./security/ca-certificates, Root CA certificates from the Mozilla Project

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]


Branch: CURRENT, Version: 20200601, Package name: ca-certificates-20200601, Maintainer: pkgsrc-users

This package provides the certificates distributed by the Mozilla
Project and will, by default, install certificates trusted by the
Mozilla Project in the system certificate store.

The sysadmin can configure the list of trusted certificates and also
add local certificates as needed by editing ca-certificates.conf and
re-running update-ca-certificates.


Required to run:
[security/openssl]

Required to build:
[pkgtools/cwrappers] [lang/python37]

Master sites:

SHA1: f17235bc9c3aec538065a655681815c242a6d7d5
RMD160: a9f1f232f46ecb06c53d5d814c29d3b9aca88323
Filesize: 239.91 KB

Version history: (Expand)


CVS history: (Expand)


   2020-06-08 11:55:37 by Kimmo Suominen | Files touched by this commit (6) | Package updated
Log message:
Upgrade to 20200601

* Update Mozilla certificate authority bundle to version 2.40.
* Add distrusted Symantec CA list to blacklist for explicit removal.
* Blacklist expired root certificate, "AddTrust External Root".

The following certificate authorities were added (+):
+ "Certigna Root CA"
+ "emSign ECC Root CA - C3"
+ "emSign ECC Root CA - G3"
+ "emSign Root CA - C1"
+ "emSign Root CA - G1"
+ "Entrust Root Certification Authority - G4"
+ "GTS Root R1"
+ "GTS Root R2"
+ "GTS Root R3"
+ "GTS Root R4"
+ "Hongkong Post Root CA 3"
+ "UCA Extended Validation Root"
+ "UCA Global G2 Root"

The following certificate authorities were removed (-):
- "AddTrust External Root"
- "Certinomis - Root CA"
- "Certplus Class 2 Primary CA"
- "Deutsche Telekom Root CA 2"
- "GeoTrust Global CA"
- "GeoTrust Primary Certification Authority"
- "GeoTrust Primary Certification Authority - G2"
- "GeoTrust Primary Certification Authority - G3"
- "GeoTrust Universal CA"
- "thawte Primary Root CA"
- "thawte Primary Root CA - G2"
- "thawte Primary Root CA - G3"
- "VeriSign Class 3 Public Primary Certification Authority - G4"
- "VeriSign Class 3 Public Primary Certification Authority - G5"
- "VeriSign Universal Root Certification Authority"

Changes for pkgsrc packaging:
* Add README.pkgsrc, replacing MESSAGE.
* Improve DESCR to better describe the functionality of the package.
* Install changelog and README.source from the distribution package.
   2020-05-31 17:53:44 by Kimmo Suominen | Files touched by this commit (7) | Package updated
Log message:
Add ca-certificates-20190110

This package provides the certificates distributed by the Mozilla
Project.

It also provides a script, update-ca-certs, which can be used to manage
a location that makes certificates usable by TLS implementations,
including installing select certificates from this package.