summaryrefslogtreecommitdiff
path: root/lib/ckfw
Commit message (Collapse)AuthorAgeFilesLines
* Bug 1679803 - Add SHA256 fingerprint comments to old certdata.txt entries. ↵John M. Schanck2022-02-081-181/+181
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | r=nss-reviewers,bbeurdouche The new SHA256 hashes were calculated using the script below, which reads certificates out of the builtin token and re-processing them with the current version of addbuiltin. One of the "Autoridad de Certificacion Firmaprofesional CIF A62634068" certificates had to be handled manually because of Bug 456858. ``` #!/bin/bash NSS_LIB=<path to dist/Debug/lib> WORK=/tmp/nssdb/ LIST=${WORK}/list.txt OUT=${WORK}/certdata.txt rm -rf ${WORK} mkdir -p ${WORK} modutil -force -dbdir "sql:${WORK}" -create modutil -force -dbdir "sql:${WORK}" -add "nssckbi" -libfile "${NSS_LIB}/libnssckbi.so" certutil -d "sql:${WORK}" -L -h "Builtin Object Token" | grep Builtin > ${LIST} sed -i 's/\s*\(C\?,C\?,C\?\)\s*$/;\1/' ${LIST} while IFS=";" read -r name trust do certutil -d "sql:${WORK}" -L -n "${name}" -r 1> "${WORK}/${name}.der" addbuiltin -t "${trust}" -n "${name/Builtin Object Token:/}" -i "${WORK}/${name}.der" done < ${LIST} >> ${OUT} ``` Differential Revision: https://phabricator.services.mozilla.com/D136508
* Bug 1321398 - Allow to override python for the build. r=bbeurdoucheMike Hommey2022-01-042-2/+2
| | | | Differential Revision: https://phabricator.services.mozilla.com/D134739
* Bug 1733003 - Set nssckbi version number to 2.54. r=bbeurdoucheJohn M. Schanck2021-12-131-2/+2
| | | | | | Depends on D132823 Differential Revision: https://phabricator.services.mozilla.com/D132824
* Bug 1735407 - Replace Google Trust Services LLC (GTS) R4 root certificate in ↵John M. Schanck2021-12-131-110/+108
| | | | | | | | NSS. r=KathleenWilson Depends on D132822 Differential Revision: https://phabricator.services.mozilla.com/D132823
* Bug 1735407 - Replace Google Trust Services LLC (GTS) R3 root certificate in ↵John M. Schanck2021-12-131-110/+108
| | | | | | | | NSS. r=KathleenWilson Depends on D132821 Differential Revision: https://phabricator.services.mozilla.com/D132822
* Bug 1735407 - Replace Google Trust Services LLC (GTS) R2 root certificate in ↵John M. Schanck2021-12-131-163/+161
| | | | | | | | NSS. r=KathleenWilson Depends on D132820 Differential Revision: https://phabricator.services.mozilla.com/D132821
* Bug 1735407 - Replace Google Trust Services LLC (GTS) R1 root certificate in ↵John M. Schanck2021-12-131-163/+161
| | | | | | | | NSS. r=KathleenWilson Depends on D132819 Differential Revision: https://phabricator.services.mozilla.com/D132820
* Bug 1735407 - Replace GlobalSign ECC Root CA R4 in NSS. r=KathleenWilsonJohn M. Schanck2021-12-131-111/+108
| | | | | | Depends on D132805 Differential Revision: https://phabricator.services.mozilla.com/D132819
* Bug 1733560 - Remove Expired Root Certificates from NSS - DST Root CA X3. ↵John M. Schanck2021-12-131-130/+0
| | | | | | | | r=KathleenWilson Depends on D132806 Differential Revision: https://phabricator.services.mozilla.com/D132805
* Bug 1740807 - Remove Expiring Cybertrust Global Root and GlobalSign root ↵John M. Schanck2021-12-131-266/+0
| | | | | | | | certificates from NSS. r=KathleenWilson Depends on D132761 Differential Revision: https://phabricator.services.mozilla.com/D132806
* Bug 1741930 - Add renewed Autoridad de Certificacion Firmaprofesional CIF ↵John M. Schanck2021-12-131-0/+176
| | | | | | | | A62634068 root certificate to NSS. r=KathleenWilson Depends on D132756 Differential Revision: https://phabricator.services.mozilla.com/D132761
* Bug 1740095 - Add iTrusChina ECC root certificate to NSS. r=KathleenWilsonJohn M. Schanck2021-12-131-0/+111
| | | | | | Depends on D132755 Differential Revision: https://phabricator.services.mozilla.com/D132756
* Bug 1740095 - Add iTrusChina RSA root certificate to NSS. r=KathleenWilsonJohn M. Schanck2021-12-131-0/+163
| | | | | | Depends on D132752 Differential Revision: https://phabricator.services.mozilla.com/D132755
* Bug 1738805 - Add ISRG Root X2 root certificate to NSS. r=KathleenWilsonJohn M. Schanck2021-12-131-0/+114
| | | | | | Depends on D132754 Differential Revision: https://phabricator.services.mozilla.com/D132752
* Bug 1733012 - Add Chunghwa Telecom's HiPKI Root CA - G1 root certificate to ↵John M. Schanck2021-12-131-0/+167
| | | | | | NSS. r=KathleenWilson Differential Revision: https://phabricator.services.mozilla.com/D132754
* Bug 1717716 - Set nssckbi version number to 2.52. r=rrelyeaNSS_3_71_BETA1Benjamin Beurdouche2021-09-161-2/+2
|
* Bug 1717707 - Add HARICA Client ECC Root CA 2021. r=KathleenWilsonBenjamin Beurdouche2021-09-071-0/+124
| | | | | | Depends on D124568 Differential Revision: https://phabricator.services.mozilla.com/D124569
* Bug 1717707 - Add HARICA Client RSA Root CA 2021. r=KathleenWilsonBenjamin Beurdouche2021-09-071-0/+177
| | | | | | Depends on D124567 Differential Revision: https://phabricator.services.mozilla.com/D124568
* Bug 1717707 - Add HARICA TLS ECC Root CA 2021. r=KathleenWilsonBenjamin Beurdouche2021-09-071-0/+121
| | | | | | Depends on D124566 Differential Revision: https://phabricator.services.mozilla.com/D124567
* Bug 1717707 - Add HARICA TLS RSA Root CA 2021. r=KathleenWilsonBenjamin Beurdouche2021-09-071-0/+174
| | | | | | Depends on D124565 Differential Revision: https://phabricator.services.mozilla.com/D124566
* Bug 1728394 - Add TunTrust Root CA certificate to NSS. r=KathleenWilsonBenjamin Beurdouche2021-09-071-0/+175
| | | | Differential Revision: https://phabricator.services.mozilla.com/D124565
* Bug 1715720 - Fix nssckbi version number in NSS 3.67 (was supposed to be ↵Benjamin Beurdouche2021-06-101-2/+2
| | | | | | incremented in 3.66). r=beurdouche Differential Revision: https://phabricator.services.mozilla.com/D117400
* Bug 1710716 - Remove Expired Sonera Class2 CA from NSS. r=bwilsonNSS_3_66_BETA1Benjamin Beurdouche2021-05-251-123/+0
| | | | | | Depends on D115882 Differential Revision: https://phabricator.services.mozilla.com/D115883
* Bug 1710716 - Remove Expired Root Certificates from NSS - QuoVadis Root ↵Benjamin Beurdouche2021-05-251-181/+0
| | | | | | | | Certification Authority. r=bwilson Depends on D115877 Differential Revision: https://phabricator.services.mozilla.com/D115882
* Bug 1708307 - Remove Trustis FPS Root CA from NSS. r=bwilsonBenjamin Beurdouche2021-05-251-134/+0
| | | | Differential Revision: https://phabricator.services.mozilla.com/D115877
* Bug 1707097 - Add Certum Trusted Root CA to NSS. r=bwilsonBenjamin Beurdouche2021-05-251-0/+179
| | | | | | Depends on D115890 Differential Revision: https://phabricator.services.mozilla.com/D115891
* Bug 1707097 - Add Certum EC-384 CA to NSS. r=bwilsonBenjamin Beurdouche2021-05-251-0/+125
| | | | | | Depends on D115889 Differential Revision: https://phabricator.services.mozilla.com/D115890
* Bug 1703942 - Add ANF Secure Server Root CA to NSS. r=bwilsonBenjamin Beurdouche2021-05-251-0/+183
| | | | | | Depends on D115888 Differential Revision: https://phabricator.services.mozilla.com/D115889
* Bug 1697071 - Add GLOBALTRUST 2020 root cert to NSS. r=bwilsonBenjamin Beurdouche2021-05-251-0/+164
| | | | Differential Revision: https://phabricator.services.mozilla.com/D115888
* Bug 1693217 - Increase nssckbi.h version number for March 2021 batch of root ↵Benjamin Beurdouche2021-02-231-2/+2
| | | | | | CA changes, CA list version 2.48. r=KathleenWilson Differential Revision: https://phabricator.services.mozilla.com/D105451
* Bug 1692094 - Set email distrust after to 21-03-01 for Camerfirma's ↵Benjamin Beurdouche2021-02-231-2/+8
| | | | | | 'Chambers of Commerce' and 'Global Chambersign' roots. r=KathleenWilson Differential Revision: https://phabricator.services.mozilla.com/D105435
* Bug 1618407 - Symantec root certs - Set CKA_NSS_EMAIL_DISTRUST_AFTER. r=kjacobsBenjamin Beurdouche2021-02-231-5/+20
| | | | Differential Revision: https://phabricator.services.mozilla.com/D85334
* Bug 1693173 - Add GlobalSign R45, E45, R46, and E46 root certs to NSS. ↵Benjamin Beurdouche2021-02-231-1/+557
| | | | | | | | r=KathleenWilson Depends on D105448 Differential Revision: https://phabricator.services.mozilla.com/D105457
* Bug 1683738 - Add AC RAIZ FNMT-RCM SERVIDORES SEGUROS root cert to NSS. ↵Benjamin Beurdouche2021-02-231-0/+126
| | | | | | r=KathleenWilson Differential Revision: https://phabricator.services.mozilla.com/D105448
* Bug 1686854 - Remove GeoTrust PCA-G2 and VeriSign Universal root certs from ↵Benjamin Beurdouche2021-02-231-316/+0
| | | | | | NSS. r=KathleenWilson Differential Revision: https://phabricator.services.mozilla.com/D105444
* Bug 1687822 - Turn off Websites trust bit for the “Staat der Nederlanden ↵Benjamin Beurdouche2021-02-231-1/+1
| | | | | | Root CA - G3” root cert in NSS. r=KathleenWilson Differential Revision: https://phabricator.services.mozilla.com/D105436
* Bug 1692094 - Turn off Websites Trust Bit for 'Chambers of Commerce Root - ↵Benjamin Beurdouche2021-02-231-2/+2
| | | | | | 2008' and 'Global Chambersign Root - 2008'. r=KathleenWilson Differential Revision: https://phabricator.services.mozilla.com/D105433
* Bug 1678189 - December 2020 batch of root changes, ↵Kevin Jacobs2020-12-011-2/+2
| | | | | | NSS_BUILTINS_LIBRARY_VERSION 2.46. r=bbeurdouche Differential Revision: https://phabricator.services.mozilla.com/D98268
* Bug 1678166 - Add NAVER Global Root Certification Authority root cert to ↵Kevin Jacobs2020-12-011-0/+174
| | | | | | NSS. r=bbeurdouche,KathleenWilson Differential Revision: https://phabricator.services.mozilla.com/D98196
* Bug 1670769 - Remove 10 GeoTrust, thawte, and VeriSign root certs from NSS. ↵Benjamin Beurdouche2020-12-011-1570/+0
| | | | | | r=kjacobs,KathleenWilson Differential Revision: https://phabricator.services.mozilla.com/D97956
* Bug 1678384 - Add a build flag to allow building nssckbi-testlib in m-c ↵Benjamin Beurdouche2020-11-302-1/+27
| | | | | | r=kjacobs Differential Revision: https://phabricator.services.mozilla.com/D98154
* Bug 1634584 - Set CKA_NSS_SERVER_DISTRUST_AFTER for Trustis FPS Root CA. ↵Benjamin Beurdouche2020-07-301-1/+3
| | | | | | r=kjacobs Differential Revision: https://phabricator.services.mozilla.com/D85330
* Bug 1663049 - September 2020 batch of root changes, ↵Kevin Jacobs2020-09-111-2/+2
| | | | | | NSS_BUILTINS_LIBRARY_VERSION 2.44. r=jcj Differential Revision: https://phabricator.services.mozilla.com/D89968
* Bug 1663049 - Add SecureTrust's Trustwave Global root certificates to NSS. ↵Kevin Jacobs2020-09-111-0/+443
| | | | | | r=KathleenWilson,jcj Differential Revision: https://phabricator.services.mozilla.com/D89843
* Bug 1656077 - Remove Taiwan Government Root Certification Authority root ↵Kevin Jacobs2020-09-111-168/+0
| | | | | | | | cert. r=KathleenWilson,jcj Depends on D89841 Differential Revision: https://phabricator.services.mozilla.com/D89842
* Bug 1653092 - Disable server trust bit for OISTE WISeKey Global Root GA CA ↵Kevin Jacobs2020-09-111-1/+1
| | | | | | | | root cert. r=KathleenWilson,jcj Depends on D89840 Differential Revision: https://phabricator.services.mozilla.com/D89841
* Bug 1651211 - Remove EE Certification Centre Root CA root cert. ↵Kevin Jacobs2020-09-111-154/+0
| | | | | | r=KathleenWilson,jcj Differential Revision: https://phabricator.services.mozilla.com/D89840
* Bug 1618402 - June 2020 batch of root changes, NSS_BUILTINS_LIBRARY_VERSION ↵J.C. Jones2020-06-151-2/+2
| | | | | | | | | | | | | | | | | | | 2.42 r=bbeurdouche,KathleenWilson All changes: Bug 1618402 - Remove 3 Symantec roots and disable Email trust bit for others Bug 1621151 - Disable Email trust bit for GRCA root Bug 1639987 - Remove expired Staat der Nederlanden Root CA - G2 root cert Bug 1641718 - Remove "LuxTrust Global Root 2" root cert Bug 1641716 - Add Microsoft's non-EV roots Bug 1645174 - Add Microsec's "e-Szigno Root CA 2017" root cert Bug 1645186 - Add "certSIGN Root CA G2" root cert Bug 1645199 - Remove Expired AddTrust root certs Depends on D79373 Differential Revision: https://phabricator.services.mozilla.com/D79374
* Bug 1645186 - Add certSIGN Root CA G2 root cert r=KathleenWilsonJ.C. Jones2020-06-121-0/+160
| | | | | | | | | | | | | Friendly Name: certSIGN Root CA G2 Cert Location: http://crl.certsign.ro/certsign-rootg2.crt SHA-1 Fingerprint: 26F993B4ED3D2827B0B94BA7E9151DA38D92E532 SHA-256 Fingerprint: 657CFE2FA73FAA38462571F332A2363A46FCE7020951710702CDFBB6EEDA3305 Trust Flags: Websites Test URL: https://testssl-valid-evcp.certsign.ro/ Depends on D79372 Differential Revision: https://phabricator.services.mozilla.com/D79373
* Bug 1645174 - Add e-Szigno Root CA 2017 r=KathleenWilson,kjacobsJ.C. Jones2020-06-121-0/+121
| | | | | | Depends on D79371 Differential Revision: https://phabricator.services.mozilla.com/D79372
View Lorry Controller Status