diff options
| author | Michael Shuler <michael@pbandjelly.org> | 2020-06-01 14:34:10 -0500 |
|---|---|---|
| committer | Michael Shuler <michael@pbandjelly.org> | 2020-06-01 14:34:10 -0500 |
| commit | 9d6c5602343d2ba4c2e7dfdcad5be8f777929b81 (patch) | |
| tree | 6b3938e5e82d74c616b6393d0d10204a12588a19 | |
| parent | a0b653415926d014383c48760fd62af06e9a5d83 (diff) | |
| download | ca-certificates-9d6c5602343d2ba4c2e7dfdcad5be8f777929b81.tar.gz | |
Blacklist expired root certificate, "AddTrust External CA Root"
| -rw-r--r-- | debian/changelog | 6 | ||||
| -rw-r--r-- | mozilla/blacklist.txt | 4 |
2 files changed, 9 insertions, 1 deletions
diff --git a/debian/changelog b/debian/changelog index 3ce9cfc..df20abc 100644 --- a/debian/changelog +++ b/debian/changelog @@ -8,8 +8,11 @@ ca-certificates (20200601) unstable; urgency=medium * mozilla/{certdata.txt,nssckbi.h}: Update Mozilla certificate authority bundle to version 2.40. Closes: #956411, #955038 - * Add distrusted Symantec CA list to blacklist for explicit removal. + * mozilla/blacklist.txt + Add distrusted Symantec CA list to blacklist for explicit removal. Closes: #911289 + Blacklist expired root certificate, "AddTrust External CA Root" + Closes: #961907 The following certificate authorities were added (+): + "Certigna Root CA" + "emSign ECC Root CA - C3" @@ -25,6 +28,7 @@ ca-certificates (20200601) unstable; urgency=medium + "UCA Extended Validation Root" + "UCA Global G2 Root" The following certificate authorities were removed (-): + - "AddTrust External CA Root" - "Certinomis - Root CA" - "Certplus Class 2 Primary CA" - "Deutsche Telekom Root CA 2" diff --git a/mozilla/blacklist.txt b/mozilla/blacklist.txt index 8914d97..6873820 100644 --- a/mozilla/blacklist.txt +++ b/mozilla/blacklist.txt @@ -33,3 +33,7 @@ "VeriSign Class 3 Public Primary Certification Authority - G4" "VeriSign Class 3 Public Primary Certification Authority - G5" "VeriSign Universal Root Certification Authority" + +# Blacklist expired certificate (Not After : May 30 10:48:38 2020 GMT) +# See: https://bugs.debian.org/961907 +"AddTrust External CA Root" |