CVS commit: pkgsrc/security/ca-certificates

["Kimmo Suominen" <kim%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   kim
Date:           Wed Oct 21 07:52:12 UTC 2026

Modified Files:
        pkgsrc/security/ca-certificates: Makefile PLIST distinfo

Log Message:
ca-certificates: Update to 20260816

ca-certificates (20260816) unstable; urgency=medium

  * Update Mozilla certificate authority bundle to version 2.90
    The following certificate authorities were added (+):
    + "SECOM TLS ECC Root CA 2024"
    + "SECOM TLS RSA Root CA 2024"
    + "Telia EC TLS Root CA v3"
    + "Telia RSA TLS Root CA v3"
    The following certificate authorities were removed (-):
    - "Atos TrustedRoot 2011"
    - "Entrust Root Certification Authority"
    - "SecureSign Root CA12"
    - "ePKI Root Certification Authority"

 -- Julien Cristau <jcristau%debian.org@localhost>  Sun, 16 Aug 2026 23:04:36 +0200


To generate a diff of this commit:
cvs rdiff -u -r1.19 -r1.20 pkgsrc/security/ca-certificates/Makefile
cvs rdiff -u -r1.11 -r1.12 pkgsrc/security/ca-certificates/PLIST
cvs rdiff -u -r1.16 -r1.17 pkgsrc/security/ca-certificates/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/ca-certificates/Makefile
diff -u pkgsrc/security/ca-certificates/Makefile:1.19 pkgsrc/security/ca-certificates/Makefile:1.20
--- pkgsrc/security/ca-certificates/Makefile:1.19       Tue Oct 20 22:55:53 2026
+++ pkgsrc/security/ca-certificates/Makefile    Wed Oct 21 07:52:12 2026
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.19 2026/10/20 22:55:53 nia Exp $
+# $NetBSD: Makefile,v 1.20 2026/10/21 07:52:12 kim Exp $
 
-PKGNAME=       ca-certificates-20260601
-PKGREVISION=   1
+PKGNAME=       ca-certificates-20260816
 DISTNAME=      ${PKGNAME_NOREV:C/-([^-]*)$/_\1/}
 CATEGORIES=    security
 MASTER_SITES=  http://deb.debian.org/debian/pool/main/c/ca-certificates/

Index: pkgsrc/security/ca-certificates/PLIST
diff -u pkgsrc/security/ca-certificates/PLIST:1.11 pkgsrc/security/ca-certificates/PLIST:1.12
--- pkgsrc/security/ca-certificates/PLIST:1.11  Wed Oct 21 01:42:29 2026
+++ pkgsrc/security/ca-certificates/PLIST       Wed Oct 21 07:52:12 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.11 2026/10/21 01:42:29 maya Exp $
+@comment $NetBSD: PLIST,v 1.12 2026/10/21 07:52:12 kim Exp $
 man/man8/update-ca-certificates.8
 sbin/update-ca-certificates
 share/ca-certificates/mozilla/ACCVRAIZ1.crt
@@ -10,7 +10,6 @@ share/ca-certificates/mozilla/Amazon_Roo
 share/ca-certificates/mozilla/Amazon_Root_CA_2.crt
 share/ca-certificates/mozilla/Amazon_Root_CA_3.crt
 share/ca-certificates/mozilla/Amazon_Root_CA_4.crt
-share/ca-certificates/mozilla/Atos_TrustedRoot_2011.crt
 share/ca-certificates/mozilla/Atos_TrustedRoot_Root_CA_ECC_TLS_2021.crt
 share/ca-certificates/mozilla/Atos_TrustedRoot_Root_CA_RSA_TLS_2021.crt
 share/ca-certificates/mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt
@@ -42,7 +41,6 @@ share/ca-certificates/mozilla/DigiCert_G
 share/ca-certificates/mozilla/DigiCert_TLS_ECC_P384_Root_G5.crt
 share/ca-certificates/mozilla/DigiCert_TLS_RSA4096_Root_G5.crt
 share/ca-certificates/mozilla/DigiCert_Trusted_Root_G4.crt
-share/ca-certificates/mozilla/Entrust_Root_Certification_Authority.crt
 share/ca-certificates/mozilla/GDCA_TrustAUTH_R5_ROOT.crt
 share/ca-certificates/mozilla/GTS_Root_R1.crt
 share/ca-certificates/mozilla/GTS_Root_R3.crt
@@ -77,6 +75,8 @@ share/ca-certificates/mozilla/OISTE_WISe
 share/ca-certificates/mozilla/QuoVadis_Root_CA_1_G3.crt
 share/ca-certificates/mozilla/QuoVadis_Root_CA_2_G3.crt
 share/ca-certificates/mozilla/QuoVadis_Root_CA_3_G3.crt
+share/ca-certificates/mozilla/SECOM_TLS_ECC_Root_CA_2024.crt
+share/ca-certificates/mozilla/SECOM_TLS_RSA_Root_CA_2024.crt
 share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_ECC.crt
 share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_RSA_R2.crt
 share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_ECC.crt
@@ -86,7 +86,6 @@ share/ca-certificates/mozilla/SSL.com_TL
 share/ca-certificates/mozilla/SZAFIR_ROOT_CA2.crt
 share/ca-certificates/mozilla/Sectigo_Public_Server_Authentication_Root_E46.crt
 share/ca-certificates/mozilla/Sectigo_Public_Server_Authentication_Root_R46.crt
-share/ca-certificates/mozilla/SecureSign_Root_CA12.crt
 share/ca-certificates/mozilla/SecureSign_Root_CA14.crt
 share/ca-certificates/mozilla/SecureSign_Root_CA15.crt
 share/ca-certificates/mozilla/Security_Communication_ECC_RootCA1.crt
@@ -102,6 +101,8 @@ share/ca-certificates/mozilla/TWCA_Globa
 share/ca-certificates/mozilla/TWCA_Root_Certification_Authority.crt
 share/ca-certificates/mozilla/Telekom_Security_TLS_ECC_Root_2020.crt
 share/ca-certificates/mozilla/Telekom_Security_TLS_RSA_Root_2023.crt
+share/ca-certificates/mozilla/Telia_EC_TLS_Root_CA_v3.crt
+share/ca-certificates/mozilla/Telia_RSA_TLS_Root_CA_v3.crt
 share/ca-certificates/mozilla/Telia_Root_CA_v2.crt
 share/ca-certificates/mozilla/TrustAsia_Global_Root_CA_G3.crt
 share/ca-certificates/mozilla/TrustAsia_Global_Root_CA_G4.crt
@@ -115,7 +116,6 @@ share/ca-certificates/mozilla/USERTrust_
 share/ca-certificates/mozilla/certSIGN_Root_CA_G2.crt
 share/ca-certificates/mozilla/e-Szigno_Root_CA_2017.crt
 share/ca-certificates/mozilla/e-Szigno_TLS_Root_CA_2023.crt
-share/ca-certificates/mozilla/ePKI_Root_Certification_Authority.crt
 share/ca-certificates/mozilla/emSign_Root_CA_-_G1.crt
 share/ca-certificates/mozilla/vTrus_ECC_Root_CA.crt
 share/ca-certificates/mozilla/vTrus_Root_CA.crt

Index: pkgsrc/security/ca-certificates/distinfo
diff -u pkgsrc/security/ca-certificates/distinfo:1.16 pkgsrc/security/ca-certificates/distinfo:1.17
--- pkgsrc/security/ca-certificates/distinfo:1.16       Tue Oct 20 22:55:53 2026
+++ pkgsrc/security/ca-certificates/distinfo    Wed Oct 21 07:52:12 2026
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.16 2026/10/20 22:55:53 nia Exp $
+$NetBSD: distinfo,v 1.17 2026/10/21 07:52:12 kim Exp $
 
-BLAKE2s (ca-certificates_20260601.tar.xz) = 366e19c7712a8b45143624fd9f34964da9253bee742d16b172fdccdc3f0f5216
-SHA512 (ca-certificates_20260601.tar.xz) = 31db2dd39a958f4411c64d5c8bd27710a9e95df7c2eb3438cf4384f031132b55e5d6e6739f69b9bcb52071b8d6239b4e379917766b4216ba8ffd507d8da7379f
-Size (ca-certificates_20260601.tar.xz) = 265368 bytes
+BLAKE2s (ca-certificates_20260816.tar.xz) = 0b270c2969b31616af054506df25e3336f1afc1837fde726a1e5ed4f02df91b5
+SHA512 (ca-certificates_20260816.tar.xz) = 0eb851f03bda3e1e53bad5e248585d60f1ec0455c6c8ad4cb760cc1269d51a0c8c20a8901b21086b0b656525b0431efc9f4c8aff3b8410d34b6905b8064bf915
+Size (ca-certificates_20260816.tar.xz) = 271796 bytes
 SHA1 (patch-mozilla_certdata.txt) = 9122df695363654858d31c397b8c838dd7d1e7d7
 SHA1 (patch-sbin_update-ca-certificates) = 8d8944d4139477fbf7f25021fa86a0116be0ea1a