rpms/ca-certificates
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Update to CKBI 2.90_v9.0.316 from NSS 3.126

Browse Source 
Resolves: RHEL-212592


Removing:
- XRamp Global CA Root
- ePKI Root Certification Authority
- certSIGN ROOT CA
- Explicitly Distrust DigiNotar Root CA
- CommScope Public Trust ECC Root-01
- CommScope Public Trust ECC Root-02
- CommScope Public Trust RSA Root-01
- CommScope Public Trust RSA Root-02
- FIRMAPROFESIONAL CA ROOT-A WEB
- SecureSign Root CA12

Adding:
- OISTE Client Root ECC G1
- OISTE Client Root RSA G1
- OISTE Server Root ECC G1
- OISTE Server Root RSA G1
- e-Szigno TLS Root CA 2023
- SecureSign Root CA16
- SECOM TLS RSA Root CA 2024
- SECOM TLS ECC Root CA 2024
- SECOM SMIME RSA Root CA 2024
- Telia EC Email Root CA v3
- Telia EC TLS Root CA v3
- Telia RSA Email Root CA v3
- Telia RSA TLS Root CA v3
- certSIGN
- Chunghwa Telecom Co., Ltd.
- XRamp Global Certification Authority
This commit is contained in:
Krenželok František 2026-08-11 13:12:09 +02:00
parent 80abd67ad7
commit 72e5e6e049
3 changed files with 4112 additions and 3213 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

36
ca-certificates.spec
View File

@ -35,10 +35,10 @@ Name: ca-certificates
# to have increasing version numbers. However, the new scheme will work,
# because all future versions will start with 2013 or larger.)
Version: 2025.2.80_v9.0.305
Version: 2026.2.90_v9.0.316
# for y-stream, please always use 91 <= release < 100 (91,92,93)
# for z-stream release branches, please use 90 <= release < 91 (90.0, 90.1, ...)
Release: 91%{?dist}
Release: 90.0%{?dist}
License: MIT AND GPL-2.0-or-later
URL: https://fedoraproject.org/wiki/CA-Certificates
@ -443,6 +443,38 @@ fi
%ghost %{catrustdir}/extracted/pem/directory-hash/ca-certificates.crt
%changelog
*Tue Aug 11 2026 Krenželok František <fkrenzel@redhat.com> - 2026.2.90_v9.0.316-90.0
- Update to CKBI 2.90_v9.0.316 from NSS 3.126
Removing:
- XRamp Global CA Root
- ePKI Root Certification Authority
- certSIGN ROOT CA
- Explicitly Distrust DigiNotar Root CA
- CommScope Public Trust ECC Root-01
- CommScope Public Trust ECC Root-02
- CommScope Public Trust RSA Root-01
- CommScope Public Trust RSA Root-02
- FIRMAPROFESIONAL CA ROOT-A WEB
- SecureSign Root CA12
Adding:
- OISTE Client Root ECC G1
- OISTE Client Root RSA G1
- OISTE Server Root ECC G1
- OISTE Server Root RSA G1
- e-Szigno TLS Root CA 2023
- SecureSign Root CA16
- SECOM TLS RSA Root CA 2024
- SECOM TLS ECC Root CA 2024
- SECOM SMIME RSA Root CA 2024
- Telia EC Email Root CA v3
- Telia EC TLS Root CA v3
- Telia RSA Email Root CA v3
- Telia RSA TLS Root CA v3
- certSIGN
- Chunghwa Telecom Co., Ltd.
- XRamp Global Certification Authority
*Fri Oct 10 2025 rhel-developer-toolbox <krenzelok.frantisek@gmail.com> - 2025.2.80_v9.0.305-91
- Update to CKBI 2.80_v9.0.305 from NSS 3.114
- Adding:

7285
certdata.txt
View File

File diff suppressed because it is too large Load Diff

4
nssckbi.h
View File

@ -46,8 +46,8 @@
* It's recommend to switch back to 0 after having reached version 98/99.
*/
#define NSS_BUILTINS_LIBRARY_VERSION_MAJOR 2
#define NSS_BUILTINS_LIBRARY_VERSION_MINOR 80
#define NSS_BUILTINS_LIBRARY_VERSION "2.80"
#define NSS_BUILTINS_LIBRARY_VERSION_MINOR 90
#define NSS_BUILTINS_LIBRARY_VERSION "2.90"
/* These version numbers detail the semantic changes to the ckfw engine. */
#define NSS_BUILTINS_HARDWARE_VERSION_MAJOR 1