summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMichael Shuler <michael@pbandjelly.org>2012-11-18 15:26:27 -0600
committerMichael Shuler <michael@pbandjelly.org>2012-11-18 15:26:27 -0600
commitfde3640547bcceec53d61e4f91f57fa73bb93ce2 (patch)
tree70f6462ca75ea235629c00113921b711b6f58c46
parentd0a75063403e4d542d0ca09e1fa8a787761dcafd (diff)
downloadca-certificates-fde3640547bcceec53d61e4f91f57fa73bb93ce2.tar.gz
Add CKT_NSS_MUST_VERIFY_TRUST clarification note to d/changelogdebian/20121114
-rw-r--r--debian/changelog5
1 files changed, 4 insertions, 1 deletions
diff --git a/debian/changelog b/debian/changelog
index c34a3bb..d1a78f9 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -10,7 +10,7 @@ ca-certificates (20121114) unstable; urgency=low
[ Michael Shuler ]
* Add note to previous mozilla/certdata.txt changelog entry to document
- CKT_NSS_MUST_VERIFY_TRUST changes
+ CKT_NSS_MUST_VERIFY_TRUST changes.
-- Michael Shuler <michael@pbandjelly.org> Wed, 14 Nov 2012 23:58:59 -0600
@@ -20,6 +20,9 @@ ca-certificates (20121105) unstable; urgency=low
- Replace legacy "no explicit trust" flag of CKT_NSS_TRUST_UNKNOWN for
CKT_NSS_MUST_VERIFY_TRUST, instead of a mix of both flags:
https://bugzilla.mozilla.org/show_bug.cgi?id=757189
+ This upstream fix does not change the CA certificates installed in
+ ca-certificates as both flags are ignored. Only those CA certificates
+ with the CKT_NSS_TRUSTED_DELEGATOR flag in certdata.txt are installed.
Certificates added (+) (none removed):
+ "Actalis Authentication Root CA"
+ "Trustis FPS Root CA"