summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Blacklist expired root certificate, "AddTrust External CA Root"Michael Shuler2020-06-012-1/+9
|
* Update d/changelogMichael Shuler2020-06-011-1/+2
|
* Standards-Version: 4.5.0.2; debhelper-compat (= 13)Michael Shuler2020-06-011-2/+2
|
* Update d/changelogMichael Shuler2020-06-011-0/+4
|
* Set Standards-Version: 4.5.0; Replace tabs in copywriteMichael Shuler2020-06-012-7/+7
|
* Set release 20200601; add Symantec CAs to blacklistMichael Shuler2020-06-012-3/+39
|
* Update Mozilla CA bundle to 2.40Michael Shuler2020-01-183-801/+1203
|
* Set release to 20190122Michael Shuler2019-01-221-2/+2
|
* Update Mozilla CA bundle to 2.30Michael Shuler2019-01-103-890/+1053
|
* Update to standards 4.3.0.1 and compat 12debian/20190110Michael Shuler2019-01-103-6/+6
|
* Depend on openssl >= 1.1.1Michael Shuler2018-12-212-6/+8
|
* Add Closes: #911303Michael Shuler2018-12-201-0/+2
|
* Standards-Version: 4.2.1 & removed d/changelog whitespaceMichael Shuler2018-12-202-2/+3
|
* Release 20181220Michael Shuler2018-12-201-2/+2
|
* Remove orphan symlinks found in /etc/ssl/certsMichael Shuler2018-12-202-1/+13
| | | | | | This should prevent `openssl rehash` from exiting with an error on a symlink with nonexistent target, since the behavior changed from c_rehash. See #895482, #895473.
* Revert "Remove all orphan symlinks found in /etc/ssl/certs"Michael Shuler2018-12-202-11/+0
| | | | | | | This reverts commit 1ef0fd15cc77c854e79a4f599d5228a67548ab87. While this worked great to fix the error, it also broke the counting on upgrade for how many certificates were removed.. (-_-)
* Remove all orphan symlinks found in /etc/ssl/certsMichael Shuler2018-12-202-0/+11
| | | | | | This should prevent `openssl rehash` from exiting with an error on a symlink with nonexistent target, since the behavior changed from c_rehash. See #895482, #895473.
* Fix permissions on /usr/local/share/ca-certificatesMichael Shuler2018-12-202-4/+7
| | | | Follow symlinks to stat the correct permissions and ownership - 916833
* Update Mozilla CA bundle to 2.28Michael Shuler2018-12-203-745/+308
|
* Set 20180409 to 'unstable' for releasedebian/20180409Michael Shuler2018-04-091-2/+2
|
* Drop -compat flag on `openssl rehash`Michael Shuler2018-04-092-3/+3
|
* Checked for policy 4.1.4.Thijs Kinkhorst2018-04-082-2/+2
| | | | | | We create a directory under /usr/local, but ensure it has the same permissions as /usr/local itself. I believe this satisfies the new policy requirement about the staff group.
* Add Closes: #895075Michael Shuler2018-04-071-1/+1
|
* Update openssl dependency to >= 1.1.0Michael Shuler2018-04-055-6/+8
| | | | Switch to `openssl rehash` and drop usage of `c_rehash` script
* Update mozilla/blacklist.txtMichael Shuler2018-03-292-20/+13
| | | | | - remove certificates no longer in certdata.txt - explicitly ignore distrusted certificates to prevent build errors
* Add debian/.debhelper to .gitignoreMichael Shuler2018-03-291-0/+1
|
* Set to debhelper >= 11Michael Shuler2018-03-292-2/+2
|
* Set to debhelper compat 11Michael Shuler2018-03-292-1/+3
|
* Fix lintian file-contains-trailing-whitespaceMichael Shuler2018-03-291-22/+24
|
* Fix lintian insecure-copyright-format-uri with https URLMichael Shuler2018-03-292-1/+3
|
* Update d/changelog with CA adds/removesMichael Shuler2018-03-291-2/+31
|
* Update Mozilla CA bundle to 2.22Michael Shuler2018-03-293-5715/+1292
|
* Remove Christian Perrier from d/controlMichael Shuler2018-03-291-1/+0
|
* Checked for policy 4.1.3, no changes.Thijs Kinkhorst2018-03-261-0/+1
|
* Remove Christian Perrier from uploaders at his request (closes: #894070).Thijs Kinkhorst2018-03-261-0/+4
|
* Checked for policy 4.1.3, no changesThijs Kinkhorst2018-01-061-1/+1
|
* Update Vcs urls for salsa migrationThijs Kinkhorst2018-01-061-2/+2
|
* Update Mozilla CA bundle to 2.16Michael Shuler2017-08-143-1898/+117
|
* Checked for policy 4.0.1debian/20170717Thijs Kinkhorst2017-08-142-2/+2
|
* Add Closes: #858064Michael Shuler2017-07-211-0/+1
|
* Update to Standards-Version: 4.0.0Michael Shuler2017-07-202-1/+2
|
* Release 20170717Michael Shuler2017-07-201-2/+2
|
* Update changelog for email-only removal #721976Michael Shuler2017-07-191-6/+12
|
* Remove email-only roots from mozilla trust storeJacob Hoffman-Andrews2017-07-181-2/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | These roots are trusted in the Mozilla program only for S/MIME, so should not be included in ca-certificates, which most applications use to validate TLS certificates. Per https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=721976, the only MUAs that depend on or suggest ca-certificates are Mutt and Sylpheed. Sylpheed doesn't use ca-certificates for S/MIME. Mutt does, but I think it is still safe to remove thes because: (a) S/MIME is relatively uncommon, and (b) The CAs that have both TLS and S/MIME bits will continue to work, and (c) Nearly all of the 12 removed email-only CAs have ceased operation of their email certificate services Verisign Class 1 Public Primary Certification Authority - G3 Verisign Class 2 Public Primary Certification Authority - G3 UTN USERFirst Email Root CA SwissSign Platinum CA - G2 AC Raiz Certicamara S.A. TC TrustCenter Class 3 CA II ComSign CA S-TRUST Universal Root CA Symantec Class 1 Public Primary Certification Authority - G6 Symantec Class 2 Public Primary Certification Authority - G6 Symantec Class 1 Public Primary Certification Authority - G4 Symantec Class 2 Public Primary Certification Authority - G4
* Prevent postinst failure on read-only /usr/localMichael Shuler2017-07-182-2/+4
|
* Remove NEWSMichael Shuler2017-07-171-424/+0
| | | | | | | | The CA add/remove info is in the changelog for users that wish to know what certificate authorities were added or removed. The default installation of apt-listchanges results in lots of emails from users wondering why the package maintainer is emailing them or halting their automated upgrades.
* Add unstable gbp.confMichael Shuler2017-07-171-0/+2
|
* Update Mozilla CA bundle to 2.14Michael Shuler2017-07-173-679/+507
|
* merge in NMU for #858539debian/20161130+nmu1Antoine Beaupré2017-07-062-0/+24
|
* Add mozilla bundle NEWSMichael Shuler2017-01-231-0/+31
|
View Lorry Controller Status