1
0
Commit Graph

64 Commits

Author SHA256 Message Date
Stephan Kulow
b8aeb0b64e Accepting request 247731 from Base:System
revert a change that breaks some major sites like amazon and paypal

OBS-URL: https://build.opensuse.org/request/show/247731
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=32
2014-09-08 19:28:14 +00:00
270781a4f6 revert change that breaks some major sites
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=62
2014-09-05 14:46:12 +00:00
Stephan Kulow
0ddfa86465 Accepting request 246744 from Base:System
- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado

OBS-URL: https://build.opensuse.org/request/show/246744
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=31
2014-08-30 16:55:49 +00:00
76f2437395 Accepting request 246743 from home:msmeissn:branches:Base:System
- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado

OBS-URL: https://build.opensuse.org/request/show/246743
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=60
2014-08-28 15:42:49 +00:00
Stephan Kulow
d38879273b Accepting request 238154 from Base:System
1

OBS-URL: https://build.opensuse.org/request/show/238154
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=29
2014-06-25 13:23:59 +00:00
c5d39025fa Accepting request 237977 from home:msmeissn:branches:Base:System
- do not provide openssl-certs, just obsolete it.

OBS-URL: https://build.opensuse.org/request/show/237977
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=58
2014-06-20 12:36:04 +00:00
Stephan Kulow
953990ba52 Accepting request 237853 from Base:System
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/237853
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=28
2014-06-18 08:59:38 +00:00
16feb434c8 - in sle11 we bumped openssl-certs version to match the NSS version,
so provide/obsolete the current version.

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=56
2014-06-10 12:52:56 +00:00
480a7cdb7f - updated certificates to revision 1.97 (bnc#881241)
new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=55
2014-06-04 08:39:37 +00:00
Tomáš Chvátal
f557786cea Accepting request 223628 from Base:System
- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem (forwarded request 223627 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/223628
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=27
2014-02-25 15:41:06 +00:00
817799ae13 Accepting request 223627 from home:msmeissn:branches:Base:System
- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem

OBS-URL: https://build.opensuse.org/request/show/223627
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=53
2014-02-24 08:53:37 +00:00
Stephan Kulow
e859c2a51b Accepting request 211084 from Base:System
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/211084
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=26
2013-12-17 09:00:36 +00:00
993d8b9f94 - Updated to 1.95
Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=51
2013-12-09 16:03:09 +00:00
ba1b821fcd - fix handling of certificates with same name (bnc#854163)
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=50
2013-12-09 10:01:15 +00:00
Stephan Kulow
901fd4e824 Accepting request 205921 from Base:System
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/205921
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=25
2013-11-07 07:34:02 +00:00
f17e1e87bb - removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=48
2013-10-29 14:13:23 +00:00
e438e31c5b OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=47 2013-10-29 14:12:58 +00:00
99def78dcc OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=46 2013-10-29 14:00:15 +00:00
8edc6e871f - Updated to 1.94
* new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=45
2013-10-29 13:59:48 +00:00
Stephan Kulow
88ef6e8428 Accepting request 196630 from Base:System
- update Entrust root attributes to new format used by p11-kit (forwarded request 196618 from lnussel)

OBS-URL: https://build.opensuse.org/request/show/196630
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=23
2013-08-30 09:33:02 +00:00
b5121d850d Accepting request 196618 from home:lnussel:branches:Base:System
- update Entrust root attributes to new format used by p11-kit

OBS-URL: https://build.opensuse.org/request/show/196618
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=43
2013-08-28 08:42:46 +00:00
Stephan Kulow
c3f99f810e Accepting request 184205 from Base:System
- remove superfluous double quotes from certificate names

- add fake basic contraints to Entrust root so p11-kit export the cert
  (bnc#829471)
- add nssckbi.h that matches certdata.txt; make sure package has the
  correct version number which is currently 1.93. No actual content
  change in certdata.txt compared to 1.85, it's just that the
  versioning scheme changed.

OBS-URL: https://build.opensuse.org/request/show/184205
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=22
2013-07-25 11:18:17 +00:00
a410738a83 - remove superfluous double quotes from certificate names
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=41
2013-07-24 15:07:12 +00:00
c7e4526057 - add nssckbi.h that matches certdata.txt; make sure package has the
correct version number which is currently 1.93. No actual content
  change in certdata.txt compared to 1.85, it's just that the
  versioning scheme changed.

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=40
2013-07-24 14:45:48 +00:00
abed6a95f8 - add fake basic contraints to Entrust root so p11-kit export the cert
(bnc#829471)

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=39
2013-07-24 14:32:44 +00:00
Stephan Kulow
aa2058350a Accepting request 181769 from Base:System
- use certdata2pem.py from Fedora to extract all certs (forwarded request 181763 from lnussel)

OBS-URL: https://build.opensuse.org/request/show/181769
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=21
2013-07-03 08:15:09 +00:00
c8d346e1ec Accepting request 181763 from home:lnussel:branches:Base:System
- use certdata2pem.py from Fedora to extract all certs

OBS-URL: https://build.opensuse.org/request/show/181763
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=37
2013-07-02 13:57:37 +00:00
Stephan Kulow
768c79a66f Accepting request 180735 from Base:System
- use correct 'anchors' subdirectory (forwarded request 180733 from lnussel)

OBS-URL: https://build.opensuse.org/request/show/180735
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=20
2013-06-25 07:22:50 +00:00
b838180707 Accepting request 180733 from home:lnussel:branches:Base:System
- use correct 'anchors' subdirectory

OBS-URL: https://build.opensuse.org/request/show/180733
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=35
2013-06-24 11:21:23 +00:00
b9942cd5a7 fate 314991, use p11-kit for system ca-certificate handling
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=34
2013-06-21 12:48:17 +00:00
Ismail Dönmez
735e377437 Accepting request 146959 from Base:System
- update certificates to revision 1.87 (bnc#796628)
  * new "EE Certification Centre Root CA"
  * new "T-TeleSec GlobalRoot Class 3"
  * revoke mis-issued intermediate CAs from TURKTRUST (forwarded request 146924 from namtrac)

OBS-URL: https://build.opensuse.org/request/show/146959
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=18
2013-01-04 10:35:08 +00:00
Ismail Dönmez
61fece5dc5 Accepting request 146924 from home:namtrac:branches:Base:System
- update certificates to revision 1.87 (bnc#796628)
  * new "EE Certification Centre Root CA"
  * new "T-TeleSec GlobalRoot Class 3"
  * revoke mis-issued intermediate CAs from TURKTRUST

OBS-URL: https://build.opensuse.org/request/show/146924
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=32
2013-01-04 09:20:47 +00:00
Stephan Kulow
c95f7e452d Accepting request 137787 from Base:System
- updated certificates to revision 1.85 (bnc#783509)
  * new "Actalis Authentication Root CA"
  * new "Trustis FPS Root CA"
  * new "StartCom Certification Authority"
  * new "StartCom Certification Authority G2"
  * new "Buypass Class 2 Root CA"
  * new "Buypass Class 3 Root CA"
  * updated: "Sonera Class2 CA": remove code-signing
  * updated: "thawte Primary Root CA": added code-signing
  * updated: "Trustis_FPS_Root_CA.pem": added code-signing
  * updated: VeriSign Class 3 Public Primary Certification Authority - G5":
    added code-signing, email-protection (forwarded request 137754 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/137787
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=17
2012-10-12 05:41:46 +00:00
Ismail Dönmez
23cff08e56 Accepting request 137754 from home:msmeissn:branches:Base:System
- updated certificates to revision 1.85 (bnc#783509)
  * new "Actalis Authentication Root CA"
  * new "Trustis FPS Root CA"
  * new "StartCom Certification Authority"
  * new "StartCom Certification Authority G2"
  * new "Buypass Class 2 Root CA"
  * new "Buypass Class 3 Root CA"
  * updated: "Sonera Class2 CA": remove code-signing
  * updated: "thawte Primary Root CA": added code-signing
  * updated: "Trustis_FPS_Root_CA.pem": added code-signing
  * updated: VeriSign Class 3 Public Primary Certification Authority - G5":
    added code-signing, email-protection

OBS-URL: https://build.opensuse.org/request/show/137754
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=30
2012-10-10 19:34:14 +00:00
Stephan Kulow
f1c70cf613 Accepting request 116347 from Base:System
- update certificates to revision 1.83 (bnc#760503)
  * new: EC_ACC.pem
  * new: Hellenic_Academic_and_Research_Institutions_RootCA_2011.pem
  * new: Security_Communication_RootCA2.pem
  * removed: TC_TrustCenter_Germany_Class_2_CA.pem
  * removed: TC_TrustCenter_Germany_Class_3_CA.pem
  * removed: Verisign_Class_1_Public_Primary_Certification_Authority.1.pem
  * removed: Verisign_Class_2_Public_Primary_Certification_Authority.pem
  * removed: Verisign_Class_4_Public_Primary_Certification_Authority_G2.pem
- license change to MPL-2.0

OBS-URL: https://build.opensuse.org/request/show/116347
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=15
2012-05-08 10:09:14 +00:00
3cb5d294c4 add bug nr
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=28
2012-05-03 12:44:32 +00:00
b9cc952398 - update certificates to revision 1.83
* new: EC_ACC.pem
  * new: Hellenic_Academic_and_Research_Institutions_RootCA_2011.pem
  * new: Security_Communication_RootCA2.pem
  * removed: TC_TrustCenter_Germany_Class_2_CA.pem
  * removed: TC_TrustCenter_Germany_Class_3_CA.pem
  * removed: Verisign_Class_1_Public_Primary_Certification_Authority.1.pem
  * removed: Verisign_Class_2_Public_Primary_Certification_Authority.pem
  * removed: Verisign_Class_4_Public_Primary_Certification_Authority_G2.pem
- license change to MPL-2.0

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=27
2012-05-03 12:41:21 +00:00
Stephan Kulow
919be49ce8 Accepting request 102600 from Base:System
OBS-URL: https://build.opensuse.org/request/show/102600
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=14
2012-02-08 14:34:34 +00:00
Stephan Kulow
0b4c262309 Accepting request 100075 from Base:System
patching license field to be in spdx.org format, for legal team to review before forward (forwarded request 99920 from dec16180)

OBS-URL: https://build.opensuse.org/request/show/100075
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=13
2012-01-17 10:32:08 +00:00
d16b31a543 Accepting request 100131 from home:babelworx:ldig:branches:Base:System
license update: MPL-1.1 or GPL-2.0+ or LGPL-2.1+
SPDX format and correct GPL and LGPL tags to include or later

OBS-URL: https://build.opensuse.org/request/show/100131
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=24
2012-01-13 10:52:03 +00:00
Stephan Kulow
1ac7331e8e Accepting request 99920 from devel:openSUSE:Factory:for-legal-lhf
patching license field to be in spdx.org format, for legal team to review before forward

OBS-URL: https://build.opensuse.org/request/show/99920
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=23
2012-01-12 15:54:25 +00:00
Sascha Peilicke
546819cfbd Accepting request 83851 from Base:System
OBS-URL: https://build.opensuse.org/request/show/83851
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=11
2011-09-21 14:56:33 +00:00
Stephan Kulow
3c5a4549f9 Accepting request 83054 from home:jengelh:bl-c
- Remove redundant tags/sections from specfile

OBS-URL: https://build.opensuse.org/request/show/83054
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=21
2011-09-20 07:45:49 +00:00
Sascha Peilicke
9f2ca1e2ba Accepting request 80334 from Base:System
Copy from Base:System/ca-certificates-mozilla based on submit request 80334 from user coolo

OBS-URL: https://build.opensuse.org/request/show/80334
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=10
2011-08-31 11:23:34 +00:00
OBS User buildservice-autocommit
3ceecfcd8d Updating link to change in openSUSE:Factory/ca-certificates-mozilla revision 10.0
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=2d6dd34175232ff2bf98e06056d5957f
2011-08-31 11:23:34 +00:00
OBS User $user
0c29524340 Accepting request 80334 from Base:System
checked in (request 80334)

OBS-URL: https://build.opensuse.org/request/show/80334
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=20
2011-08-31 11:23:33 +00:00
8d3c5b7cf4 add hg link
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=19
2011-08-31 09:27:50 +00:00
6873916336 - update certificates to revision 1.76
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=18
2011-08-31 09:03:51 +00:00
6b10929d9f - remove DigiNotar CA (bnc#714931)
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=17
2011-08-30 13:02:19 +00:00
8305587e2b fix
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=16
2011-08-30 08:05:55 +00:00