minor versions are allocated for each`
			`* NSS 3.x branch as follows, allowing us to change the list of`
			`* trusted certificates up to 9 times on each branch.`
			`* - NSS 3.5 branch: 3-9`
			`* - NSS 3.6 branch: 10-19`
			`* - NSS 3.7 branch: 20-29`
			`* - NSS 3.8 branch: 30-39`
			`* - NSS 3.9 branch: 40-49`
			`* - NSS 3.10 branch: 50-59`
			`* - NSS 3.11 branch: 60-69`
			`* ...`
			`* - NSS 3.12 branch: 70-89`
			`* - NSS 3.13 branch: 90-99`
			`* - NSS 3.14 branch: 100-109`
			`* ...`
			`* - NSS 3.29 branch: 250-255`
			`*`
			`* NSS_BUILTINS_LIBRARY_VERSION_MINOR is a CK_BYTE. It's not clear`
			`* whether we may use its full range (0-255) or only 0-99 because`
			`* of the comment in the CK_VERSION type definition.`
			`*/`
- Updated to 2.1 (bnc#888534) - The following 1024-bit CA certificates were removed - Entrust.net Secure Server Certification Authority - ValiCert Class 1 Policy Validation Authority - ValiCert Class 2 Policy Validation Authority - ValiCert Class 3 Policy Validation Authority - TDC Internet Root CA - The following CA certificates were added: - Certification Authority of WoSign - CA 沃通根证书 - DigiCert Assured ID Root G2 - DigiCert Assured ID Root G3 - DigiCert Global Root G2 - DigiCert Global Root G3 - DigiCert Trusted Root G4 - QuoVadis Root CA 1 G3 - QuoVadis Root CA 2 G3 - QuoVadis Root CA 3 G3 - The Trust Bits were changed for the following CA certificates - Class 3 Public Primary Certification Authority - Class 3 Public Primary Certification Authority - Class 2 Public Primary Certification Authority - G2 - VeriSign Class 2 Public Primary Certification Authority - G3 - AC Raíz Certicámara S.A. - NetLock Uzleti (Class B) Tanusitvanykiado - NetLock Expressz (Class C) Tanusitvanykiado OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=64 2014-09-25 15:26:14 +02:00			`#define NSS_BUILTINS_LIBRARY_VERSION_MAJOR 2`
- Updated to 2.2 (bnc#888534) - The following CAs were removed: + America_Online_Root_Certification_Authority_1 + America_Online_Root_Certification_Authority_2 + GTE_CyberTrust_Global_Root + Thawte_Premium_Server_CA + Thawte_Server_CA - The following CAs were added: + COMODO_RSA_Certification_Authority codeSigning emailProtection serverAuth + GlobalSign_ECC_Root_CA_-_R4 codeSigning emailProtection serverAuth + GlobalSign_ECC_Root_CA_-_R5 codeSigning emailProtection serverAuth + USERTrust_ECC_Certification_Authority codeSigning emailProtection serverAuth + USERTrust_RSA_Certification_Authority codeSigning emailProtection serverAuth + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal - The following CAs were changed: + Equifax_Secure_eBusiness_CA_1 remote code signing and https trust, leave email trust + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2 only trust emailProtection OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=67 2015-01-12 17:50:43 +01:00			`#define NSS_BUILTINS_LIBRARY_VERSION_MINOR 2`
			`#define NSS_BUILTINS_LIBRARY_VERSION "2.2"`
- add nssckbi.h that matches certdata.txt; make sure package has the correct version number which is currently 1.93. No actual content change in certdata.txt compared to 1.85, it's just that the versioning scheme changed. OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=40 2013-07-24 16:45:48 +02:00
			`/* These version numbers detail the semantic changes to the ckfw engine. */`
			`#define NSS_BUILTINS_HARDWARE_VERSION_MAJOR 1`
			`#define NSS_BUILTINS_HARDWARE_VERSION_MINOR 0`

			`/* These version numbers detail the semantic changes to ckbi itself`
			`* (new PKCS #11 objects), etc. */`
			`#define NSS_BUILTINS_FIRMWARE_VERSION_MAJOR 1`
			`#define NSS_BUILTINS_FIRMWARE_VERSION_MINOR 0`

			`#endif /* NSSCKBI_H */`