summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* Remove email-only roots from mozilla trust storeJacob Hoffman-Andrews2017-07-181-2/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | These roots are trusted in the Mozilla program only for S/MIME, so should not be included in ca-certificates, which most applications use to validate TLS certificates. Per https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=721976, the only MUAs that depend on or suggest ca-certificates are Mutt and Sylpheed. Sylpheed doesn't use ca-certificates for S/MIME. Mutt does, but I think it is still safe to remove thes because: (a) S/MIME is relatively uncommon, and (b) The CAs that have both TLS and S/MIME bits will continue to work, and (c) Nearly all of the 12 removed email-only CAs have ceased operation of their email certificate services Verisign Class 1 Public Primary Certification Authority - G3 Verisign Class 2 Public Primary Certification Authority - G3 UTN USERFirst Email Root CA SwissSign Platinum CA - G2 AC Raiz Certicamara S.A. TC TrustCenter Class 3 CA II ComSign CA S-TRUST Universal Root CA Symantec Class 1 Public Primary Certification Authority - G6 Symantec Class 2 Public Primary Certification Authority - G6 Symantec Class 1 Public Primary Certification Authority - G4 Symantec Class 2 Public Primary Certification Authority - G4
* Prevent postinst failure on read-only /usr/localMichael Shuler2017-07-182-2/+4
|
* Remove NEWSMichael Shuler2017-07-171-424/+0
| | | | | | | | The CA add/remove info is in the changelog for users that wish to know what certificate authorities were added or removed. The default installation of apt-listchanges results in lots of emails from users wondering why the package maintainer is emailing them or halting their automated upgrades.
* Add unstable gbp.confMichael Shuler2017-07-171-0/+2
|
* Update Mozilla CA bundle to 2.14Michael Shuler2017-07-173-679/+507
|
* merge in NMU for #858539debian/20161130+nmu1Antoine Beaupré2017-07-062-0/+24
|
* Add mozilla bundle NEWSMichael Shuler2017-01-231-0/+31
|
* Add mozilla bundle changelogMichael Shuler2017-01-231-0/+32
|
* Update Mozilla CA bundle to 2.11Michael Shuler2017-01-232-1821/+1381
|
* Release debian/20161130debian/20161130Michael Shuler2016-11-301-2/+2
|
* Update to compat level 10 and debhelper (>= 10)Michael Shuler2016-11-303-3/+4
|
* Add debconf translation changelog entryMichael Shuler2016-11-301-0/+2
|
* Commit autoreordered Indonesian debconf translation fileMichael Shuler2016-11-301-1/+1
|
* Add udeb build bits to .gitignoreMichael Shuler2016-11-301-0/+3
|
* Shorten package descriptionMichael Shuler2016-11-302-5/+6
|
* Add ca-certificates udeb package #845456Michael Shuler2016-11-307-3/+29
|
* Release debian/20161102debian/20161102Michael Shuler2016-11-022-4/+4
|
* Add Indonesian debconf translation #835156Michael Shuler2016-11-022-0/+123
|
* Run update-certificates without hooks initially #825730Michael Shuler2016-11-022-3/+13
|
* Update Mozilla CA bundle to 2.9Michael Shuler2016-11-024-136/+1212
|
* Update Vcs-Git for lintian, tooMichael Shuler2016-08-162-2/+2
|
* Update Standards-Version and Vcs-Browser for lintianMichael Shuler2016-08-162-3/+5
|
* Sort adds/removes in d/changelog and d/NEWSMichael Shuler2016-08-162-20/+25
|
* Update Mozilla CA bundle to 2.7Michael Shuler2016-08-164-1437/+358
|
* Release debian/20160104debian/20160104Michael Shuler2016-01-041-2/+2
|
* Add d/changelog for dropping CK*_NETSCAPEMichael Shuler2016-01-041-0/+2
|
* Merge branch 'drop-NETSCAPE'Michael Shuler2016-01-041-7/+4
|\
| * Drop old CK*_NETSCAPE trust flag checksMichael Shuler2015-12-161-7/+4
| |
* | Fix versionMichael Shuler2016-01-041-1/+1
| |
* | Sort certificate list for reproducible builds. #808711Michael Shuler2016-01-042-1/+8
|/
* s/UNRELEASED/unstable/debian/20151214Michael Shuler2015-12-142-2/+2
|
* Add patch submitter thanksMichael Shuler2015-12-141-1/+2
|
* Update local certificates directory when calling --freshMichael Shuler2015-12-142-1/+3
|
* Update changelog/NEWS entries for 2.6 bundleMichael Shuler2015-12-142-6/+24
|
* Update mozilla bundle to 2.6 (NSS 3.21)Michael Shuler2015-12-142-1349/+384
|
* Update README.Debian to remove SPI inclusion and add Mozilla linkMichael Shuler2015-12-051-5/+2
|
* Remove SPI lintian overrideMichael Shuler2015-12-041-3/+0
|
* Fix lintian errorsMichael Shuler2015-12-042-3/+2
| | | | | - remove d/NEWS asterisks - remove SPI Makefile from copyright
* Removed SPI CA, prepped changelog/NEWS for 20151204 releaseMichael Shuler2015-12-045-62/+22
|
* Add Python 3 support to ca-certificates.Michael Shuler2015-11-242-20/+46
| | | | Thanks to Andrew Wilcox and Richard Ipsum for the patch! Closes: #789753
* Verified CA adds/removes in Mozilla bundle version 2.5Michael Shuler2015-10-221-0/+1
| | | | | | | - added "ComSign Secured CA" to removals: https://bugzilla.mozilla.org/show_bug.cgi?id=1160208 - would be nice if they would release NSS sometime soon with this version..
* Bump release back to 20151022Michael Shuler2015-10-221-2/+2
|
* Revert "Add Python 3 support to ca-certificates."Michael Shuler2015-10-222-24/+17
| | | | | | | This reverts commit a2fa9a13815894500e1e2d9ca3d52bfdd4f75b5a. Conflicts: debian/changelog
* Update d/compat to version 9 and updated Build-DependsMichael Shuler2015-10-223-5/+6
|
* Add Python 3 support to ca-certificates.Michael Shuler2015-10-222-15/+24
| | | | Thanks to Andrew Wilcox for the patch! Closes: #789753
* Update Mozilla CA bundle to version 2.5 (DEV branch)Michael Shuler2015-07-093-764/+503
|
* Handle /usr/local/share/ca-certificates permissions and ownership on upgradeMichael Shuler2015-06-032-0/+13
|
* Update Mozilla CA bundle to 2.4 and release 20150426debian/20150426Michael Shuler2015-04-264-152/+1458
|
* Correct concatenated file name in man pageMichael Shuler2015-04-132-4/+7
|
* Included Mozilla CA bundle adds/removes in changelogMichael Shuler2015-01-171-3/+11
|
View Lorry Controller Status