rpm/ca-certificates-mozilla
SHA256
1
0
Fork 0
forked from pool/ca-certificates-mozilla
Code Pull Requests Activity

Compare commits

merge into: rpm:devel
Branches Tags
rpm:factory
rpm:devel
pool:factory
pool:devel
...
pull from: pool:factory
Branches Tags
pool:factory
pool:devel
rpm:factory
rpm:devel

156 Commits
devel ... factory

Author SHA256 Message Date
Ana Guerrero
d5b74ccdf4 Accepting request 1233132 from Base:System 
- Updated to 2.72 state of Mozilla SSL root CAs (bsc#1234798)
  Removed:
  - SecureSign RootCA11
  - Security Communication RootCA3
  Added:
  - TWCA CYBER Root CA
  - TWCA Global Root CA G2
  - SecureSign Root CA12
  - SecureSign Root CA14
  - SecureSign Root CA15

- fix mozila typo in installed files
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
- split out the CA root certificates from the openssl certs
  subpackage into a package of its own.

OBS-URL: https://build.opensuse.org/request/show/1233132
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=63
 2024-12-23 15:49:04 +00:00
Marcus Meissner
0e544e709e - Updated to 2.72 state of Mozilla SSL root CAs (bsc#1234798) 
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=153
 2024-12-23 10:48:14 +00:00
Dirk Mueller
3bb4e89a8b - update to 2.72: 
Removed:
  - SecureSign RootCA11
  - Security Communication RootCA3
  Added:
  - TWCA CYBER Root CA
  - TWCA Global Root CA G2
  - SecureSign Root CA12
  - SecureSign Root CA14
  - SecureSign Root CA15
- fix mozila typo in installed files
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
- split out the CA root certificates from the openssl certs
  subpackage into a package of its own.

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=152
 2024-12-15 21:13:37 +00:00
Dominique Leuenberger
e1288103ac Accepting request 1198030 from Base:System 
OBS-URL: https://build.opensuse.org/request/show/1198030
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=62
 2024-09-02 11:13:13 +00:00
Ana Guerrero
36da3aa3d7 Accepting request 1186335 from Base:System 
- Updated to 2.68 state of Mozilla SSL root CAs (bsc#1227525)
  - Added: FIRMAPROFESIONAL CA ROOT-A WEB
  - Distrust: GLOBALTRUST 2020

OBS-URL: https://build.opensuse.org/request/show/1186335
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=61
 2024-07-10 14:47:50 +00:00
Marcus Meissner
4dd1a0a8af OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=148 2024-07-08 15:26:46 +00:00
Marcus Meissner
57b1767ead - Updated to 2.68 state of Mozilla SSL root CAs (bsc#1227525) 
- Added: FIRMAPROFESIONAL CA ROOT-A WEB
  - Distrust: GLOBALTRUST 2020

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=147
 2024-07-08 15:21:11 +00:00
Dominique Leuenberger
82e0531224 Accepting request 1152964 from Base:System 
- Updated to 2.66 state of Mozilla SSL root CAs (bsc#1220356)
  Added:
  - CommScope Public Trust ECC Root-01
  - CommScope Public Trust ECC Root-02
  - CommScope Public Trust RSA Root-01
  - CommScope Public Trust RSA Root-02
  - D-Trust SBR Root CA 1 2022
  - D-Trust SBR Root CA 2 2022
  - Telekom Security SMIME ECC Root 2021
  - Telekom Security SMIME RSA Root 2023
  - Telekom Security TLS ECC Root 2020
  - Telekom Security TLS RSA Root 2023
  - TrustAsia Global Root CA G3
  - TrustAsia Global Root CA G4
  Removed:
  - Autoridad de Certificacion Firmaprofesional CIF A62634068
  - Chambers of Commerce Root - 2008
  - Global Chambersign Root - 2008
  - Security Communication Root CA
  - Symantec Class 1 Public Primary Certification Authority - G6
  - Symantec Class 2 Public Primary Certification Authority - G6
  - TrustCor ECA-1
  - TrustCor RootCert CA-1
  - TrustCor RootCert CA-2
  - VeriSign Class 1 Public Primary Certification Authority - G3
  - VeriSign Class 2 Public Primary Certification Authority - G3
- remove-trustcor.patch: removed, now upstream
- do a versioned obsoletes of "openssl-certs".

- use rpm 4.20 compatible patch syntax

OBS-URL: https://build.opensuse.org/request/show/1152964
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=60
 2024-02-29 20:49:12 +00:00
Marcus Meissner
371c525905 OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=145 2024-02-28 14:45:37 +00:00
Marcus Meissner
231dd62394 OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=144 2024-02-28 12:01:01 +00:00
Marcus Meissner
ed55e08834 - CN=Swisscom Root CA 2 
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=143
 2024-02-28 11:48:56 +00:00
Marcus Meissner
44ef40a120 - do a versioned obsoletes of "openssl-certs". 
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=142
 2024-02-28 10:39:08 +00:00
Marcus Meissner
d9bef285a2 OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=141 2024-02-28 10:38:40 +00:00
Marcus Meissner
5420dbd23b - remove-trustcor.patch: removed, now upstream 
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=140
 2024-02-27 13:48:40 +00:00
Marcus Meissner
9e23c309da - Updated to 2.66 state of Mozilla SSL root CAs (bsc#1220356) 
Added:
  - CommScope Public Trust ECC Root-01
  - CommScope Public Trust ECC Root-02
  - CommScope Public Trust RSA Root-01
  - CommScope Public Trust RSA Root-02
  - D-Trust SBR Root CA 1 2022
  - D-Trust SBR Root CA 2 2022
  - Telekom Security SMIME ECC Root 2021
  - Telekom Security SMIME RSA Root 2023
  - Telekom Security TLS ECC Root 2020
  - Telekom Security TLS RSA Root 2023
  - TrustAsia Global Root CA G3
  - TrustAsia Global Root CA G4
  Removed:
  - Autoridad de Certificacion Firmaprofesional CIF A62634068
  - Chambers of Commerce Root - 2008
  - Global Chambersign Root - 2008
  - Security Communication Root CA
  - Symantec Class 1 Public Primary Certification Authority - G6
  - Symantec Class 2 Public Primary Certification Authority - G6
  - TrustCor ECA-1
  - TrustCor RootCert CA-1
  - TrustCor RootCert CA-2
  - VeriSign Class 1 Public Primary Certification Authority - G3
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - lN=Swisscom Root CA 2

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=139
 2024-02-26 12:25:05 +00:00
Marcus Meissner
17ba817345 Accepting request 1151207 from home:dimstar:Factory 
- Use %patch -P N instead of deprecated %patchN.

The changes diff was missing in the previous SR - sorry for that!

OBS-URL: https://build.opensuse.org/request/show/1151207
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=138
 2024-02-26 11:21:00 +00:00
Marcus Meissner
b27c937a3c - use rpm 4.20 compatible patch syntax 
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=137
 2024-02-26 11:20:49 +00:00
Marcus Meissner
5934710c7b Accepting request 1150827 from home:dimstar:rpm4.20:c 
Prepare for RPM 4.20

OBS-URL: https://build.opensuse.org/request/show/1150827
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=136
 2024-02-26 10:42:37 +00:00
Ana Guerrero
f01a6a4842 Accepting request 1104176 from Base:System 
- readd _multibuild

OBS-URL: https://build.opensuse.org/request/show/1104176
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=59
 2023-08-17 17:42:45 +00:00
Marcus Meissner
1f6b277d9b - readd _multibuild 
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=134
 2023-08-16 13:01:45 +00:00
Marcus Meissner
25e43affa2 OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=133 2023-08-16 12:47:17 +00:00
Dominique Leuenberger
90a91f0708 Accepting request 1103854 from Base:System 
- Updated to 2.62 state of Mozilla SSL root CAs (bsc#1214248)
  Added:
  - Atos TrustedRoot Root CA ECC G2 2020
  - Atos TrustedRoot Root CA ECC TLS 2021
  - Atos TrustedRoot Root CA RSA G2 2020
  - Atos TrustedRoot Root CA RSA TLS 2021
  - BJCA Global Root CA1
  - BJCA Global Root CA2
  - LAWtrust Root CA2 (4096)
  - Sectigo Public Email Protection Root E46
  - Sectigo Public Email Protection Root R46
  - Sectigo Public Server Authentication Root E46
  - Sectigo Public Server Authentication Root R46
  - SSL.com Client ECC Root CA 2022
  - SSL.com Client RSA Root CA 2022
  - SSL.com TLS ECC Root CA 2022
  - SSL.com TLS RSA Root CA 2022
  Removed CAs:
  - Chambers of Commerce Root
  - E-Tugra Certification Authority
  - E-Tugra Global Root CA ECC v3
  - E-Tugra Global Root CA RSA v3
  - Hongkong Post Root CA 1 (forwarded request 1103853 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/1103854
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=58
 2023-08-15 14:39:24 +00:00
Marcus Meissner
ab31cd61a6 Accepting request 1103853 from home:msmeissn:branches:Base:System 
- Updated to 2.62 state of Mozilla SSL root CAs (bsc#1214248)
  Added:
  - Atos TrustedRoot Root CA ECC G2 2020
  - Atos TrustedRoot Root CA ECC TLS 2021
  - Atos TrustedRoot Root CA RSA G2 2020
  - Atos TrustedRoot Root CA RSA TLS 2021
  - BJCA Global Root CA1
  - BJCA Global Root CA2
  - LAWtrust Root CA2 (4096)
  - Sectigo Public Email Protection Root E46
  - Sectigo Public Email Protection Root R46
  - Sectigo Public Server Authentication Root E46
  - Sectigo Public Server Authentication Root R46
  - SSL.com Client ECC Root CA 2022
  - SSL.com Client RSA Root CA 2022
  - SSL.com TLS ECC Root CA 2022
  - SSL.com TLS RSA Root CA 2022
  Removed CAs:
  - Chambers of Commerce Root
  - E-Tugra Certification Authority
  - E-Tugra Global Root CA ECC v3
  - E-Tugra Global Root CA RSA v3
  - Hongkong Post Root CA 1

OBS-URL: https://build.opensuse.org/request/show/1103853
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=131
 2023-08-14 11:45:48 +00:00
Dominique Leuenberger
2a5ba9e2e4 Accepting request 1084757 from Base:System 
- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS. (forwarded request 1084749 from dimstar)

OBS-URL: https://build.opensuse.org/request/show/1084757
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=57
 2023-05-05 13:57:10 +00:00
Marcus Meissner
5388f9c492 Accepting request 1084749 from home:dimstar:Factory 
- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.

OBS-URL: https://build.opensuse.org/request/show/1084749
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=129
 2023-05-04 14:39:59 +00:00
Dominique Leuenberger
d29d59b1af Accepting request 1078593 from Base:System 
- Also mark /usr/share/factory/var/lib/ca-certificates/ as writable
  by the user during install: allow rpm to properly execute %clean
  when completed. (forwarded request 1078460 from dimstar)

OBS-URL: https://build.opensuse.org/request/show/1078593
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=56
 2023-04-13 12:09:56 +00:00
Marcus Meissner
4ad6d7a83b Accepting request 1078460 from home:dimstar:Factory 
- Also mark /usr/share/factory/var/lib/ca-certificates/ as writable
  by the user during install: allow rpm to properly execute %clean
  when completed.

OBS-URL: https://build.opensuse.org/request/show/1078460
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=127
 2023-04-12 08:15:52 +00:00
Dominique Leuenberger
4eb9b38483 Accepting request 1044255 from Base:System 
- Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622)
  Removed CAs:
  - Global Chambersign Root
  - EC-ACC
  - Network Solutions Certificate Authority
  - Staat der Nederlanden EV Root CA
  - SwissSign Platinum CA - G2
  Added CAs:
  - DIGITALSIGN GLOBAL ROOT ECDSA CA
  - DIGITALSIGN GLOBAL ROOT RSA CA
  - Security Communication ECC RootCA1
  - Security Communication RootCA3
  Changed trust:
  - TrustCor certificates only trusted up to Nov 30 (bsc#1206212)
- Removed CAs (bsc#1206212) as most code does not handle "valid before nov 30 2022"
  and it is not clear how many certs were issued for SSL middleware by TrustCor:
  - TrustCor RootCert CA-1
  - TrustCor RootCert CA-2
  - TrustCor ECA-1
  Patch: remove-trustcor.patch (forwarded request 1044253 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/1044255
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=55
 2022-12-24 13:50:54 +00:00
Marcus Meissner
4626268547 Accepting request 1044253 from home:msmeissn:branches:Base:System 
- Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622)
  Removed CAs:
  - Global Chambersign Root
  - EC-ACC
  - Network Solutions Certificate Authority
  - Staat der Nederlanden EV Root CA
  - SwissSign Platinum CA - G2
  Added CAs:
  - DIGITALSIGN GLOBAL ROOT ECDSA CA
  - DIGITALSIGN GLOBAL ROOT RSA CA
  - Security Communication ECC RootCA1
  - Security Communication RootCA3
  Changed trust:
  - TrustCor certificates only trusted up to Nov 30 (bsc#1206212)
- Removed CAs (bsc#1206212) as most code does not handle "valid before nov 30 2022"
  and it is not clear how many certs were issued for SSL middleware by TrustCor:
  - TrustCor RootCert CA-1
  - TrustCor RootCert CA-2
  - TrustCor ECA-1
  Patch: remove-trustcor.patch

OBS-URL: https://build.opensuse.org/request/show/1044253
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=125
 2022-12-22 12:42:18 +00:00
Dominique Leuenberger
40201cca5e Accepting request 1000222 from Base:System 
- Create /var/lib/ca-certificates during build to ensure rpm gives
  the %ghost'ed directory proper mode attributes. (forwarded request 1000216 from dimstar)

OBS-URL: https://build.opensuse.org/request/show/1000222
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=54
 2022-08-31 16:08:41 +00:00
Marcus Meissner
892eb1b6a1 Accepting request 1000216 from home:dimstar:Factory 
- Create /var/lib/ca-certificates during build to ensure rpm gives
  the %ghost'ed directory proper mode attributes.

OBS-URL: https://build.opensuse.org/request/show/1000216
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=123
 2022-08-30 11:06:08 +00:00
Marcus Meissner
38288fa785 OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=122 2022-08-29 12:43:41 +00:00
Marcus Meissner
fb6ce8e06e OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=121 2022-08-29 12:37:20 +00:00
Marcus Meissner
bae3d7b6bf - Updated to 2.56 state of Mozilla SSL root CAs (bsc#1202868) 
Added:
  - Certainly Root E1
  - Certainly Root R1
  - DigiCert SMIME ECC P384 Root G5
  - DigiCert SMIME RSA4096 Root G5
  - DigiCert TLS ECC P384 Root G5
  - DigiCert TLS RSA4096 Root G5
  - E-Tugra Global Root CA ECC v3
  - E-Tugra Global Root CA RSA v3
  Removed:
  - Hellenic Academic and Research Institutions RootCA 2011

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=120
 2022-08-29 11:47:56 +00:00
Marcus Meissner
b041b20557 OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=119 2022-05-03 07:10:19 +00:00
Marcus Meissner
db38d2779b - Updated to 2.54 state of Mozilla SSL root CAs (bsc#1199079) 
Added:
  - Autoridad de Certificacion Firmaprofesional CIF A62634068
  - D-TRUST BR Root CA 1 2020
  - D-TRUST EV Root CA 1 2020
  - GlobalSign ECC Root CA R4
  - GTS Root R1
  - GTS Root R2
  - GTS Root R3
  - GTS Root R4
  - HiPKI Root CA - G1
  - ISRG Root X2
  - Telia Root CA v2
  - vTrus ECC Root CA
  - vTrus Root CA
  Removed:
  - Cybertrust Global Root
  - DST Root CA X3
  - DigiNotar PKIoverheid CA Organisatie - G2
  - GlobalSign ECC Root CA R4
  - GlobalSign Root CA R2
  - GTS Root R1
  - GTS Root R2
  - GTS Root R3
  - GTS Root R4

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=118
 2022-05-02 11:49:34 +00:00
Richard Brown
8fb21c3598 Accepting request 923405 from Base:System 
- new package for minimal base containers (jsc#SLE-22162) (forwarded request 923227 from lnussel)

OBS-URL: https://build.opensuse.org/request/show/923405
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=53
 2021-10-08 20:04:37 +00:00
Marcus Meissner
bcec73a77d Accepting request 923227 from home:lnussel:branches:Base:System 
- new package for minimal base containers (jsc#SLE-22162)

OBS-URL: https://build.opensuse.org/request/show/923227
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=117
 2021-10-06 06:13:23 +00:00
Marcus Meissner
42732872ba - updated to 2.50 state of the Mozilla NSS Certificate store (bsc#1188006) 
- Added CAs:
  + HARICA Client ECC Root CA 2021
  + HARICA Client RSA Root CA 2021
  + HARICA TLS ECC Root CA 2021
  + HARICA TLS RSA Root CA 2021
  + TunTrust Root CA

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=116
 2021-10-02 07:35:25 +00:00
Marcus Meissner
ca066fd575 - remove the DST_Root_CA_X3.pem trust, as it expires september 30th 2021. 
(bsc#1190858)

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=115
 2021-10-01 10:59:15 +00:00
Dominique Leuenberger
4af65133eb Accepting request 904151 from Base:System 
- updated to 2.50 state of the Mozilla NSS Certificate store (bsc#1188006)
  Added CAs:
  * AC RAIZ FNMT-RCM SERVIDORES SEGUROS
  * ANF Secure Server Root CA
  * Certum EC-384 CA
  * Certum Trusted Root CA
  * GlobalSign Root E46
  * GlobalSign Root R46
  * GlobalSign Secure Mail Root E45
  * GlobalSign Secure Mail Root R45
  * GLOBALTRUST 2020
  Removed CAs:
  * GeoTrust Primary Certification Authority - G2
  * QuoVadis Root Certification Authority
  * Sonera Class2 CA
  * Trustis FPS Root CA
  * VeriSign Universal Root Certification Authority

- fix mozila typo in installed files

OBS-URL: https://build.opensuse.org/request/show/904151
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=52
 2021-07-07 16:29:43 +00:00
Marcus Meissner
0bc72da57f - updated to 2.50 state of the Mozilla NSS Certificate store (bsc#1188006) 
Added CAs:
  * AC RAIZ FNMT-RCM SERVIDORES SEGUROS
  * ANF Secure Server Root CA
  * Certum EC-384 CA
  * Certum Trusted Root CA
  * GlobalSign Root E46
  * GlobalSign Root R46
  * GlobalSign Secure Mail Root E45
  * GlobalSign Secure Mail Root R45
  * GLOBALTRUST 2020
  Removed CAs:
  * GeoTrust Primary Certification Authority - G2
  * QuoVadis Root Certification Authority
  * Sonera Class2 CA
  * Trustis FPS Root CA
  * VeriSign Universal Root Certification Authority

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=114
 2021-07-05 12:19:02 +00:00
Marcus Meissner
110779d847 Accepting request 903941 from home:dirkmueller:branches:Base:System 
- fix mozila typo in installed files

OBS-URL: https://build.opensuse.org/request/show/903941
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=113
 2021-07-05 10:25:21 +00:00
Richard Brown
2f7a09e388 Accepting request 872848 from Base:System 
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/872848
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=51
 2021-02-22 13:22:36 +00:00
Marcus Meissner
160694adc0 - Updated to 2.46 state of the Mozilla NSS Certificate store (bsc#1181994) 
- Added new root CAs:
  - NAVER Global Root Certification Authority
- Removed old root CA:
  - GeoTrust Global CA
  - GeoTrust Primary Certification Authority
  - GeoTrust Primary Certification Authority - G3
  - GeoTrust Universal CA
  - GeoTrust Universal CA 2
  - thawte Primary Root CA
  - thawte Primary Root CA - G2
  - thawte Primary Root CA - G3
  - VeriSign Class 3 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G5

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=111
 2021-02-09 13:15:43 +00:00
Dominique Leuenberger
522442783e Accepting request 842510 from Base:System 
- Updated to 2.44 state of the Mozilla NSS Certificate store (bsc#1177864)
- Removed CAs:
  - EE Certification Centre Root CA
  - Taiwan GRCA
- Added CAs:
  - Trustwave Global Certification Authority
  - Trustwave Global ECC P256 Certification Authority
  - Trustwave Global ECC P384 Certification Authority (forwarded request 842509 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/842510
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=50
 2020-10-22 12:21:31 +00:00
Marcus Meissner
36cbf2d63e Accepting request 842509 from home:msmeissn:branches:Base:System 
- Updated to 2.44 state of the Mozilla NSS Certificate store (bsc#1177864)
- Removed CAs:
  - EE Certification Centre Root CA
  - Taiwan GRCA
- Added CAs:
  - Trustwave Global Certification Authority
  - Trustwave Global ECC P256 Certification Authority
  - Trustwave Global ECC P384 Certification Authority

OBS-URL: https://build.opensuse.org/request/show/842509
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=109
 2020-10-19 09:18:00 +00:00
Dominique Leuenberger
8de525bcfa Accepting request 823414 from Base:System 
- update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673)
  Removed CAs:
  - AddTrust External CA Root
  - AddTrust Class 1 CA Root
  - LuxTrust Global Root 2
  - Staat der Nederlanden Root CA - G2
  - Symantec Class 1 Public Primary Certification Authority - G4
  - Symantec Class 2 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G3
  Added CAs:
  - certSIGN Root CA G2
  - e-Szigno Root CA 2017
  - Microsoft ECC Root Certificate Authority 2017
  - Microsoft RSA Root Certificate Authority 2017

OBS-URL: https://build.opensuse.org/request/show/823414
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=49
 2020-07-30 07:59:40 +00:00
Marcus Meissner
dcae684d43 - update to 2.42 state of the Mozilla NSS Certificate store (bsc#1160160) 
Removed CAs:
  - AddTrust External CA Root
  - AddTrust Class 1 CA Root
  - LuxTrust Global Root 2
  - Staat der Nederlanden Root CA - G2
  - Symantec Class 1 Public Primary Certification Authority - G4
  - Symantec Class 2 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G3
  Added CAs:
  - certSIGN Root CA G2
  - e-Szigno Root CA 2017
  - Microsoft ECC Root Certificate Authority 2017
  - Microsoft RSA Root Certificate Authority 2017

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=107
 2020-07-29 13:57:05 +00:00
Dominique Leuenberger
ee312ecf11 Accepting request 790876 from Base:System 
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/790876
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=48
 2020-04-05 18:52:28 +00:00
Marcus Meissner
f4ea507fb3 - also run update-ca-certificates in %posttrans 
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=105
 2020-03-26 11:48:30 +00:00
Dominique Leuenberger
e67a3deb1c Accepting request 764234 from Base:System 
- update to 2.40 state of the Mozilla NSS Certificate store (bsc#1160160)
- removed:
  - Certplus Class 2 Primary CA
  - Deutsche Telekom Root CA 2
  - CN=Swisscom Root CA 2
  - UTN-USERFirst-Client Authentication and Email
- added:
  - Entrust Root Certification Authority - G4

OBS-URL: https://build.opensuse.org/request/show/764234
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=47
 2020-01-20 21:47:37 +00:00
Marcus Meissner
4d5ca30f27 - update to 2.40 state of the Mozilla NSS Certificate store (bsc#1160160) 
- removed:
  - Certplus Class 2 Primary CA
  - Deutsche Telekom Root CA 2
  - CN=Swisscom Root CA 2
  - UTN-USERFirst-Client Authentication and Email
- added:
  - Entrust Root Certification Authority - G4

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=103
 2020-01-14 07:09:31 +00:00
Dominique Leuenberger
f19d471776 Accepting request 757879 from Base:System 
- make sure p11-kit with patches is installed on SLE (boo#1154871) (forwarded request 757830 from lnussel)

OBS-URL: https://build.opensuse.org/request/show/757879
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=46
 2019-12-23 21:41:57 +00:00
Marcus Meissner
07668ef98a Accepting request 757830 from home:lnussel:ca-certificates 
- make sure p11-kit with patches is installed on SLE (boo#1154871)

OBS-URL: https://build.opensuse.org/request/show/757830
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=101
 2019-12-18 14:36:16 +00:00
Dominique Leuenberger
70a62c22e1 Accepting request 754429 from Base:System 
retrofit bug numbers from sle

OBS-URL: https://build.opensuse.org/request/show/754429
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=45
 2019-12-05 16:35:01 +00:00
Ludwig Nussel
e708237b98 another one 
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=99
 2019-12-05 14:09:51 +00:00
Ludwig Nussel
5b621a3b3f retrofit some bug numbers from sle 
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=98
 2019-12-05 14:03:45 +00:00
Dominique Leuenberger
03d887b822 Accepting request 750502 from Base:System 
OBS-URL: https://build.opensuse.org/request/show/750502
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=44
 2019-12-02 10:26:32 +00:00
Marcus Meissner
8334377515 Accepting request 748879 from home:lnussel:ca-certificates 
- export correct p11kit trust attributes so Firefox detects built in
  certificates (boo#1154871). Courtesy of Fedora.

OBS-URL: https://build.opensuse.org/request/show/748879
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=96
 2019-11-24 10:23:31 +00:00
Dominique Leuenberger
ec48c0eaa5 Accepting request 721013 from Base:System 
OBS-URL: https://build.opensuse.org/request/show/721013
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=43
 2019-08-15 10:25:19 +00:00
Dirk Mueller
f39adec22e Accepting request 720884 from home:AndreasStieger:branches:Base:System 
bsc#1144169

OBS-URL: https://build.opensuse.org/request/show/720884
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=94
 2019-08-05 11:29:56 +00:00
Dominique Leuenberger
f53ac9c8cd Accepting request 666624 from Base:System 
- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)

OBS-URL: https://build.opensuse.org/request/show/666624
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=42
 2019-01-29 13:45:04 +00:00
Marcus Meissner
a493bbfdf0 - updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446) 
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=92
 2019-01-17 06:22:47 +00:00
Dominique Leuenberger
430f015c5c Accepting request 629505 from Base:System 
- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
    - Certplus Root CA G1
    - Certplus Root CA G2
    - OpenTrust Root CA G1
    - OpenTrust Root CA G2
    - OpenTrust Root CA G3
  - remove CA
    - ComSign CA
  - added new CA
    - GlobalSign

OBS-URL: https://build.opensuse.org/request/show/629505
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=41
 2018-08-28 07:19:36 +00:00
Marcus Meissner
51fce36b8a - updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780) 
- removed server auth
    - Certplus Root CA G1
    - Certplus Root CA G2
    - OpenTrust Root CA G1
    - OpenTrust Root CA G2
    - OpenTrust Root CA G3
  - remove CA
    - ComSign CA
  - added new CA
    - GlobalSign

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=90
 2018-08-16 08:43:19 +00:00
Dominique Leuenberger
ad944a3dc9 Accepting request 621348 from Base:System 
- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sağlayıcısı_H5:2.7.0.142.23.254.36.32.129.crt

OBS-URL: https://build.opensuse.org/request/show/621348
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=40
 2018-07-13 08:17:18 +00:00
Marcus Meissner
e2918b9a29 - Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415) 
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=88
 2018-07-06 14:41:48 +00:00
Marcus Meissner
5deb746ba4 - Updated to 2.24 state of the Mozilla NSS Certificate store. 
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sağlayıcısı_H5:2.7.0.142.23.254.36.32.129.crt

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=87
 2018-07-06 14:41:33 +00:00
Dominique Leuenberger
b92c4a7c5b Accepting request 589173 from Base:System 
-  Use %license instead of %doc [bsc#1082318] (forwarded request 589166 from kukuk)

OBS-URL: https://build.opensuse.org/request/show/589173
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=39
 2018-03-26 10:06:37 +00:00
Marcus Meissner
3947d2bb46 Accepting request 589166 from home:kukuk:branches:Base:System 
-  Use %license instead of %doc [bsc#1082318]

OBS-URL: https://build.opensuse.org/request/show/589166
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=85
 2018-03-20 12:40:02 +00:00
Dominique Leuenberger
21f323e881 Accepting request 569458 from Base:System 
- Updated to 2.22 state of the Mozilla NSS Certificate store.
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
  * TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China

OBS-URL: https://build.opensuse.org/request/show/569458
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=38
 2018-01-26 12:35:48 +00:00
Marcus Meissner
1539d1772e Accepting request 569457 from home:msmeissn:branches:Base:System 
- Updated to 2.22 state of the Mozilla NSS Certificate store.
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
  * TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China

OBS-URL: https://build.opensuse.org/request/show/569457
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=83
 2018-01-25 10:05:06 +00:00
Dominique Leuenberger
96e24d7a24 Accepting request 536559 from Base:System 
- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers (forwarded request 536543 from matejcik)

OBS-URL: https://build.opensuse.org/request/show/536559
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=37
 2017-10-27 11:47:17 +00:00
Marcus Meissner
20378a0d47 Accepting request 536543 from home:matejcik:py3port 
- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers

OBS-URL: https://build.opensuse.org/request/show/536543
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=81
 2017-10-25 14:46:12 +00:00
Dominique Leuenberger
6a431e5dee Accepting request 452187 from Base:System 
- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sağlayıcısı:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection

OBS-URL: https://build.opensuse.org/request/show/452187
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=36
 2017-02-01 08:48:14 +00:00
Marcus Meissner
7a4b756f81 Accepting request 452186 from home:msmeissn:branches:Base:System 
- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sağlayıcısı:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection

OBS-URL: https://build.opensuse.org/request/show/452186
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=79
 2017-01-24 14:21:07 +00:00
Dominique Leuenberger
01f362cbf4 Accepting request 386127 from Base:System 
- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.

OBS-URL: https://build.opensuse.org/request/show/386127
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=35
 2016-04-11 07:13:55 +00:00
Marcus Meissner
b9c021fd6a OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=77 2016-04-06 15:59:55 +00:00
Marcus Meissner
bc2a7e821f - diff-from-upstream-2.7.patch: restore some important legacy 
CAs, otherwise Pidgin fails to talk to Google Talk for instance.

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=76
 2016-04-06 14:54:24 +00:00
Dominique Leuenberger
146a614833 Accepting request 382503 from Base:System 
- Updated to 2.7.
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II

OBS-URL: https://build.opensuse.org/request/show/382503
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=34
 2016-04-05 08:41:38 +00:00
Marcus Meissner
bda0de663c - Updated to 2.7. 
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=74
 2016-03-31 13:08:43 +00:00
Marcus Meissner
8c7a4cbad3 OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=73 2016-03-31 12:20:09 +00:00
Marcus Meissner
fc193c74b8 OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=72 2016-03-31 11:53:49 +00:00
Marcus Meissner
69428b71d6 OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=71 2016-03-31 11:53:45 +00:00
Dominique Leuenberger
a3f8b25761 Accepting request 281262 from Base:System 
- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2

- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
      codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
      codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
      codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
      codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority

OBS-URL: https://build.opensuse.org/request/show/281262
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=33
 2015-01-20 11:26:28 +00:00
Marcus Meissner
3359c3f6b9 OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=69 2015-01-14 09:56:06 +00:00
Marcus Meissner
d3e3a94129 - diff-from-upstream-2.2.patch: 
Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=68
 2015-01-14 09:43:56 +00:00
Marcus Meissner
2cfeb8d007 - Updated to 2.2 (bnc#888534) 
- The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
      codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
      codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
      codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
      codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
      codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
      remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
      only trust emailProtection

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=67
 2015-01-12 16:50:43 +00:00
Marcus Meissner
b4c0f97a4b - certdata-temporary-1024.patch: restore some certificates removed 
from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=66
 2015-01-12 15:58:35 +00:00
Marcus Meissner
c809a61c42 OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=65 2014-09-25 15:32:54 +00:00
Marcus Meissner
69dda2cf9d - Updated to 2.1 (bnc#888534) 
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=64
 2014-09-25 13:26:14 +00:00
Stephan Kulow
b8aeb0b64e Accepting request 247731 from Base:System 
revert a change that breaks some major sites like amazon and paypal

OBS-URL: https://build.opensuse.org/request/show/247731
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=32
 2014-09-08 19:28:14 +00:00
Marcus Meissner
270781a4f6 revert change that breaks some major sites 
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=62
 2014-09-05 14:46:12 +00:00
Stephan Kulow
0ddfa86465 Accepting request 246744 from Base:System 
- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado

OBS-URL: https://build.opensuse.org/request/show/246744
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=31
 2014-08-30 16:55:49 +00:00
Marcus Meissner
76f2437395 Accepting request 246743 from home:msmeissn:branches:Base:System 
- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado

OBS-URL: https://build.opensuse.org/request/show/246743
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=60
 2014-08-28 15:42:49 +00:00
Stephan Kulow
d38879273b Accepting request 238154 from Base:System 
1

OBS-URL: https://build.opensuse.org/request/show/238154
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=29
 2014-06-25 13:23:59 +00:00
Marcus Meissner
c5d39025fa Accepting request 237977 from home:msmeissn:branches:Base:System 
- do not provide openssl-certs, just obsolete it.

OBS-URL: https://build.opensuse.org/request/show/237977
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=58
 2014-06-20 12:36:04 +00:00
Stephan Kulow
953990ba52 Accepting request 237853 from Base:System 
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/237853
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=28
 2014-06-18 08:59:38 +00:00
Marcus Meissner
16feb434c8 - in sle11 we bumped openssl-certs version to match the NSS version, 
so provide/obsolete the current version.

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=56
 2014-06-10 12:52:56 +00:00
Ludwig Nussel
480a7cdb7f - updated certificates to revision 1.97 (bnc#881241) 
new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=55
 2014-06-04 08:39:37 +00:00
Tomáš Chvátal
f557786cea Accepting request 223628 from Base:System 
- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem (forwarded request 223627 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/223628
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=27
 2014-02-25 15:41:06 +00:00
Marcus Meissner
817799ae13 Accepting request 223627 from home:msmeissn:branches:Base:System 
- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem

OBS-URL: https://build.opensuse.org/request/show/223627
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=53
 2014-02-24 08:53:37 +00:00
Stephan Kulow
e859c2a51b Accepting request 211084 from Base:System 
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/211084
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=26
 2013-12-17 09:00:36 +00:00
Marcus Meissner
993d8b9f94 - Updated to 1.95 
Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=51
 2013-12-09 16:03:09 +00:00
Ludwig Nussel
ba1b821fcd - fix handling of certificates with same name (bnc#854163) 
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=50
 2013-12-09 10:01:15 +00:00
Stephan Kulow
901fd4e824 Accepting request 205921 from Base:System 
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/205921
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=25
 2013-11-07 07:34:02 +00:00
Marcus Meissner
f17e1e87bb - removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override. 
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=48
 2013-10-29 14:13:23 +00:00
Marcus Meissner
e438e31c5b OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=47 2013-10-29 14:12:58 +00:00
Marcus Meissner
99def78dcc OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=46 2013-10-29 14:00:15 +00:00
Marcus Meissner
8edc6e871f - Updated to 1.94 
* new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=45
 2013-10-29 13:59:48 +00:00
Stephan Kulow
88ef6e8428 Accepting request 196630 from Base:System 
- update Entrust root attributes to new format used by p11-kit (forwarded request 196618 from lnussel)

OBS-URL: https://build.opensuse.org/request/show/196630
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=23
 2013-08-30 09:33:02 +00:00
Marcus Meissner
b5121d850d Accepting request 196618 from home:lnussel:branches:Base:System 
- update Entrust root attributes to new format used by p11-kit

OBS-URL: https://build.opensuse.org/request/show/196618
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=43
 2013-08-28 08:42:46 +00:00
Stephan Kulow
c3f99f810e Accepting request 184205 from Base:System 
- remove superfluous double quotes from certificate names

- add fake basic contraints to Entrust root so p11-kit export the cert
  (bnc#829471)
- add nssckbi.h that matches certdata.txt; make sure package has the
  correct version number which is currently 1.93. No actual content
  change in certdata.txt compared to 1.85, it's just that the
  versioning scheme changed.

OBS-URL: https://build.opensuse.org/request/show/184205
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=22
 2013-07-25 11:18:17 +00:00
Ludwig Nussel
a410738a83 - remove superfluous double quotes from certificate names 
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=41
 2013-07-24 15:07:12 +00:00
Ludwig Nussel
c7e4526057 - add nssckbi.h that matches certdata.txt; make sure package has the 
correct version number which is currently 1.93. No actual content
  change in certdata.txt compared to 1.85, it's just that the
  versioning scheme changed.

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=40
 2013-07-24 14:45:48 +00:00
Ludwig Nussel
abed6a95f8 - add fake basic contraints to Entrust root so p11-kit export the cert 
(bnc#829471)

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=39
 2013-07-24 14:32:44 +00:00
Stephan Kulow
aa2058350a Accepting request 181769 from Base:System 
- use certdata2pem.py from Fedora to extract all certs (forwarded request 181763 from lnussel)

OBS-URL: https://build.opensuse.org/request/show/181769
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=21
 2013-07-03 08:15:09 +00:00
Ludwig Nussel
c8d346e1ec Accepting request 181763 from home:lnussel:branches:Base:System 
- use certdata2pem.py from Fedora to extract all certs

OBS-URL: https://build.opensuse.org/request/show/181763
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=37
 2013-07-02 13:57:37 +00:00
Stephan Kulow
768c79a66f Accepting request 180735 from Base:System 
- use correct 'anchors' subdirectory (forwarded request 180733 from lnussel)

OBS-URL: https://build.opensuse.org/request/show/180735
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=20
 2013-06-25 07:22:50 +00:00
Ludwig Nussel
b838180707 Accepting request 180733 from home:lnussel:branches:Base:System 
- use correct 'anchors' subdirectory

OBS-URL: https://build.opensuse.org/request/show/180733
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=35
 2013-06-24 11:21:23 +00:00
Ludwig Nussel
b9942cd5a7 fate 314991, use p11-kit for system ca-certificate handling 
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=34
 2013-06-21 12:48:17 +00:00
Ismail Dönmez
735e377437 Accepting request 146959 from Base:System 
- update certificates to revision 1.87 (bnc#796628)
  * new "EE Certification Centre Root CA"
  * new "T-TeleSec GlobalRoot Class 3"
  * revoke mis-issued intermediate CAs from TURKTRUST (forwarded request 146924 from namtrac)

OBS-URL: https://build.opensuse.org/request/show/146959
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=18
 2013-01-04 10:35:08 +00:00
Ismail Dönmez
61fece5dc5 Accepting request 146924 from home:namtrac:branches:Base:System 
- update certificates to revision 1.87 (bnc#796628)
  * new "EE Certification Centre Root CA"
  * new "T-TeleSec GlobalRoot Class 3"
  * revoke mis-issued intermediate CAs from TURKTRUST

OBS-URL: https://build.opensuse.org/request/show/146924
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=32
 2013-01-04 09:20:47 +00:00
Stephan Kulow
c95f7e452d Accepting request 137787 from Base:System 
- updated certificates to revision 1.85 (bnc#783509)
  * new "Actalis Authentication Root CA"
  * new "Trustis FPS Root CA"
  * new "StartCom Certification Authority"
  * new "StartCom Certification Authority G2"
  * new "Buypass Class 2 Root CA"
  * new "Buypass Class 3 Root CA"
  * updated: "Sonera Class2 CA": remove code-signing
  * updated: "thawte Primary Root CA": added code-signing
  * updated: "Trustis_FPS_Root_CA.pem": added code-signing
  * updated: VeriSign Class 3 Public Primary Certification Authority - G5":
    added code-signing, email-protection (forwarded request 137754 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/137787
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=17
 2012-10-12 05:41:46 +00:00
Ismail Dönmez
23cff08e56 Accepting request 137754 from home:msmeissn:branches:Base:System 
- updated certificates to revision 1.85 (bnc#783509)
  * new "Actalis Authentication Root CA"
  * new "Trustis FPS Root CA"
  * new "StartCom Certification Authority"
  * new "StartCom Certification Authority G2"
  * new "Buypass Class 2 Root CA"
  * new "Buypass Class 3 Root CA"
  * updated: "Sonera Class2 CA": remove code-signing
  * updated: "thawte Primary Root CA": added code-signing
  * updated: "Trustis_FPS_Root_CA.pem": added code-signing
  * updated: VeriSign Class 3 Public Primary Certification Authority - G5":
    added code-signing, email-protection

OBS-URL: https://build.opensuse.org/request/show/137754
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=30
 2012-10-10 19:34:14 +00:00
Stephan Kulow
f1c70cf613 Accepting request 116347 from Base:System 
- update certificates to revision 1.83 (bnc#760503)
  * new: EC_ACC.pem
  * new: Hellenic_Academic_and_Research_Institutions_RootCA_2011.pem
  * new: Security_Communication_RootCA2.pem
  * removed: TC_TrustCenter_Germany_Class_2_CA.pem
  * removed: TC_TrustCenter_Germany_Class_3_CA.pem
  * removed: Verisign_Class_1_Public_Primary_Certification_Authority.1.pem
  * removed: Verisign_Class_2_Public_Primary_Certification_Authority.pem
  * removed: Verisign_Class_4_Public_Primary_Certification_Authority_G2.pem
- license change to MPL-2.0

OBS-URL: https://build.opensuse.org/request/show/116347
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=15
 2012-05-08 10:09:14 +00:00
Ludwig Nussel
3cb5d294c4 add bug nr 
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=28
 2012-05-03 12:44:32 +00:00
Ludwig Nussel
b9cc952398 - update certificates to revision 1.83 
* new: EC_ACC.pem
  * new: Hellenic_Academic_and_Research_Institutions_RootCA_2011.pem
  * new: Security_Communication_RootCA2.pem
  * removed: TC_TrustCenter_Germany_Class_2_CA.pem
  * removed: TC_TrustCenter_Germany_Class_3_CA.pem
  * removed: Verisign_Class_1_Public_Primary_Certification_Authority.1.pem
  * removed: Verisign_Class_2_Public_Primary_Certification_Authority.pem
  * removed: Verisign_Class_4_Public_Primary_Certification_Authority_G2.pem
- license change to MPL-2.0

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=27
 2012-05-03 12:41:21 +00:00
Stephan Kulow
919be49ce8 Accepting request 102600 from Base:System 
OBS-URL: https://build.opensuse.org/request/show/102600
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=14
 2012-02-08 14:34:34 +00:00
Stephan Kulow
0b4c262309 Accepting request 100075 from Base:System 
patching license field to be in spdx.org format, for legal team to review before forward (forwarded request 99920 from dec16180)

OBS-URL: https://build.opensuse.org/request/show/100075
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=13
 2012-01-17 10:32:08 +00:00
Marcus Meissner
d16b31a543 Accepting request 100131 from home:babelworx:ldig:branches:Base:System 
license update: MPL-1.1 or GPL-2.0+ or LGPL-2.1+
SPDX format and correct GPL and LGPL tags to include or later

OBS-URL: https://build.opensuse.org/request/show/100131
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=24
 2012-01-13 10:52:03 +00:00
Stephan Kulow
1ac7331e8e Accepting request 99920 from devel:openSUSE:Factory:for-legal-lhf 
patching license field to be in spdx.org format, for legal team to review before forward

OBS-URL: https://build.opensuse.org/request/show/99920
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=23
 2012-01-12 15:54:25 +00:00
Sascha Peilicke
546819cfbd Accepting request 83851 from Base:System 
OBS-URL: https://build.opensuse.org/request/show/83851
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=11
 2011-09-21 14:56:33 +00:00
Stephan Kulow
3c5a4549f9 Accepting request 83054 from home:jengelh:bl-c 
- Remove redundant tags/sections from specfile

OBS-URL: https://build.opensuse.org/request/show/83054
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=21
 2011-09-20 07:45:49 +00:00
Sascha Peilicke
9f2ca1e2ba Accepting request 80334 from Base:System 
Copy from Base:System/ca-certificates-mozilla based on submit request 80334 from user coolo

OBS-URL: https://build.opensuse.org/request/show/80334
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=10
 2011-08-31 11:23:34 +00:00
OBS User buildservice-autocommit
3ceecfcd8d Updating link to change in openSUSE:Factory/ca-certificates-mozilla revision 10.0 
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=2d6dd34175232ff2bf98e06056d5957f
 2011-08-31 11:23:34 +00:00
OBS User $user
0c29524340 Accepting request 80334 from Base:System 
checked in (request 80334)

OBS-URL: https://build.opensuse.org/request/show/80334
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=20
 2011-08-31 11:23:33 +00:00
Ludwig Nussel
8d3c5b7cf4 add hg link 
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=19
 2011-08-31 09:27:50 +00:00
Ludwig Nussel
6873916336 - update certificates to revision 1.76 
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=18
 2011-08-31 09:03:51 +00:00
Ludwig Nussel
6b10929d9f - remove DigiNotar CA (bnc#714931) 
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=17
 2011-08-30 13:02:19 +00:00
Ludwig Nussel
8305587e2b fix 
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=16
 2011-08-30 08:05:55 +00:00
Ludwig Nussel
3fb74b8ca7 - update certificates to revision 1.75 
* new: Go_Daddy_Root_Certificate_Authority_G2.pem
  * new: Starfield_Root_Certificate_Authority_G2.pem
  * new: Starfield_Services_Root_Certificate_Authority_G2.pem
  * new: AffirmTrust_Commercial.pem
  * new: AffirmTrust_Networking.pem
  * new: AffirmTrust_Premium.pem
  * new: AffirmTrust_Premium_ECC.pem
  * new: Certum_Trusted_Network_CA.pem
  * new: Certinomis_Autorit_Racine.pem
  * new: Root_CA_Generalitat_Valenciana.pem
  * new: A_Trust_nQual_03.pem
  * new: TWCA_Root_Certification_Authority.pem

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=15
 2011-08-30 07:54:41 +00:00
Berthold Gunreben
26ae748db8 Autobuild autoformatter for 59514 
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=8
 2011-02-01 14:51:32 +00:00
Berthold Gunreben
4380ab230e Accepting request 59514 from Base:System 
Accepted submit request 59514 from user lnussel

OBS-URL: https://build.opensuse.org/request/show/59514
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=7
 2011-02-01 14:51:20 +00:00
Ludwig Nussel
100a07b249 - update certificates to revision 1.70 
* new: AddTrust_Qualified_Certificates_Root.pem
  * new: Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem
  * new: Chambers_of_Commerce_Root_2008.pem
  * new: Global_Chambersign_Root_2008.pem
  * new: Izenpe_com.pem
  * new: TC_TrustCenter_Universal_CA_III.pem

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=13
 2011-01-31 13:45:35 +00:00
OBS User autobuild
4e859949c1 Accepting request 49243 from Base:System 
Copy from Base:System/ca-certificates-mozilla based on submit request 49243 from user lnussel

OBS-URL: https://build.opensuse.org/request/show/49243
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=6
 2010-09-27 15:33:59 +00:00
OBS User buildservice-autocommit
71d9949f43 Updating link to change in openSUSE:Factory/ca-certificates-mozilla revision 6.0 
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=db06ff39ebfe3a5b9a84ec1d4f03b0d9
 2010-09-27 15:33:59 +00:00
Ludwig Nussel
8f2122c6ec increase version number 
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=11
 2010-09-27 14:56:21 +00:00
Ludwig Nussel
da179d1311 - update certificates to revision 1.65 
* new: E_Guven_Kok_Elektronik_Sertifika_Hizmet_Saglayicisi.pem
  * new: GlobalSign_Root_CA_R3.pem
  * new: Microsec_e_Szigno_Root_CA_2009.pem
  * new: Verisign_Class_1_Public_Primary_Certification_Authority.1.pem
  * new: Verisign_Class_3_Public_Primary_Certification_Authority.1.pem

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=10
 2010-09-27 14:44:00 +00:00
OBS User autobuild
7b5c59c0c2 Accepting request 43441 from Base:System 
Copy from Base:System/ca-certificates-mozilla based on submit request 43441 from user coolo

OBS-URL: https://build.opensuse.org/request/show/43441
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=5
 2010-07-20 18:34:41 +00:00
OBS User buildservice-autocommit
70a93262a4 Updating link to change in openSUSE:Factory/ca-certificates-mozilla revision 5.0 
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=92f8f3c12d793eb00823f29277b22d3c
 2010-07-20 18:34:41 +00:00
OBS User autobuild
a9aca44740 Accepting request 43441 from Base:System 
checked in (request 43441)

OBS-URL: https://build.opensuse.org/request/show/43441
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=8
 2010-07-20 18:34:40 +00:00
Ludwig Nussel
2337cfec0c - update certificates to revision 1.64 
* removed "RSA Security 1024 V3" certificate

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=7
 2010-05-21 12:31:25 +00:00
OBS User autobuild
a3c8de918d Accepting request 37362 from Base:System 
Copy from Base:System/ca-certificates-mozilla based on submit request 37362 from user lnussel

OBS-URL: https://build.opensuse.org/request/show/37362
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=2
 2010-04-14 13:44:46 +00:00
OBS User autobuild
f92238c166 Accepting request 36567 from Base:System 
Copy from Base:System/ca-certificates-mozilla based on submit request 36567 from user lnussel

OBS-URL: https://build.opensuse.org/request/show/36567
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ca-certificates-mozilla?expand=0&rev=1
 2010-04-01 16:22:04 +00:00
4 changed files with 816 additions and 321 deletions
Show Stats Expand all files Collapse all files

26
ca-certificates-mozilla.changes
View File

@ -1,3 +1,17 @@
-------------------------------------------------------------------
Sun Dec 15 21:07:58 UTC 2024 - Dirk Müller <dmueller@suse.com>
- Updated to 2.72 state of Mozilla SSL root CAs (bsc#1234798)
Removed:
- SecureSign RootCA11
- Security Communication RootCA3
Added:
- TWCA CYBER Root CA
- TWCA Global Root CA G2
- SecureSign Root CA12
- SecureSign Root CA14
- SecureSign Root CA15
-------------------------------------------------------------------
Mon Jul 8 15:19:02 UTC 2024 - Marcus Meissner <meissner@suse.com>
@ -158,7 +172,7 @@ Mon May 2 11:35:33 UTC 2022 - Marcus Meissner <meissner@suse.com>
- GTS Root R2
- GTS Root R3
- GTS Root R4
-------------------------------------------------------------------
Sat Oct 2 07:33:52 UTC 2021 - Marcus Meissner <meissner@suse.com>
@ -203,7 +217,7 @@ Mon Jul 5 12:16:33 UTC 2021 - Marcus Meissner <meissner@suse.com>
-------------------------------------------------------------------
Sun Jul 4 09:14:00 UTC 2021 - Dirk Müller <dmueller@suse.com>
- fix mozila typo in installed files
- fix mozila typo in installed files
-------------------------------------------------------------------
Tue Feb 9 13:11:37 UTC 2021 - Marcus Meissner <meissner@suse.com>
@ -479,7 +493,7 @@ Tue Jan 24 12:46:29 UTC 2017 - meissner@suse.com
emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
is able to do so.
-------------------------------------------------------------------
@ -902,7 +916,7 @@ Wed Sep 30 13:17:45 UTC 2009 - lnussel@suse.de
Tue Dec 2 11:29:03 CET 2008 - cfarrell@suse.de
- Add openssl-certs.COPYING to fix bnc#441356
-------------------------------------------------------------------
Thu Oct 9 17:49:57 CEST 2008 - lnussel@suse.de
@ -912,6 +926,6 @@ Thu Oct 9 17:49:57 CEST 2008 - lnussel@suse.de
-------------------------------------------------------------------
Wed Jul 9 15:15:38 CEST 2008 - mkoenig@suse.de
- split out the CA root certificates from the openssl certs
subpackage into a package of its own.
- split out the CA root certificates from the openssl certs
subpackage into a package of its own.

2
ca-certificates-mozilla.spec
View File

@ -37,7 +37,7 @@
Name: ca-certificates-mozilla
# Version number is NSS_BUILTINS_LIBRARY_VERSION in this file:
# http://hg.mozilla.org/projects/nss/file/default/lib/ckfw/builtins/nssckbi.h
Version: 2.68
Version: 2.72
Release: 0
Summary: CA certificates for OpenSSL
License: MPL-2.0

1105
certdata.txt
View File

File diff suppressed because it is too large Load Diff

4
nssckbi.h
View File

@ -46,8 +46,8 @@
* It's recommend to switch back to 0 after having reached version 98/99.
*/
#define NSS_BUILTINS_LIBRARY_VERSION_MAJOR 2
#define NSS_BUILTINS_LIBRARY_VERSION_MINOR 68
#define NSS_BUILTINS_LIBRARY_VERSION "2.68"
#define NSS_BUILTINS_LIBRARY_VERSION_MINOR 72
#define NSS_BUILTINS_LIBRARY_VERSION "2.72"
/* These version numbers detail the semantic changes to the ckfw engine. */
#define NSS_BUILTINS_HARDWARE_VERSION_MAJOR 1