thirdparty/ca-certificates
2
0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update for stretch

Browse source 
Update Mozilla certificate authority bundle to version 2.28
Fix permissions on /usr/local/share/ca-certificates when using symlinks
(#916833)
This commit is contained in:
Michael Shuler 2018-12-20 10:48:21 -06:00
parent 024d12e7f2
commit d27e356472
4 changed files with 315 additions and 749 deletions
Download patch file Download diff file Expand all files Collapse all files

8
debian/ca-certificates.postinst vendored
View file

@ -41,14 +41,14 @@ delca() {
case "$1" in
configure)
if [ ! -e /usr/local/share/ca-certificates ]; then
if mkdir -m $(stat -c %a /usr/local) /usr/local/share/ca-certificates 2>/dev/null; then
chgrp $(stat -c %g /usr/local) /usr/local/share/ca-certificates
if mkdir -m $(stat -L -c %a /usr/local) /usr/local/share/ca-certificates 2>/dev/null; then
chgrp $(stat -L -c %g /usr/local) /usr/local/share/ca-certificates
fi
# Handle upgrades and allow local admin to override:
# e.g. dpkg-statoverride --add root staff 2775 /usr/local/share/ca-certificates
elif ! dpkg-statoverride --list /usr/local/share/ca-certificates >/dev/null; then
chmod $(stat -c %a /usr/local) /usr/local/share/ca-certificates || true
chown $(stat -c %u /usr/local):$(stat -c %g /usr/local) /usr/local/share/ca-certificates || true
chmod $(stat -L -c %a /usr/local) /usr/local/share/ca-certificates || true
chown $(stat -L -c %u /usr/local):$(stat -L -c %g /usr/local) /usr/local/share/ca-certificates || true
fi
. /usr/share/debconf/confmodule

21
debian/changelog vendored
View file

@ -1,3 +1,24 @@
ca-certificates (20161130+nmu1+deb9u2) stretch; urgency=high
* debian/ca-certificates.postinst:
Fix permissions on /usr/local/share/ca-certificates when using symlinks.
Closes: #916833
* mozilla/{certdata.txt,nssckbi.h}:
Update Mozilla certificate authority bundle to version 2.28.
The following certificate authorities were added (+):
+ "GlobalSign Root CA - R6"
+ "OISTE WISeKey Global Root GC CA"
The following certificate authorities were removed (-):
- "Certplus Root CA G1"
- "Certplus Root CA G2"
- "OpenTrust Root CA G1"
- "OpenTrust Root CA G2"
- "OpenTrust Root CA G3"
- "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5"
- "Visa eCommerce Root"
-- Michael Shuler <michael@pbandjelly.org> Thu, 10 Jan 2019 19:31:31 -0600
ca-certificates (20161130+nmu1+deb9u1) stretch; urgency=medium
* debian/ca-certificates.postinst:

1029
mozilla/certdata.txt
View file

File diff suppressed because it is too large Load diff

6
mozilla/nssckbi.h
View file

@ -32,7 +32,7 @@
* - whenever possible, if older branches require a modification to the
* list, these changes should be made on the main line of development (trunk),
* and the older branches should update to the most recent list.
*
*
* - ODD minor version numbers are reserved to indicate a snapshot that has
* deviated from the main line of development, e.g. if it was necessary
* to modify the list on a stable branch.
@ -46,8 +46,8 @@
* It's recommend to switch back to 0 after having reached version 98/99.
*/
#define NSS_BUILTINS_LIBRARY_VERSION_MAJOR 2
#define NSS_BUILTINS_LIBRARY_VERSION_MINOR 22
#define NSS_BUILTINS_LIBRARY_VERSION "2.22"
#define NSS_BUILTINS_LIBRARY_VERSION_MINOR 28
#define NSS_BUILTINS_LIBRARY_VERSION "2.28"
/* These version numbers detail the semantic changes to the ckfw engine. */
#define NSS_BUILTINS_HARDWARE_VERSION_MAJOR 1