rpm/ca-certificates-mozilla
SHA256
1
0
Fork 0
forked from pool/ca-certificates-mozilla
Code Pull Requests Activity

Accepting request 237853 from Base:System

Browse Source 
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/237853
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=28
This commit is contained in:
Stephan Kulow 2014-06-18 08:59:38 +00:00 committed by Git OBS Bridge
commit 953990ba52
5 changed files with 789 additions and 318 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
ca-certificates-mozilla.changes
View File

@ -1,3 +1,20 @@
-------------------------------------------------------------------
Tue Jun 10 12:52:29 UTC 2014 - meissner@suse.com
- in sle11 we bumped openssl-certs version to match the NSS version,
so provide/obsolete the current version.
-------------------------------------------------------------------
Wed Jun 4 08:21:33 UTC 2014 - lnussel@suse.de
- updated certificates to revision 1.97 (bnc#881241)
new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
new: "Tugra Certification Authority" (codeSigning serverAuth)
removed: "Firmaprofesional Root CA"
removed: "TDC OCES Root CA"
new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)
------------------------------------------------------------------- -------------------------------------------------------------------
Fri Feb 21 16:18:35 UTC 2014 - meissner@suse.com Fri Feb 21 16:18:35 UTC 2014 - meissner@suse.com

10
ca-certificates-mozilla.spec
View File

@ -26,7 +26,7 @@ BuildRequires: python
Name: ca-certificates-mozilla Name: ca-certificates-mozilla
# Version number is NSS_BUILTINS_LIBRARY_VERSION in this file: # Version number is NSS_BUILTINS_LIBRARY_VERSION in this file:
# https://hg.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/nssckbi.h # https://hg.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/nssckbi.h
Version: 1.96 Version: 1.97
Release: 0 Release: 0
Summary: CA certificates for OpenSSL Summary: CA certificates for OpenSSL
License: MPL-2.0 License: MPL-2.0
@ -38,8 +38,10 @@ Url: http://www.mozilla.org
# - download the new certdata.txt # - download the new certdata.txt
# wget -O certdata.txt "https://hg.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt" # wget -O certdata.txt "https://hg.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt"
# - run compareoldnew to show fingerprints of new and changed certificates # - run compareoldnew to show fingerprints of new and changed certificates
# - check the bugs referenced in cvs log and compare the checksum # - check the bugs referenced in hg log and compare the checksum
# to output of compareoldnew # to output of compareoldnew
# The correct history of the file is actually in the nss repo:
# http://hg.mozilla.org/projects/nss/log/8f026c806587/lib/ckfw/builtins/certdata.txt
# - Watch out that blacklisted or untrusted certificates are not # - Watch out that blacklisted or untrusted certificates are not
# accidentally included! # accidentally included!
Source: https://hg.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt Source: https://hg.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt
@ -54,8 +56,8 @@ BuildArch: noarch
Requires(post): ca-certificates Requires(post): ca-certificates
Requires(postun): ca-certificates Requires(postun): ca-certificates
# #
Provides: openssl-certs = 0.9.9 Provides: openssl-certs = %version
Obsoletes: openssl-certs < 0.9.9 Obsoletes: openssl-certs < %version
%description %description
This package contains some CA root certificates for OpenSSL extracted This package contains some CA root certificates for OpenSSL extracted

1067
certdata.txt
View File

File diff suppressed because it is too large Load Diff

9
compareoldnew
View File

@ -8,7 +8,8 @@ cleanup()
showcert() showcert()
{ {
openssl x509 -in "$1" -noout -subject -fingerprint -nameopt multiline,utf8,-esc_msb \ openssl x509 -in "$1" -noout -subject -fingerprint -nameopt multiline,utf8,-esc_msb \
| sed -ne 's/ *commonName *= / CN: /p; s/.*Fingerprint=/ sha1: /p' | sed -ne 's/ *commonName *= / CN=/p; s/.*Fingerprint=/ sha1=/p'
sed -ne '/^# \(openssl\|distrust\|alias\)/s/^#/ /p' < "$1"
} }
cleanup cleanup
trap cleanup EXIT trap cleanup EXIT
@ -32,13 +33,13 @@ while read line; do
new="$2" new="$2"
common="$3" common="$3"
if [ -n "$old" ]; then if [ -n "$old" ]; then
echo "> removed: $old" echo "- $old"
showcert old/$old showcert old/$old
elif [ -n "$new" ]; then elif [ -n "$new" ]; then
echo "> new: $new" echo "+ $new"
showcert new/$new showcert new/$new
elif ! cmp "old/$common" "new/$common"; then elif ! cmp "old/$common" "new/$common"; then
echo "> changed: $common" echo "~ $common"
showcert old/$common showcert old/$common
showcert new/$common showcert new/$common
diff -u old/$common new/$common || true diff -u old/$common new/$common || true

4
nssckbi.h
View File

@ -45,8 +45,8 @@
* of the comment in the CK_VERSION type definition. * of the comment in the CK_VERSION type definition.
*/ */
#define NSS_BUILTINS_LIBRARY_VERSION_MAJOR 1 #define NSS_BUILTINS_LIBRARY_VERSION_MAJOR 1
#define NSS_BUILTINS_LIBRARY_VERSION_MINOR 96 #define NSS_BUILTINS_LIBRARY_VERSION_MINOR 97
#define NSS_BUILTINS_LIBRARY_VERSION "1.96" #define NSS_BUILTINS_LIBRARY_VERSION "1.97"
/* These version numbers detail the semantic changes to the ckfw engine. */ /* These version numbers detail the semantic changes to the ckfw engine. */
#define NSS_BUILTINS_HARDWARE_VERSION_MAJOR 1 #define NSS_BUILTINS_HARDWARE_VERSION_MAJOR 1