pkgsrc-Changes archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
CVS commit: pkgsrc/security/mozilla-rootcerts
Module Name: pkgsrc
Committed By: nia
Date: Tue Oct 20 22:59:05 UTC 2026
Modified Files:
pkgsrc/security/mozilla-rootcerts: Makefile distinfo
pkgsrc/security/mozilla-rootcerts/patches: patch-certdata.txt
Log Message:
mozilla-rootcerts: Second part of "remove compromised CAs"
PR security/60908
To generate a diff of this commit:
cvs rdiff -u -r1.67 -r1.68 pkgsrc/security/mozilla-rootcerts/Makefile
cvs rdiff -u -r1.44 -r1.45 pkgsrc/security/mozilla-rootcerts/distinfo
cvs rdiff -u -r1.5 -r1.6 \
pkgsrc/security/mozilla-rootcerts/patches/patch-certdata.txt
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Modified files:
Index: pkgsrc/security/mozilla-rootcerts/Makefile
diff -u pkgsrc/security/mozilla-rootcerts/Makefile:1.67 pkgsrc/security/mozilla-rootcerts/Makefile:1.68
--- pkgsrc/security/mozilla-rootcerts/Makefile:1.67 Tue Oct 20 14:45:11 2026
+++ pkgsrc/security/mozilla-rootcerts/Makefile Tue Oct 20 22:59:05 2026
@@ -1,10 +1,10 @@
-# $NetBSD: Makefile,v 1.67 2026/10/20 14:45:11 nia Exp $
+# $NetBSD: Makefile,v 1.68 2026/10/20 22:59:05 nia Exp $
#
# Please also update the dependency pattern in mozilla-rootcerts-openssl
# and bump its version when updating this package.
DISTNAME= mozilla-rootcerts-1.1.${CERTDATA_DATE}
-PKGREVISION= 1
+PKGREVISION= 2
CATEGORIES= security
MASTER_SITES= -https://hg.mozilla.org/mozilla-central/raw-file/${CERTDATA_COMMIT}/security/nss/lib/ckfw/builtins/certdata.txt
EXTRACT_SUFX= # empty
Index: pkgsrc/security/mozilla-rootcerts/distinfo
diff -u pkgsrc/security/mozilla-rootcerts/distinfo:1.44 pkgsrc/security/mozilla-rootcerts/distinfo:1.45
--- pkgsrc/security/mozilla-rootcerts/distinfo:1.44 Tue Oct 20 14:45:11 2026
+++ pkgsrc/security/mozilla-rootcerts/distinfo Tue Oct 20 22:59:05 2026
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.44 2026/10/20 14:45:11 nia Exp $
+$NetBSD: distinfo,v 1.45 2026/10/20 22:59:05 nia Exp $
BLAKE2s (certdata-20260908.txt) = 7570bb28d4e8a175f25a9aa703a3e419324a4960a291e2c611be2b7001f3d8a1
SHA512 (certdata-20260908.txt) = 46d681128b3aa0f22b9e3764b7ee0b2fb73dacf29231ae395d316fe956e6afdaeaf799e15632974b7802c642f057fe39a3fae21f4460831b68d9490322bfbb5a
Size (certdata-20260908.txt) = 1375050 bytes
-SHA1 (patch-certdata.txt) = 8639fd77607f00c7f908cdf1887dde057154cf1c
+SHA1 (patch-certdata.txt) = 04ed1f75d4905cc7fa80be0e6f3eeeefdc1e3f9f
Index: pkgsrc/security/mozilla-rootcerts/patches/patch-certdata.txt
diff -u pkgsrc/security/mozilla-rootcerts/patches/patch-certdata.txt:1.5 pkgsrc/security/mozilla-rootcerts/patches/patch-certdata.txt:1.6
--- pkgsrc/security/mozilla-rootcerts/patches/patch-certdata.txt:1.5 Tue Oct 20 14:45:11 2026
+++ pkgsrc/security/mozilla-rootcerts/patches/patch-certdata.txt Tue Oct 20 22:59:05 2026
@@ -1,16 +1,136 @@
-$NetBSD: patch-certdata.txt,v 1.5 2026/10/20 14:45:11 nia Exp $
+$NetBSD: patch-certdata.txt,v 1.6 2026/10/20 22:59:05 nia Exp $
Remove compromised CAs.
https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/0R3XLJL6FuE/m/0XofdebrAAAJ
https://github.com/mozilla/nss/commit/15734105a44679969114534ac5ceaf08e9630dd3.patch
+https://github.com/mozilla/nss/commit/0a2b0c75fa036930d98331b721c0780693a3e17a.patch
---- certdata.txt.orig 2026-10-20 14:42:17.995992830 +0000
+--- certdata.txt.orig 2026-10-20 22:56:28.096095832 +0000
+++ certdata.txt
-@@ -12221,253 +12221,6 @@ CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
+@@ -12102,372 +12102,6 @@ CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
#
+-# Certificate "emSign ECC Root CA - G3"
+-#
+-# Issuer: CN=emSign ECC Root CA - G3,O=eMudhra Technologies Limited,OU=emSign PKI,C=IN
+-# Serial Number:3c:f6:07:a9:68:70:0e:da:8b:84
+-# Subject: CN=emSign ECC Root CA - G3,O=eMudhra Technologies Limited,OU=emSign PKI,C=IN
+-# Not Valid Before: Sun Feb 18 18:30:00 2018
+-# Not Valid After : Wed Feb 18 18:30:00 2043
+-# Fingerprint (SHA-256): 86:A1:EC:BA:08:9C:4A:8D:3B:BE:27:34:C6:12:BA:34:1D:81:3E:04:3C:F9:E8:A8:62:CD:5C:57:A3:6B:BE:6B
+-# Fingerprint (SHA1): 30:43:FA:4F:F2:57:DC:A0:C3:80:EE:2E:58:EA:78:B2:3F:E6:BB:C1
+-CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
+-CKA_TOKEN CK_BBOOL CK_TRUE
+-CKA_PRIVATE CK_BBOOL CK_FALSE
+-CKA_MODIFIABLE CK_BBOOL CK_FALSE
+-CKA_LABEL UTF8 "emSign ECC Root CA - G3"
+-CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509
+-CKA_SUBJECT MULTILINE_OCTAL
+-\060\153\061\013\060\011\006\003\125\004\006\023\002\111\116\061
+-\023\060\021\006\003\125\004\013\023\012\145\155\123\151\147\156
+-\040\120\113\111\061\045\060\043\006\003\125\004\012\023\034\145
+-\115\165\144\150\162\141\040\124\145\143\150\156\157\154\157\147
+-\151\145\163\040\114\151\155\151\164\145\144\061\040\060\036\006
+-\003\125\004\003\023\027\145\155\123\151\147\156\040\105\103\103
+-\040\122\157\157\164\040\103\101\040\055\040\107\063
+-END
+-CKA_ID UTF8 "0"
+-CKA_ISSUER MULTILINE_OCTAL
+-\060\153\061\013\060\011\006\003\125\004\006\023\002\111\116\061
+-\023\060\021\006\003\125\004\013\023\012\145\155\123\151\147\156
+-\040\120\113\111\061\045\060\043\006\003\125\004\012\023\034\145
+-\115\165\144\150\162\141\040\124\145\143\150\156\157\154\157\147
+-\151\145\163\040\114\151\155\151\164\145\144\061\040\060\036\006
+-\003\125\004\003\023\027\145\155\123\151\147\156\040\105\103\103
+-\040\122\157\157\164\040\103\101\040\055\040\107\063
+-END
+-CKA_SERIAL_NUMBER MULTILINE_OCTAL
+-\002\012\074\366\007\251\150\160\016\332\213\204
+-END
+-CKA_VALUE MULTILINE_OCTAL
+-\060\202\002\116\060\202\001\323\240\003\002\001\002\002\012\074
+-\366\007\251\150\160\016\332\213\204\060\012\006\010\052\206\110
+-\316\075\004\003\003\060\153\061\013\060\011\006\003\125\004\006
+-\023\002\111\116\061\023\060\021\006\003\125\004\013\023\012\145
+-\155\123\151\147\156\040\120\113\111\061\045\060\043\006\003\125
+-\004\012\023\034\145\115\165\144\150\162\141\040\124\145\143\150
+-\156\157\154\157\147\151\145\163\040\114\151\155\151\164\145\144
+-\061\040\060\036\006\003\125\004\003\023\027\145\155\123\151\147
+-\156\040\105\103\103\040\122\157\157\164\040\103\101\040\055\040
+-\107\063\060\036\027\015\061\070\060\062\061\070\061\070\063\060
+-\060\060\132\027\015\064\063\060\062\061\070\061\070\063\060\060
+-\060\132\060\153\061\013\060\011\006\003\125\004\006\023\002\111
+-\116\061\023\060\021\006\003\125\004\013\023\012\145\155\123\151
+-\147\156\040\120\113\111\061\045\060\043\006\003\125\004\012\023
+-\034\145\115\165\144\150\162\141\040\124\145\143\150\156\157\154
+-\157\147\151\145\163\040\114\151\155\151\164\145\144\061\040\060
+-\036\006\003\125\004\003\023\027\145\155\123\151\147\156\040\105
+-\103\103\040\122\157\157\164\040\103\101\040\055\040\107\063\060
+-\166\060\020\006\007\052\206\110\316\075\002\001\006\005\053\201
+-\004\000\042\003\142\000\004\043\245\014\270\055\022\365\050\363
+-\261\262\335\342\002\022\200\236\071\137\111\115\237\311\045\064
+-\131\164\354\273\006\034\347\300\162\257\350\256\057\341\101\124
+-\207\024\250\112\262\350\174\202\346\133\152\265\334\263\165\316
+-\213\006\320\206\043\277\106\325\216\017\077\004\364\327\034\222
+-\176\366\245\143\302\365\137\216\056\117\241\030\031\002\053\062
+-\012\202\144\175\026\223\321\243\102\060\100\060\035\006\003\125
+-\035\016\004\026\004\024\174\135\002\204\023\324\314\212\233\201
+-\316\027\034\056\051\036\234\110\143\102\060\016\006\003\125\035
+-\017\001\001\377\004\004\003\002\001\006\060\017\006\003\125\035
+-\023\001\001\377\004\005\060\003\001\001\377\060\012\006\010\052
+-\206\110\316\075\004\003\003\003\151\000\060\146\002\061\000\276
+-\363\141\317\002\020\035\144\225\007\270\030\156\210\205\005\057
+-\203\010\027\220\312\037\212\114\350\015\033\172\261\255\325\201
+-\011\107\357\073\254\010\004\174\134\231\261\355\107\007\322\002
+-\061\000\235\272\125\374\251\112\350\355\355\346\166\001\102\173
+-\310\370\140\331\215\121\213\125\073\373\214\173\353\145\011\303
+-\370\226\315\107\250\202\362\026\125\167\044\176\022\020\225\004
+-\054\243
+-END
+-CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE
+-CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE
+-CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE
+-
+-# Trust for "emSign ECC Root CA - G3"
+-# Issuer: CN=emSign ECC Root CA - G3,O=eMudhra Technologies Limited,OU=emSign PKI,C=IN
+-# Serial Number:3c:f6:07:a9:68:70:0e:da:8b:84
+-# Subject: CN=emSign ECC Root CA - G3,O=eMudhra Technologies Limited,OU=emSign PKI,C=IN
+-# Not Valid Before: Sun Feb 18 18:30:00 2018
+-# Not Valid After : Wed Feb 18 18:30:00 2043
+-# Fingerprint (SHA-256): 86:A1:EC:BA:08:9C:4A:8D:3B:BE:27:34:C6:12:BA:34:1D:81:3E:04:3C:F9:E8:A8:62:CD:5C:57:A3:6B:BE:6B
+-# Fingerprint (SHA1): 30:43:FA:4F:F2:57:DC:A0:C3:80:EE:2E:58:EA:78:B2:3F:E6:BB:C1
+-CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST
+-CKA_TOKEN CK_BBOOL CK_TRUE
+-CKA_PRIVATE CK_BBOOL CK_FALSE
+-CKA_MODIFIABLE CK_BBOOL CK_FALSE
+-CKA_LABEL UTF8 "emSign ECC Root CA - G3"
+-CKA_CERT_SHA1_HASH MULTILINE_OCTAL
+-\060\103\372\117\362\127\334\240\303\200\356\056\130\352\170\262
+-\077\346\273\301
+-END
+-CKA_CERT_MD5_HASH MULTILINE_OCTAL
+-\316\013\162\321\237\210\216\320\120\003\350\343\270\213\147\100
+-END
+-CKA_ISSUER MULTILINE_OCTAL
+-\060\153\061\013\060\011\006\003\125\004\006\023\002\111\116\061
+-\023\060\021\006\003\125\004\013\023\012\145\155\123\151\147\156
+-\040\120\113\111\061\045\060\043\006\003\125\004\012\023\034\145
+-\115\165\144\150\162\141\040\124\145\143\150\156\157\154\157\147
+-\151\145\163\040\114\151\155\151\164\145\144\061\040\060\036\006
+-\003\125\004\003\023\027\145\155\123\151\147\156\040\105\103\103
+-\040\122\157\157\164\040\103\101\040\055\040\107\063
+-END
+-CKA_SERIAL_NUMBER MULTILINE_OCTAL
+-\002\012\074\366\007\251\150\160\016\332\213\204
+-END
+-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+-CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
+-CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
+-
+-#
-# Certificate "emSign Root CA - C1"
-#
-# Issuer: CN=emSign Root CA - C1,O=eMudhra Inc,OU=emSign PKI,C=US
Home |
Main Index |
Thread Index |
Old Index