diff options
| author | Michael Shuler <michael@pbandjelly.org> | 2020-06-11 08:50:14 -0500 |
|---|---|---|
| committer | Michael Shuler <michael@pbandjelly.org> | 2020-06-11 08:50:14 -0500 |
| commit | 679daf6e9bf6fcdcb574b8029297d24836fafde0 (patch) | |
| tree | 25ee55947c400082d22354ff295fa6064845c0df | |
| parent | 55f449b221ce215f7037507822cbd4f4b67af7b4 (diff) | |
| download | ca-certificates-679daf6e9bf6fcdcb574b8029297d24836fafde0.tar.gz | |
Revert "Set release 20200601; add Symantec CAs to blacklist"
This reverts commit 1efe81a680eedb94111716c8825290a0cde509af.
| -rw-r--r-- | debian/changelog | 25 | ||||
| -rw-r--r-- | mozilla/blacklist.txt | 23 |
2 files changed, 21 insertions, 27 deletions
diff --git a/debian/changelog b/debian/changelog index 3d28026..603f842 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,9 +1,26 @@ -ca-certificates (20200602) UNRELEASED; urgency=medium - +ca-certificates (20200611) unstable; urgency=medium + + * mozilla/blacklist: + Revert Symantec CA blacklist (#911289). Closes: #962596 + The following root certificates were added back (+): + + "GeoTrust Global CA" + + "GeoTrust Primary Certification Authority" + + "GeoTrust Primary Certification Authority - G2" + + "GeoTrust Primary Certification Authority - G3" + + "GeoTrust Universal CA" + + "thawte Primary Root CA" + + "thawte Primary Root CA - G2" + + "thawte Primary Root CA - G3" + + "VeriSign Class 3 Public Primary Certification Authority - G4" + + "VeriSign Class 3 Public Primary Certification Authority - G5" + + "VeriSign Universal Root Certification Authority" + + [ Gianfranco Costamagna ] * debian/{rules,control}: - - grab Ubuntu patch from Matthias Klose to use Python3 during build (Closes: #942915) + Merge Ubuntu patch from Matthias Klose to use Python3 during build. + Closes: #942915 - -- Gianfranco Costamagna <locutusofborg@debian.org> Wed, 03 Jun 2020 13:21:32 +0200 + -- Michael Shuler <michael@pbandjelly.org> Thu, 11 Jun 2020 08:38:00 -0500 ca-certificates (20200601) unstable; urgency=medium diff --git a/mozilla/blacklist.txt b/mozilla/blacklist.txt index ec81988..4318bb5 100644 --- a/mozilla/blacklist.txt +++ b/mozilla/blacklist.txt @@ -11,29 +11,6 @@ "TURKTRUST Mis-issued Intermediate CA 1" "TURKTRUST Mis-issued Intermediate CA 2" -# Distrusted Symantec Root CAs: -"GeoTrust Global CA" -"GeoTrust Primary Certification Authority" -"GeoTrust Primary Certification Authority - G2" -"GeoTrust Primary Certification Authority - G3" -"GeoTrust Universal CA" -"Thawte Premium Server CA" -"thawte Primary Root CA" -"thawte Primary Root CA - G2" -"thawte Primary Root CA - G3" -"Symantec Class 1 Public Primary Certification Authority - G4" -"Symantec Class 1 Public Primary Certification Authority - G6" -"Symantec Class 2 Public Primary Certification Authority - G4" -"Symantec Class 2 Public Primary Certification Authority - G6" -"Symantec Class 3 Public Primary Certification Authority - G4" -"Symantec Class 3 Public Primary Certification Authority - G6" -"VeriSign Class 1 Public Primary Certification Authority - G3" -"VeriSign Class 2 Public Primary Certification Authority - G3" -"VeriSign Class 3 Public Primary Certification Authority - G3" -"VeriSign Class 3 Public Primary Certification Authority - G4" -"VeriSign Class 3 Public Primary Certification Authority - G5" -"VeriSign Universal Root Certification Authority" - # Blacklist expired certificate (Not After : May 30 10:48:38 2020 GMT) # See: https://bugs.debian.org/961907 "AddTrust External Root" |