1147359a30
Update to CKBI 2.60_v7.0.306 from NSS 3.91
Removing:
# Certificate "Camerfirma Global Chambersign Root"
# Certificate "Staat der Nederlanden EV Root CA"
# Certificate "OpenTrust Root CA G1"
# Certificate "Swedish Government Root Authority v1"
# Certificate "DigiNotar Root CA G2"
# Certificate "Federal Common Policy CA"
# Certificate "TC TrustCenter Universal CA III"
# Certificate "CCA India 2007"
# Certificate "ipsCA Global CA Root"
# Certificate "ipsCA Main CA Root"
# Certificate "Macao Post eSignTrust Root Certification Authority"
# Certificate "InfoNotary CSP Root"
# Certificate "DigiNotar Root CA"
# Certificate "Root CA"
# Certificate "GPKIRootCA"
# Certificate "D-TRUST Qualified Root CA 1 2007:PN"
# Certificate "TC TrustCenter Universal CA I"
# Certificate "TC TrustCenter Universal CA II"
# Certificate "TC TrustCenter Class 2 CA II"
# Certificate "TC TrustCenter Class 4 CA II"
# Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
# Certificate "CertRSA01"
# Certificate "KISA RootCA 3"
# Certificate "A-CERT ADVANCED"
# Certificate "A-Trust-Qual-01"
# Certificate "A-Trust-nQual-01"
# Certificate "Serasa Certificate Authority II"
# Certificate "TDC Internet"
# Certificate "America Online Root Certification Authority 2"
# Certificate "RSA Security Inc"
# Certificate "Public Notary Root"
# Certificate "Autoridade Certificadora Raiz Brasileira"
# Certificate "Post.Trust Root CA"
# Certificate "Entrust.net Secure Server Certification Authority"
# Certificate "ePKI EV SSL Certification Authority - G1"
Adding:
# Certificate "DigiCert TLS ECC P384 Root G5"
# Certificate "DigiCert TLS RSA4096 Root G5"
# Certificate "DigiCert SMIME ECC P384 Root G5"
# Certificate "DigiCert SMIME RSA4096 Root G5"
# Certificate "Certainly Root R1"
# Certificate "Certainly Root E1"
# Certificate "E-Tugra Global Root CA RSA v3"
# Certificate "E-Tugra Global Root CA ECC v3"
# Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
# Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
# Certificate "BJCA Global Root CA1"
# Certificate "BJCA Global Root CA2"
# Certificate "Symantec Enterprise Mobile Root for Microsoft"
# Certificate "A-Trust-Root-05"
# Certificate "ADOCA02"
# Certificate "StartCom Certification Authority G2"
# Certificate "ATHEX Root CA"
# Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı"
# Certificate "GeoTrust Primary Certification Authority"
# Certificate "thawte Primary Root CA"
# Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
# Certificate "America Online Root Certification Authority 1"
# Certificate "Juur-SK"
# Certificate "ComSign CA"
# Certificate "ComSign Secured CA"
# Certificate "ComSign Advanced Security CA"
# Certificate "Global Chambersign Root"
# Certificate "Sonera Class2 CA"
# Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
# Certificate "VeriSign, Inc."
# Certificate "GTE CyberTrust Global Root"
# Certificate "Equifax Secure Global eBusiness CA-1"
# Certificate "Equifax"
# Certificate "Class 1 Primary CA"
# Certificate "Swiss Government Root CA III"
# Certificate "Application CA G4 Root"
# Certificate "SSC GDL CA Root A"
# Certificate "GlobalSign Code Signing Root E45"
# Certificate "GlobalSign Code Signing Root R45"
# Certificate "Entrust Code Signing Root Certification Authority - CSBR1"
|
||
|---|---|---|
| tests | ||
| .gitignore | ||
| README.edk2 | ||
| README.etc | ||
| README.extr | ||
| README.java | ||
| README.openssl | ||
| README.pem | ||
| README.src | ||
| README.usr | ||
| ca-certificates.spec | ||
| ca-legacy | ||
| ca-legacy.8.txt | ||
| ca-legacy.conf | ||
| certdata.txt | ||
| certdata2pem.py | ||
| check_certs.sh | ||
| fetch.sh | ||
| gating.yaml | ||
| nssckbi.h | ||
| sort-blocks.py | ||
| sources | ||
| trust-fixes | ||
| update-ca-trust | ||
| update-ca-trust.8.txt | ||
README.usr
This directory /usr/share/pki/ca-trust-source/ contains CA certificates and
trust settings in the PEM file format. The trust settings found here will be
interpreted with a low priority - lower than the ones found in
/etc/pki/ca-trust/source/ .
=============================================================================
QUICK HELP: To add a certificate in the simple PEM or DER file formats to the
list of CAs trusted on the system:
Copy it to the
/usr/share/pki/ca-trust-source/anchors/
subdirectory, and run the
update-ca-trust
command.
If your certificate is in the extended BEGIN TRUSTED file format,
then place it into the main source/ directory instead.
=============================================================================
Please refer to the update-ca-trust(8) manual page for additional information.