summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMichael Shuler <michael@pbandjelly.org>2017-07-19 00:06:19 -0500
committerMichael Shuler <michael@pbandjelly.org>2017-07-19 00:06:19 -0500
commita5ae34e9bf35cf0742631742563cd93f9e4748c3 (patch)
treef8b93330ad54dd5582344e2bb5ca9647424b10f6
parent8a7d7c7baaaa66d9b62fa8290e733855b9d19289 (diff)
downloadca-certificates-a5ae34e9bf35cf0742631742563cd93f9e4748c3.tar.gz
Update changelog for email-only removal #721976
-rw-r--r--debian/changelog18
1 files changed, 12 insertions, 6 deletions
diff --git a/debian/changelog b/debian/changelog
index 59ca6dd..5d91d92 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,5 +1,9 @@
ca-certificates (20170717) UNRELEASED; urgency=medium
+ * debian/ca-certificates.postinst:
+ Prevent postinst failure on read-only /usr/local. Closes: #843722
+ * mozilla/certdata2pem.py:
+ Remove email-only roots from mozilla trust store. Closes: #721976
* mozilla/{certdata.txt,nssckbi.h}:
Update Mozilla certificate authority bundle to version 2.14.
The following certificate authorities were added (+):
@@ -10,14 +14,12 @@ ca-certificates (20170717) UNRELEASED; urgency=medium
+ "Amazon Root CA 4"
+ "D-TRUST Root CA 3 2013"
+ "LuxTrust Global Root 2"
- + "Symantec Class 1 Public Primary Certification Authority - G4"
- + "Symantec Class 1 Public Primary Certification Authority - G6"
- + "Symantec Class 2 Public Primary Certification Authority - G4"
- + "Symantec Class 2 Public Primary Certification Authority - G6"
+ "TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1"
The following certificate authorities were removed (-):
+ - "AC Raiz Certicamara S.A."
- "ApplicationCA - Japanese Government"
- "Buypass Class 2 CA 1"
+ - "ComSign CA"
- "EBG Elektronik Sertifika Hizmet Saglayicisi"
- "Equifax Secure CA"
- "Equifax Secure eBusiness CA 1"
@@ -28,13 +30,17 @@ ca-certificates (20170717) UNRELEASED; urgency=medium
- "Root CA Generalitat Valenciana"
- "RSA Security 2048 v3"
- "S-TRUST Authentication and Encryption Root CA 2005 PN"
+ - "S-TRUST Universal Root CA"
+ - "SwissSign Platinum CA - G2"
+ - "TC TrustCenter Class 3 CA II"
- "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6"
+ - "UTN USERFirst Email Root CA"
- "Verisign Class 1 Public Primary Certification Authority"
+ - "Verisign Class 1 Public Primary Certification Authority - G3"
- "Verisign Class 2 Public Primary Certification Authority - G2"
+ - "Verisign Class 2 Public Primary Certification Authority - G3"
- "Verisign Class 3 Public Primary Certification Authority"
- "WellsSecure Public Root Certificate Authority"
- * debian/ca-certificates.postinst:
- Prevent postinst failure on read-only /usr/local. Closes: #843722
-- Michael Shuler <michael@pbandjelly.org> Mon, 23 Jan 2017 16:57:18 -0600