~ubuntu-branches/ubuntu/saucy/ca-certificates/saucy-proposed : changes

~ubuntu-branches/ubuntu/saucy/ca-certificates/saucy-proposed » Changes from revision 27

From Revision 27 to 8

Rev	Summary	Authors	Tags	Date
27	* Update ca-certificates database to 20130906 (LP: #1257265)... * Update ca-certificates database to 20130906 (LP: #1257265): - backport changes from the Ubuntu 14.04 20130906ubuntu1 package - No longer ship cacert.org certificates (LP: #1258286) - mozilla/certdata2pem.py: Work around openssl issue by shipping both versions of the same signed roots. Previously, the script would simply overwrite the first one found in the certdata.txt with the later one since they both have the same CKA_LABEL, resulting in identical filenames. (LP: #1014640, LP: #1031333)	Marc Deslauriers	20130906ubuntu0.13.10.1	10 years ago
26	[ Michael Shuler ] [ Michael Shuler ] * Install CAcert root and class3 certificates individually, no longer installing the concatenation of the two. The individual certificates are installed as cacert.org_root.crt and cacert.org_class3.crt for ease of identification. Additionally, this allows openssl maintainers to drop a problematic patch to c_rehash for handling multi-certificate files. (see #642314) Closes: #692323 * Update Vcs-* fields for lintian vcs-field-not-canonical * Update to machine-readable debian/copyright file v1.0 [ Thijs Kinkhorst ] * Drop upgrading code for upgrades from Debian Etch and earlier. * Remove obsolete debconf.org CA certificate. DebConf now uses an intermediate certificate signed by SPI. (Closes: #693405) * Remove obsolete SPI CA certiticate. * Update Standards-Version: 3.9.4 (no changes needed) * Clean up man page (LP#: 850997).	Thijs Kinkhorst	20130610	10 years ago
25	* Update mozilla/certdata.txt to version 1.87 Closes: #6973... * Update mozilla/certdata.txt to version 1.87 Closes: #697366 Certificates removed (-) (none added): - "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı" * Remove unneeded and confusing usage of interest-noawait; remove unneeded Pre-Depends on dpkg. Thanks to Guillem Jover for the help and patch. Closes: #537051	Michael Shuler	20130119	11 years ago
24	[ Don Armstrong ] [ Don Armstrong ] * Breaks ca-certificates-java (<<20121112+nmu1); partially fixing #537051. * Provide update-ca-certificates and update-ca-certificates-fresh triggers. * Call the triggers using no-await so that the configuration files from the newer version of ca-certificates-java are in places before the upgrade. Closes: #537051. [ Michael Shuler ] * Add note to previous mozilla/certdata.txt changelog entry to document CKT_NSS_MUST_VERIFY_TRUST changes.	Michael Shuler	20121114	11 years ago
23	* Update mozilla/certdata.txt to version 1.86 Closes: #6837... * Update mozilla/certdata.txt to version 1.86 Closes: #683728 Certificates added (+) (none removed): + "Actalis Authentication Root CA" + "Trustis FPS Root CA" + "StartCom Certification Authority" (renewal/rehash) + "StartCom Certification Authority G2" + "Buypass Class 2 Root CA" + "Buypass Class 3 Root CA" + "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı" + "T-TeleSec GlobalRoot Class 3" + "EE Certification Centre Root CA" * Correct piuparts package remove/purge behavior Closes: #682125 - Remove deletes of /etc/ssl{,/certs} from debian/postrm	Michael Shuler	20121105	11 years ago
22	* Add Polish translation, thanks to Michał Kułach. Closes: ... * Add Polish translation, thanks to Michał Kułach. Closes: #660002 * Add Turkish translation, thanks to Atila KOÇ. Closes: #661785 * Correct update-ca-certificates(8) alignment Closes: #666932 * Add note to update-ca-certificates(8) about .crt extension needed for CA certificates in /usr/local/share/ca-certificates Closes: #595279 * Update mozilla/certdata.txt to version 1.83 Mozilla Public License updated to v2.0 (no added/removed CAs) * Update debian/copyright to: - reflect MPL v2.0 update for mozilla/certdata.txt - specify GPL-2 instead of GPL symlink * Update debian/NEWS with added/removed certs from 20111211 and 20120212 * Update to Standards-Version: 3.9.3 (no changes needed)	Michael Shuler	20120623	11 years ago
21	* Update mozilla/certdata.txt to version 1.81 * Update mozilla/certdata.txt to version 1.81 Certificates added (+) and removed (-): + "Security Communication RootCA2" + "EC-ACC" + "Hellenic Academic and Research Institutions RootCA 2011" - "Verisign Class 2 Public Primary Certification Authority" - "Verisign Class 4 Public Primary Certification Authority - G2" - "TC TrustCenter, Germany, Class 2 CA" - "TC TrustCenter, Germany, Class 3 CA" * Add notice to README.Debian deprecating CA inclusions and refer to #647848 for Debian CA Certificate Policy discussion.	Michael Shuler	20120212	12 years ago
20	* Clarify CA audit note in package description and README.de... * Clarify CA audit note in package description and README.debian. Thanks to C.J. Adams-Collier for the patch. Closes: #594383 * Remove French Government IGC/A CA certificates. The RSA certificate is included in the Mozilla bundle and the DSA certificate is not in use. Closes: #646767 * Remove expired signet.pl CAs. Closes: #647849 * Remove expired brasil.gov.br CA. * Edit 20111025 changelog/NEWS entries to correctly list installed CAs * Use 'set -e' in body of debian/postinst * Update mozilla/certdata.txt to version 1.80 (no added/removed CAs) * Update mozilla/certdata2pem.py to parse NETSCAPE or NSS data	Michael Shuler	20111211	12 years ago
19	[ Michael Shuler ] [ Michael Shuler ] * Add 3.0 (native) source format * Add Vcs-Git/Browser fields * Add myself as new Maintainer with Uploaders Closes: #588219 * Update mozilla/certdata.txt to latest (NSS branch version 1.64.2.13) Certificates added (+) and removed (-): + "AffirmTrust Commercial" + "AffirmTrust Networking" + "AffirmTrust Premium" + "AffirmTrust Premium ECC" + "A-Trust-nQual-03" + "Bogus Global Trustee" + "Bogus GMail" + "Bogus Google" + "Bogus kuix.de" + "Bogus live.com" + "Bogus Mozilla Addons" + "Bogus Skype" + "Bogus Yahoo 1" + "Bogus Yahoo 2" + "Bogus Yahoo 3" + "Certinomis - Autorité Racine" + "Certum Trusted Network CA" + "Explicitly Distrust DigiNotar Cyber CA" + "Explicitly Distrust DigiNotar Cyber CA 2nd" + "Explicitly Distrust DigiNotar Root CA" + "Explicitly Distrust DigiNotar Services 1024 CA" + "Explicitly Distrusted DigiNotar PKIoverheid" + "Explicitly Distrusted DigiNotar PKIoverheid G2" + "Go Daddy Root Certificate Authority - G2" + "Root CA Generalitat Valenciana" + "Starfield Root Certificate Authority - G2" + "Starfield Services Root Certificate Authority - G2" + "TWCA Root Certification Authority" - "AOL Time Warner Root Certification Authority 1" - "AOL Time Warner Root Certification Authority 2" - "DigiNotar Root CA" - "Entrust.net Global Secure Personal CA" - "Entrust.net Global Secure Server CA" - "Entrust.net Secure Personal CA" - "IPS Chained CAs root" - "IPS CLASE1 root" - "IPS CLASE3 root" - "IPS CLASEA1 root" - "IPS CLASEA3 root" - "IPS Timestamping root" - "Thawte Personal Freemail CA" - "Thawte Time Stamping CA" * "Bogus " CAs above address Comodo MITM 03/11 Closes: #619587 Update CAcert-Class 3-Subroot-certificate Closes: #630232 [ Steve Langasek ] * sbin/update-ca-certificates: move the ca-certificates.crt bundle out of the way before calling c_rehash, so that symlinks don't accidentally get pointed here, breaking openssl certificate verification LP: #854927 [ Loïc Minier ] * Drop bogus c_rehash on upgrades, which caused issue when ca-certificates.crt was still in place; instead, call update-ca-certificates --fresh on upgrades to this version, and the usual update-ca-certificates otherwise Closes: #643667, #537382	Michael Shuler	20111025	12 years ago
18	* QA upload. * QA upload. * Fix pending l10n issues. Debconf translations: - German (Helge Kreutzmann). Closes: #634000 - French (Christian Perrier). Closes: #634092 - Russian (Yuri Kozlov). Closes: #635146 - Swedish (Martin Bagge / brother). Closes: #640622 - Slovak (Slavko). Closes: #641987 - Spanish; (Javier Fernández-Sanguino). Closes: #642359 - Japanese (Kenshi Muto). Closes: #644828 - Czech (Miroslav Kure). Closes: #644843 - Danish (Joe Hansen). Closes: #644854 - Italian (Luca Monducci). Closes: #645004 - Dutch; (Jeroen Schot). Closes: #645090 - Portuguese (Miguel Figueiredo). Closes: #645126 - Galician (Jorge Barreiro). Closes: #645138 - Catalan; (Jordi Mallach). Closes: #645182 - Brazilian Portuguese (Adriano Rafael Gomes). Closes: #645526 * Split Choices in debconf templates * Add build-arch and build-indep build targets * Bump debhelper compatibility level to 8 * Bump Standards to 3.9.2 (checked) * Replace "dh_clean -k" by dh_prep	Christian Perrier	20111022	12 years ago
17	* Non-maintainer upload by the Security Team. * Non-maintainer upload by the Security Team. * Blacklist "DigiNotar Root CA" (Closes: #639744)	Raphael Geissert	20110502+nmu1	12 years ago
16	* QA upload. * QA upload. * Mark the package as multi-arch:foreign. (Closes: #622323) * Use db_settitle in config script to allow translations of the dialog title; thanks to Frans Pop. (Closes: #560314)	Philipp Kern	20110502	12 years ago
15	* QA upload. * QA upload. * Package is orphaned, set maintainer to QA group * Depend on openssl 1.0.0 and force a call of c_rehash so that we have both the old and new style of symlinks. (Closes: #611102) * Remove libssl0.9.8 from enhances * Update mozilla certdata.txt file to the latest version. Removed: - ABAecom_=sub.__Am._Bankers_Assn.=_Root_CA.crt - beTRUSTed_Root_CA-Baltimore_Implementation.crt - beTRUSTed_Root_CA.crt - beTRUSTed_Root_CA_-_Entrust_Implementation.crt - beTRUSTed_Root_CA_-_RSA_Implementation.crt - Digital_Signature_Trust_Co._Global_CA_2.crt - Digital_Signature_Trust_Co._Global_CA_4.crt - Entrust.net_Global_Secure_Personal_CA.crt - Entrust.net_Global_Secure_Server_CA.crt - Entrust.net_Secure_Personal_CA.crt - GTE_CyberTrust_Root_CA.crt - IPS_Chained_CAs_root.crt - IPS_CLASE1_root.crt - IPS_CLASE3_root.crt - IPS_CLASEA1_root.crt - IPS_CLASEA3_root.crt - IPS_Servidores_root.crt - IPS_Timestamping_root.crt - RSA_Security_1024_v3.crt - StartCom_Ltd..crt - Thawte_Personal_Basic_CA.crt - Thawte_Personal_Premium_CA.crt - UTN-USER_First-Network_Applications.crt - Verisign_RSA_Secure_Server_CA.crt - Verisign_Time_Stamping_Authority_CA.crt - Visa_International_Global_Root_2.crt Added: - ACEDICOM_Root.crt - AC_Raíz_Certicámara_S.A..crt - ApplicationCA_-_Japanese_Government.crt - Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt - Buypass_Class_2_CA_1.crt - Buypass_Class_3_CA_1.crt - CA_Disig.crt - Certigna.crt - certSIGN_ROOT_CA.crt - Chambers_of_Commerce_Root_-_2008.crt - CNNIC_ROOT.crt - ComSign_CA.crt - ComSign_Secured_CA.crt - Cybertrust_Global_Root.crt - Deutsche_Telekom_Root_CA_2.crt - EBG_Elektronik_Sertifika_Hizmet_Sağlayıcısı.crt - E-Guven_Kok_Elektronik_Sertifika_Hizmet_Saglayicisi.crt - ePKI_Root_Certification_Authority.crt - GeoTrust_Primary_Certification_Authority_-_G2.crt - GeoTrust_Primary_Certification_Authority_-_G3.crt - Global_Chambersign_Root_-_2008.crt - GlobalSign_Root_CA_-_R3.crt - Hongkong_Post_Root_CA_1.crt - IGC_A.crt - Izenpe.com.crt - Juur-SK.crt - Microsec_e-Szigno_Root_CA_2009.crt - Microsec_e-Szigno_Root_CA.crt - NetLock_Arany_=Class_Gold=_Főtanúsítvány.crt - OISTE_WISeKey_Global_Root_GA_CA.crt - SecureSign_RootCA11.crt - Security_Communication_EV_RootCA1.crt - Staat_der_Nederlanden_Root_CA_-_G2.crt - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN.crt - TÜBİTAK_UEKAE_Kök_Sertifika_Hizmet_Sağlayıcısı_-_Sürüm_3.crt - TC_TrustCenter_Class_2_CA_II.crt - TC_TrustCenter_Class_3_CA_II.crt - TC_TrustCenter_Universal_CA_I.crt - TC_TrustCenter_Universal_CA_III.crt - thawte_Primary_Root_CA_-_G2.crt - thawte_Primary_Root_CA_-_G3.crt - VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.crt - VeriSign_Universal_Root_Certification_Authority.crt Changed: - Verisign_Class_1_Public_Primary_Certification_Authority.crt - Verisign_Class_3_Public_Primary_Certification_Authority.crt * Remove telesec.de/deutsche-telekom-root-ca-2.crt, now in mozilla. * String decode the mozilla certdata.txt so the filenames show up as proper UTF-8 strings.	Kurt Roeckx	20110421	13 years ago
14	* Non-maintainer upload. * Non-maintainer upload. * Fix pending l10n issues. Debconf translations: - French (Christian Perrier). Closes: #594231 - Danish (Joe Hansen). Closes: #601129 - Catalan (Jordi Mallach). Closes: #601089 - Brazilian Portuguese (Adriano Rafael Gomes). Closes: #618633	Christian Perrier	20090814+nmu3	13 years ago
13	* Non-maintainer upload. * Non-maintainer upload. * Fixes buggy shell functions included in the postinst script. (Closes: #591607)	Maximiliano Curia	20090814+nmu2	13 years ago
12	* Non-maintainer upload. * Non-maintainer upload. * Preserve user changes to the /etc/ca-certificates.conf. (Closes: #514220)	Maximiliano Curia	20090814+nmu1	13 years ago
11	Call Debconf and its db_purge as early as possible in postrm... Call Debconf and its db_purge as early as possible in postrm. (Closes: #541275)	Philipp Kern	20090814	14 years ago
10	Fix purge by checking for `/etc/ssl/certs' first. (Closes: ... Fix purge by checking for `/etc/ssl/certs' first. (Closes: #536331)	Philipp Kern	20090709	14 years ago
9	Remove /etc/ssl{,/certs} in postrm to please piuparts. (Clo... Remove /etc/ssl{,/certs} in postrm to please piuparts. (Closes: #454334)	Philipp Kern	20081127	15 years ago
8	* New cacert.org.pem joining both CACert Class 1 and Class 3... * New cacert.org.pem joining both CACert Class 1 and Class 3 certificates. This file can be used for proper certificate chaining if CACert server certificates are used. The old class3.pem and root.pem certificates are deprecated. This new file could safely serve as a replacement for both. (Closes: #494343) * This also reintroduces the old name for the CACert certificate, thus closing a long-standing bug about its rename to root.crt. (Closes: #413766)	Philipp Kern	20080809	15 years ago

Older »