From 679daf6e9bf6fcdcb574b8029297d24836fafde0 Mon Sep 17 00:00:00 2001 From: Michael Shuler Date: Thu, 11 Jun 2020 08:50:14 -0500 Subject: Revert "Set release 20200601; add Symantec CAs to blacklist" This reverts commit 1efe81a680eedb94111716c8825290a0cde509af. --- debian/changelog | 25 +++++++++++++++++++++---- mozilla/blacklist.txt | 23 ----------------------- 2 files changed, 21 insertions(+), 27 deletions(-) diff --git a/debian/changelog b/debian/changelog index 3d28026..603f842 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,9 +1,26 @@ -ca-certificates (20200602) UNRELEASED; urgency=medium - +ca-certificates (20200611) unstable; urgency=medium + + * mozilla/blacklist: + Revert Symantec CA blacklist (#911289). Closes: #962596 + The following root certificates were added back (+): + + "GeoTrust Global CA" + + "GeoTrust Primary Certification Authority" + + "GeoTrust Primary Certification Authority - G2" + + "GeoTrust Primary Certification Authority - G3" + + "GeoTrust Universal CA" + + "thawte Primary Root CA" + + "thawte Primary Root CA - G2" + + "thawte Primary Root CA - G3" + + "VeriSign Class 3 Public Primary Certification Authority - G4" + + "VeriSign Class 3 Public Primary Certification Authority - G5" + + "VeriSign Universal Root Certification Authority" + + [ Gianfranco Costamagna ] * debian/{rules,control}: - - grab Ubuntu patch from Matthias Klose to use Python3 during build (Closes: #942915) + Merge Ubuntu patch from Matthias Klose to use Python3 during build. + Closes: #942915 - -- Gianfranco Costamagna Wed, 03 Jun 2020 13:21:32 +0200 + -- Michael Shuler Thu, 11 Jun 2020 08:38:00 -0500 ca-certificates (20200601) unstable; urgency=medium diff --git a/mozilla/blacklist.txt b/mozilla/blacklist.txt index ec81988..4318bb5 100644 --- a/mozilla/blacklist.txt +++ b/mozilla/blacklist.txt @@ -11,29 +11,6 @@ "TURKTRUST Mis-issued Intermediate CA 1" "TURKTRUST Mis-issued Intermediate CA 2" -# Distrusted Symantec Root CAs: -"GeoTrust Global CA" -"GeoTrust Primary Certification Authority" -"GeoTrust Primary Certification Authority - G2" -"GeoTrust Primary Certification Authority - G3" -"GeoTrust Universal CA" -"Thawte Premium Server CA" -"thawte Primary Root CA" -"thawte Primary Root CA - G2" -"thawte Primary Root CA - G3" -"Symantec Class 1 Public Primary Certification Authority - G4" -"Symantec Class 1 Public Primary Certification Authority - G6" -"Symantec Class 2 Public Primary Certification Authority - G4" -"Symantec Class 2 Public Primary Certification Authority - G6" -"Symantec Class 3 Public Primary Certification Authority - G4" -"Symantec Class 3 Public Primary Certification Authority - G6" -"VeriSign Class 1 Public Primary Certification Authority - G3" -"VeriSign Class 2 Public Primary Certification Authority - G3" -"VeriSign Class 3 Public Primary Certification Authority - G3" -"VeriSign Class 3 Public Primary Certification Authority - G4" -"VeriSign Class 3 Public Primary Certification Authority - G5" -"VeriSign Universal Root Certification Authority" - # Blacklist expired certificate (Not After : May 30 10:48:38 2020 GMT) # See: https://bugs.debian.org/961907 "AddTrust External Root" -- cgit v1.2.1