rpms/ca-certificates
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Update to CKBI 2.69_v8.0.302 from NSS 3.101

Browse Source 
Resolves: RHEL-44988
This commit is contained in:
Frantisek Krenzelok 2024-07-11 09:32:38 +02:00
parent 94fa011408
commit 645309b26d
3 changed files with 15 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
ca-certificates.spec
View File

@ -35,7 +35,7 @@ Name: ca-certificates
# to have increasing version numbers. However, the new scheme will work, # to have increasing version numbers. However, the new scheme will work,
# because all future versions will start with 2013 or larger.) # because all future versions will start with 2013 or larger.)
Version: 2024.2.68_v8.0.302 Version: 2024.2.69_v8.0.303
# for y-stream, please always use 91 <= release < 100 (91,92,93) # for y-stream, please always use 91 <= release < 100 (91,92,93)
# for z-stream release branches, please use 90 <= release < 91 (90.0, 90.1, ...) # for z-stream release branches, please use 90 <= release < 91 (90.0, 90.1, ...)
Release: 91%{?dist} Release: 91%{?dist}
@ -395,6 +395,10 @@ fi
%changelog %changelog
*Thu Jul 11 2024 Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.303-91
- Update to CKBI 2.69_v8.0.303 from NSS 3.101.1
- GLOBALTRUST 2020 root CA certificate set CKA_NSS_{SERVER|EMAIL}_DISTRUST_AFTER
*Tue Jun 25 2024 Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.68_v8.0.302-91 *Tue Jun 25 2024 Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.68_v8.0.302-91
- Update to CKBI 2.68_v8.0.302 from NSS 3.101 - Update to CKBI 2.68_v8.0.302 from NSS 3.101
- Removing: - Removing:

10
certdata.txt
View File

@ -16904,6 +16904,8 @@ CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
# Not Valid After : Sun Jun 10 00:00:00 2040 # Not Valid After : Sun Jun 10 00:00:00 2040
# Fingerprint (SHA-256): 9A:29:6A:51:82:D1:D4:51:A2:E3:7F:43:9B:74:DA:AF:A2:67:52:33:29:F9:0F:9A:0D:20:07:C3:34:E2:3C:9A # Fingerprint (SHA-256): 9A:29:6A:51:82:D1:D4:51:A2:E3:7F:43:9B:74:DA:AF:A2:67:52:33:29:F9:0F:9A:0D:20:07:C3:34:E2:3C:9A
# Fingerprint (SHA1): D0:67:C1:13:51:01:0C:AA:D0:C7:6A:65:37:31:16:26:4F:53:71:A2 # Fingerprint (SHA1): D0:67:C1:13:51:01:0C:AA:D0:C7:6A:65:37:31:16:26:4F:53:71:A2
# For Server Distrust After: Sun Jun 30 00:00:00 2024
# For Email Distrust After: Sun Jun 30 00:00:00 2024
CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
CKA_TOKEN CK_BBOOL CK_TRUE CKA_TOKEN CK_BBOOL CK_TRUE
CKA_PRIVATE CK_BBOOL CK_FALSE CKA_PRIVATE CK_BBOOL CK_FALSE
@ -17020,8 +17022,12 @@ CKA_VALUE MULTILINE_OCTAL
\155\015\277\173\327\222 \155\015\277\173\327\222
END END
CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE
CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE CKA_NSS_SERVER_DISTRUST_AFTER MULTILINE_OCTAL
CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE \062\064\060\066\063\060\060\060\060\060\060\060\132
END
CKA_NSS_EMAIL_DISTRUST_AFTER MULTILINE_OCTAL
\062\064\060\066\063\060\060\060\060\060\060\060\132
END
# Trust for "GLOBALTRUST 2020" # Trust for "GLOBALTRUST 2020"
# Issuer: CN=GLOBALTRUST 2020,O=e-commerce monitoring GmbH,C=AT # Issuer: CN=GLOBALTRUST 2020,O=e-commerce monitoring GmbH,C=AT

4
nssckbi.h
View File

@ -46,8 +46,8 @@
* It's recommend to switch back to 0 after having reached version 98/99. * It's recommend to switch back to 0 after having reached version 98/99.
*/ */
#define NSS_BUILTINS_LIBRARY_VERSION_MAJOR 2 #define NSS_BUILTINS_LIBRARY_VERSION_MAJOR 2
#define NSS_BUILTINS_LIBRARY_VERSION_MINOR 68 #define NSS_BUILTINS_LIBRARY_VERSION_MINOR 69
#define NSS_BUILTINS_LIBRARY_VERSION "2.68" #define NSS_BUILTINS_LIBRARY_VERSION "2.69"
/* These version numbers detail the semantic changes to the ckfw engine. */ /* These version numbers detail the semantic changes to the ckfw engine. */
#define NSS_BUILTINS_HARDWARE_VERSION_MAJOR 1 #define NSS_BUILTINS_HARDWARE_VERSION_MAJOR 1