Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Update Mozilla CA bundle to 2.28 | Michael Shuler | 2018-12-20 | 2 | -745/+290 |
| | |||||
* | Update mozilla/blacklist.txt | Michael Shuler | 2018-03-29 | 1 | -20/+10 |
| | | | | | - remove certificates no longer in certdata.txt - explicitly ignore distrusted certificates to prevent build errors | ||||
* | Update Mozilla CA bundle to 2.22 | Michael Shuler | 2018-03-29 | 2 | -5699/+1286 |
| | |||||
* | Update Mozilla CA bundle to 2.16 | Michael Shuler | 2017-08-14 | 2 | -1898/+96 |
| | |||||
* | Remove email-only roots from mozilla trust store | Jacob Hoffman-Andrews | 2017-07-18 | 1 | -2/+0 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | These roots are trusted in the Mozilla program only for S/MIME, so should not be included in ca-certificates, which most applications use to validate TLS certificates. Per https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=721976, the only MUAs that depend on or suggest ca-certificates are Mutt and Sylpheed. Sylpheed doesn't use ca-certificates for S/MIME. Mutt does, but I think it is still safe to remove thes because: (a) S/MIME is relatively uncommon, and (b) The CAs that have both TLS and S/MIME bits will continue to work, and (c) Nearly all of the 12 removed email-only CAs have ceased operation of their email certificate services Verisign Class 1 Public Primary Certification Authority - G3 Verisign Class 2 Public Primary Certification Authority - G3 UTN USERFirst Email Root CA SwissSign Platinum CA - G2 AC Raiz Certicamara S.A. TC TrustCenter Class 3 CA II ComSign CA S-TRUST Universal Root CA Symantec Class 1 Public Primary Certification Authority - G6 Symantec Class 2 Public Primary Certification Authority - G6 Symantec Class 1 Public Primary Certification Authority - G4 Symantec Class 2 Public Primary Certification Authority - G4 | ||||
* | Update Mozilla CA bundle to 2.14 | Michael Shuler | 2017-07-17 | 2 | -677/+499 |
| | |||||
* | merge in NMU for #858539debian/20161130+nmu1 | Antoine Beaupré | 2017-07-06 | 1 | -0/+16 |
| | |||||
* | Update Mozilla CA bundle to 2.11 | Michael Shuler | 2017-01-23 | 2 | -1821/+1381 |
| | |||||
* | Update Mozilla CA bundle to 2.9 | Michael Shuler | 2016-11-02 | 2 | -122/+1184 |
| | |||||
* | Update Mozilla CA bundle to 2.7 | Michael Shuler | 2016-08-16 | 2 | -1437/+318 |
| | |||||
* | Drop old CK*_NETSCAPE trust flag checks | Michael Shuler | 2015-12-16 | 1 | -7/+4 |
| | |||||
* | Update mozilla bundle to 2.6 (NSS 3.21) | Michael Shuler | 2015-12-14 | 2 | -1349/+384 |
| | |||||
* | Add Python 3 support to ca-certificates. | Michael Shuler | 2015-11-24 | 1 | -16/+41 |
| | | | | Thanks to Andrew Wilcox and Richard Ipsum for the patch! Closes: #789753 | ||||
* | Revert "Add Python 3 support to ca-certificates." | Michael Shuler | 2015-10-22 | 1 | -19/+13 |
| | | | | | | | This reverts commit a2fa9a13815894500e1e2d9ca3d52bfdd4f75b5a. Conflicts: debian/changelog | ||||
* | Add Python 3 support to ca-certificates. | Michael Shuler | 2015-10-22 | 1 | -13/+19 |
| | | | | Thanks to Andrew Wilcox for the patch! Closes: #789753 | ||||
* | Update Mozilla CA bundle to version 2.5 (DEV branch) | Michael Shuler | 2015-07-09 | 2 | -762/+488 |
| | |||||
* | Update Mozilla CA bundle to 2.4 and release 20150426debian/20150426 | Michael Shuler | 2015-04-26 | 2 | -149/+1419 |
| | |||||
* | Update Mozilla certificate authority bundle to version 2.2. | Michael Shuler | 2014-11-19 | 2 | -727/+896 |
| | |||||
* | Update mozilla/certdata.txt to version 2.1 | Michael Shuler | 2014-08-07 | 2 | -2/+279 |
| | | | | They take them out, put them back, take them out again, put them back.. | ||||
* | Update mozilla/certdata.txt to version 2.0 | Michael Shuler | 2014-07-07 | 2 | -866/+1502 |
| | |||||
* | Update mozilla/certdata.txt to version 1.98 | Michael Shuler | 2014-04-12 | 2 | -184/+2 |
| | | | | | This update only removes an untrusted cert for "Bogus kuix.de", which was used for testing by mozilla. | ||||
* | Update mozilla/certdata.txt to version 1.97+revert_of_936304 | Michael Shuler | 2014-03-25 | 1 | -4/+857 |
| | |||||
* | Fix certdata2pem.py for multiple CAs using the same CKA_LABEL | Michael Shuler | 2014-02-23 | 1 | -3/+7 |
| | |||||
* | Update mozilla/certdata.txt to 1.97 (TODO: list/NEWS) | Michael Shuler | 2014-02-07 | 2 | -1027/+625 |
| | |||||
* | Update mozilla/certdata.txt to 1.96 | Michael Shuler | 2013-12-09 | 2 | -2/+2354 |
| | |||||
* | Add updated nssckbi.h for version 1.95.. | Michael Shuler | 2013-11-25 | 1 | -2/+2 |
| | |||||
* | Update mozilla/certdata.txt to version 1.95 | Michael Shuler | 2013-11-15 | 1 | -133/+534 |
| | | | | | | | | Certificates added (+) and removed (-): + "SG TRUST SERVICES RACINE" + "ACCVRAIZ1" + "TWCA Global Root CA" - "Wells Fargo Root CA" | ||||
* | Move README.source from mozilla/ to debian/, add dev branch | Michael Shuler | 2013-08-31 | 1 | -17/+0 |
| | |||||
* | Update mozilla/certdata.txt to NSS version 1.94 | Michael Shuler | 2013-08-31 | 3 | -155/+1665 |
| | | | | | | | - Include mozilla/nssckbi.h which contains the version number, since it is no longer contained within certdata.txt - Include mozilla/README.source to document certdata.txt / nssckbi.h locations upstream | ||||
* | Remove elderly mozilla/certdata2pem.rb | Michael Shuler | 2013-05-15 | 1 | -36/+0 |
| | |||||
* | Update mozilla/certdata.txt to version 1.87 Closes: #697366 | Michael Shuler | 2013-01-09 | 1 | -166/+69 |
| | | | | - removes CA: "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı" | ||||
* | Revert "Blacklist TÜRKTRUST CA." | Thijs Kinkhorst | 2013-01-04 | 1 | -4/+0 |
| | | | | | | | At this point it's unsure if this drastic measure is warranted. The major browsers are not revoking the TÜRKTRUST roots. This reverts commit 96c279e8e121c332a0f00b0cbae00a3fa814e46b. | ||||
* | Blacklist TÜRKTRUST CA. | Thijs Kinkhorst | 2013-01-03 | 1 | -0/+4 |
| | |||||
* | Update mozilla/certdata.txt to version 1.86 | Michael Shuler | 2012-11-03 | 1 | -1/+459 |
| | | | | | | | Certificates added (+) (none removed): + "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı" + "T-TeleSec GlobalRoot Class 3" + "EE Certification Centre Root CA" | ||||
* | Update mozilla/certdata.txt to version 1.85 | Michael Shuler | 2012-07-10 | 1 | -87/+1066 |
| | | | | | | | | | | Certificates added (+) (none removed): + "Actalis Authentication Root CA" + "Trustis FPS Root CA" + "StartCom Certification Authority" + "StartCom Certification Authority G2" + "Buypass Class 2 Root CA" + "Buypass Class 3 Root CA" | ||||
* | Update mozilla/certdata.txt to version 1.83 | Michael Shuler | 2012-06-21 | 1 | -36/+4 |
| | | | | | | Mozilla Public License updated to v2.0 (No certificates added/removed.) Update debian/copyright to reflect MPL v2.0 | ||||
* | Update mozilla/certdata.txt to version 1.82 | Michael Shuler | 2012-03-04 | 1 | -1/+63 |
| | | | | No certificates added/removed. | ||||
* | Remove tab, replace with spaces.. | Michael Shuler | 2012-02-12 | 1 | -1/+1 |
| | |||||
* | Update mozilla/certdata.txt to version 1.81 | Michael Shuler | 2012-02-12 | 1 | -609/+442 |
| | | | | | | | | | | | Certificates added (+) and removed (-): + "Security Communication RootCA2" + "EC-ACC" + "Hellenic Academic and Research Institutions RootCA 2011" - "Verisign Class 2 Public Primary Certification Authority" - "Verisign Class 4 Public Primary Certification Authority - G2" - "TC TrustCenter, Germany, Class 2 CA" - "TC TrustCenter, Germany, Class 3 CA" | ||||
* | Update mozilla/certdata2pem.py in a nicer way | Michael Shuler | 2011-12-11 | 1 | -8/+7 |
| | |||||
* | Update mozilla/certdata2pem.py to parse NETSCAPE or NSS data | Michael Shuler | 2011-12-11 | 1 | -4/+8 |
| | |||||
* | Update mozilla/certdata.txt to primary Mozilla repository version 1.80 | Michael Shuler | 2011-12-11 | 1 | -679/+960 |
| | |||||
* | Remove untrusted certificates from mozilla/blacklist.txt | Michael Shuler | 2011-11-06 | 1 | -20/+0 |
| | |||||
* | Blacklist "Bogus *" and "Explicitly Distrust DigiNotar *" certificates | Michael Shuler | 2011-10-28 | 1 | -0/+20 |
| | |||||
* | certdata.txt 1.64.2.13 from NSS branch, instead of 1.79 from trunk | Michael Shuler | 2011-10-23 | 1 | -679/+679 |
| | |||||
* | add myself as maintainer, along with 3 uploaders | Michael Shuler | 2011-10-23 | 1 | -3092/+4755 |
| | | | | | | - add 3.0 (native) source format - add Vcs-* fields - update mozilla/certdata.txt (TODO: list rms/adds) | ||||
* | Import Debian version 20110502+nmu1debian/20110502+nmu1 | Michael Shuler | 2011-09-17 | 1 | -0/+2 |
| | |||||
* | Import Debian version 20110421debian/20110421 | Michael Shuler | 2011-09-17 | 2 | -2171/+6180 |
| | |||||
* | Import Debian version 20090708debian/20090708 | Michael Shuler | 2011-09-17 | 1 | -1/+2 |
| | |||||
* | Import Debian version 20090701debian/20090701 | Michael Shuler | 2011-09-17 | 1 | -3/+0 |
| |