CVS commit: [netbsd-11] src

["Martin Husemann" <martin%netbsd.org@localhost>]

Module Name:    src
Committed By:   martin
Date:           Tue Oct 20 19:19:03 UTC 2026

Modified Files:
        src/distrib/sets/lists/base [netbsd-11]: mi
        src/doc [netbsd-11]: 3RDPARTY
        src/external/mpl/mozilla-certdata/share [netbsd-11]: Makefile
            email.trust server.trust
Added Files:
        src/external/mpl/mozilla-certdata/share/certs [netbsd-11]:
            D-TRUST_BR_Root_CA_2_2023.pem D-TRUST_EV_Root_CA_2_2023.pem
            OISTE_Client_Root_ECC_G1.pem OISTE_Client_Root_RSA_G1.pem
            OISTE_Server_Root_ECC_G1.pem OISTE_Server_Root_RSA_G1.pem
            SECOM_SMIME_RSA_Root_CA_2024.pem SECOM_TLS_ECC_Root_CA_2024.pem
            SECOM_TLS_RSA_Root_CA_2024.pem SecureSign_Root_CA16.pem
            SwissSign_RSA_SMIME_Root_CA_2022_-_1.pem
            SwissSign_RSA_TLS_Root_CA_2022_-_1.pem
            Telia_EC_Email_Root_CA_v3.pem Telia_EC_TLS_Root_CA_v3.pem
            Telia_RSA_Email_Root_CA_v3.pem Telia_RSA_TLS_Root_CA_v3.pem
            TrustAsia_SMIME_ECC_Root_CA.pem TrustAsia_SMIME_RSA_Root_CA.pem
            TrustAsia_TLS_ECC_Root_CA.pem TrustAsia_TLS_RSA_Root_CA.pem
            e-Szigno_TLS_Root_CA_2023.pem
Removed Files:
        src/external/mpl/mozilla-certdata/share/certs [netbsd-11]:
            AffirmTrust_Commercial.pem AffirmTrust_Networking.pem
            AffirmTrust_Premium.pem AffirmTrust_Premium_ECC.pem
            Baltimore_CyberTrust_Root.pem
            CommScope_Public_Trust_ECC_Root-01.pem
            CommScope_Public_Trust_ECC_Root-02.pem
            CommScope_Public_Trust_RSA_Root-01.pem
            CommScope_Public_Trust_RSA_Root-02.pem
            Entrust_Root_Certification_Authority.pem
            Explicitly_Distrust_DigiNotar_Root_CA.pem
            FIRMAPROFESIONAL_CA_ROOT-A_WEB.pem GLOBALTRUST_2020.pem
            SecureSign_RootCA11.pem SecureSign_Root_CA12.pem SecureTrust_CA.pem
            Secure_Global_CA.pem Security_Communication_RootCA3.pem
            SwissSign_Silver_CA_-_G2.pem TeliaSonera_Root_CA_v1.pem
            Trustwave_Global_Certification_Authority.pem
            Trustwave_Global_ECC_P256_Certification_Authority.pem
            Trustwave_Global_ECC_P384_Certification_Authority.pem
            XRamp_Global_CA_Root.pem certSIGN_ROOT_CA.pem
            ePKI_Root_Certification_Authority.pem emSign_ECC_Root_CA_-_C3.pem
            emSign_ECC_Root_CA_-_G3.pem emSign_Root_CA_-_C1.pem

Log Message:
Pull up following revision(s) (requested by riastradh in ticket #537):

        external/mpl/mozilla-certdata/share/certs/AffirmTrust_Commercial.pem: file removal
        external/mpl/mozilla-certdata/share/certs/TrustAsia_TLS_ECC_Root_CA.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/OISTE_Server_Root_ECC_G1.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/Trustwave_Global_ECC_P256_Certification_Authority.pem: file removal
        external/mpl/mozilla-certdata/share/certs/FIRMAPROFESIONAL_CA_ROOT-A_WEB.pem: file removal
        external/mpl/mozilla-certdata/share/certs/TeliaSonera_Root_CA_v1.pem: file removal
        external/mpl/mozilla-certdata/share/certs/SwissSign_RSA_SMIME_Root_CA_2022_-_1.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/Entrust_Root_Certification_Authority.pem: file removal
        external/mpl/mozilla-certdata/share/certs/CommScope_Public_Trust_RSA_Root-01.pem: file removal
        external/mpl/mozilla-certdata/share/certs/ePKI_Root_Certification_Authority.pem: file removal
        external/mpl/mozilla-certdata/share/certs/Telia_RSA_TLS_Root_CA_v3.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/TrustAsia_SMIME_RSA_Root_CA.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/GLOBALTRUST_2020.pem: file removal
        external/mpl/mozilla-certdata/share/certs/AffirmTrust_Premium_ECC.pem: file removal
        external/mpl/mozilla-certdata/share/certs/SecureTrust_CA.pem: file removal
        external/mpl/mozilla-certdata/share/certs/OISTE_Server_Root_RSA_G1.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/Trustwave_Global_Certification_Authority.pem: file removal
        external/mpl/mozilla-certdata/share/certs/TrustAsia_TLS_RSA_Root_CA.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/e-Szigno_TLS_Root_CA_2023.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/Telia_EC_TLS_Root_CA_v3.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/Security_Communication_RootCA3.pem: file removal
        external/mpl/mozilla-certdata/share/certs/SECOM_TLS_ECC_Root_CA_2024.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/OISTE_Client_Root_ECC_G1.pem: revision 1.1
        external/mpl/mozilla-certdata/share/email.trust: revision 1.4
        external/mpl/mozilla-certdata/share/certs/Telia_RSA_Email_Root_CA_v3.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/SwissSign_Silver_CA_-_G2.pem: file removal
        external/mpl/mozilla-certdata/share/certs/SecureSign_Root_CA12.pem: file removal
        external/mpl/mozilla-certdata/share/certs/SecureSign_RootCA11.pem: file removal
        external/mpl/mozilla-certdata/share/certs/Secure_Global_CA.pem: file removal
        external/mpl/mozilla-certdata/share/certs/OISTE_Client_Root_RSA_G1.pem: revision 1.1
        external/mpl/mozilla-certdata/share/server.trust: revision 1.4
        external/mpl/mozilla-certdata/share/certs/XRamp_Global_CA_Root.pem: file removal
        external/mpl/mozilla-certdata/share/certs/CommScope_Public_Trust_ECC_Root-02.pem: file removal
        external/mpl/mozilla-certdata/share/certs/Baltimore_CyberTrust_Root.pem: file removal
        external/mpl/mozilla-certdata/share/certs/Telia_EC_Email_Root_CA_v3.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/SwissSign_RSA_TLS_Root_CA_2022_-_1.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/SECOM_TLS_RSA_Root_CA_2024.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/Trustwave_Global_ECC_P384_Certification_Authority.pem: file removal
        external/mpl/mozilla-certdata/share/certs/CommScope_Public_Trust_RSA_Root-02.pem: file removal
        doc/3RDPARTY: revision 1.2267
        external/mpl/mozilla-certdata/share/certs/emSign_ECC_Root_CA_-_G3.pem: file removal
        external/mpl/mozilla-certdata/share/certs/emSign_ECC_Root_CA_-_C3.pem: file removal
        external/mpl/mozilla-certdata/share/certs/SecureSign_Root_CA16.pem: revision 1.1
        distrib/sets/lists/base/mi: revision 1.1393
        external/mpl/mozilla-certdata/share/certs/AffirmTrust_Premium.pem: file removal
        external/mpl/mozilla-certdata/share/certs/Explicitly_Distrust_DigiNotar_Root_CA.pem: file removal
        external/mpl/mozilla-certdata/share/Makefile: revision 1.6
        external/mpl/mozilla-certdata/share/certs/AffirmTrust_Networking.pem: file removal
        external/mpl/mozilla-certdata/share/certs/emSign_Root_CA_-_C1.pem: file removal
        external/mpl/mozilla-certdata/share/certs/SECOM_SMIME_RSA_Root_CA_2024.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/TrustAsia_SMIME_ECC_Root_CA.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/D-TRUST_EV_Root_CA_2_2023.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/D-TRUST_BR_Root_CA_2_2023.pem: revision 1.1
        external/mpl/mozilla-certdata/share/certs/CommScope_Public_Trust_ECC_Root-01.pem: file removal
        external/mpl/mozilla-certdata/share/certs/certSIGN_ROOT_CA.pem: file removal

mozilla-certdata: regen

mozilla-certdata: Update set lists.

PR security/60908: mozilla-certdata: update for compromised CA

mozilla-certdata: Update references in Makefile and doc/3RDPARTY.

PR security/60908: mozilla-certdata: update for compromised CA


To generate a diff of this commit:
cvs rdiff -u -r1.1367.2.2 -r1.1367.2.3 src/distrib/sets/lists/base/mi
cvs rdiff -u -r1.2126.2.17 -r1.2126.2.18 src/doc/3RDPARTY
cvs rdiff -u -r1.5 -r1.5.2.1 src/external/mpl/mozilla-certdata/share/Makefile
cvs rdiff -u -r1.3 -r1.3.2.1 \
    src/external/mpl/mozilla-certdata/share/email.trust \
    src/external/mpl/mozilla-certdata/share/server.trust
cvs rdiff -u -r1.1 -r0 \
    src/external/mpl/mozilla-certdata/share/certs/AffirmTrust_Commercial.pem \
    src/external/mpl/mozilla-certdata/share/certs/AffirmTrust_Networking.pem \
    src/external/mpl/mozilla-certdata/share/certs/AffirmTrust_Premium.pem \
    src/external/mpl/mozilla-certdata/share/certs/AffirmTrust_Premium_ECC.pem \
    src/external/mpl/mozilla-certdata/share/certs/Baltimore_CyberTrust_Root.pem \
    src/external/mpl/mozilla-certdata/share/certs/CommScope_Public_Trust_ECC_Root-01.pem \
    src/external/mpl/mozilla-certdata/share/certs/CommScope_Public_Trust_ECC_Root-02.pem \
    src/external/mpl/mozilla-certdata/share/certs/CommScope_Public_Trust_RSA_Root-01.pem \
    src/external/mpl/mozilla-certdata/share/certs/CommScope_Public_Trust_RSA_Root-02.pem \
    src/external/mpl/mozilla-certdata/share/certs/Entrust_Root_Certification_Authority.pem \
    src/external/mpl/mozilla-certdata/share/certs/Explicitly_Distrust_DigiNotar_Root_CA.pem \
    src/external/mpl/mozilla-certdata/share/certs/FIRMAPROFESIONAL_CA_ROOT-A_WEB.pem \
    src/external/mpl/mozilla-certdata/share/certs/GLOBALTRUST_2020.pem \
    src/external/mpl/mozilla-certdata/share/certs/SecureSign_RootCA11.pem \
    src/external/mpl/mozilla-certdata/share/certs/SecureSign_Root_CA12.pem \
    src/external/mpl/mozilla-certdata/share/certs/SecureTrust_CA.pem \
    src/external/mpl/mozilla-certdata/share/certs/Secure_Global_CA.pem \
    src/external/mpl/mozilla-certdata/share/certs/Security_Communication_RootCA3.pem \
    src/external/mpl/mozilla-certdata/share/certs/SwissSign_Silver_CA_-_G2.pem \
    src/external/mpl/mozilla-certdata/share/certs/TeliaSonera_Root_CA_v1.pem \
    src/external/mpl/mozilla-certdata/share/certs/Trustwave_Global_Certification_Authority.pem \
    src/external/mpl/mozilla-certdata/share/certs/Trustwave_Global_ECC_P256_Certification_Authority.pem \
    src/external/mpl/mozilla-certdata/share/certs/Trustwave_Global_ECC_P384_Certification_Authority.pem \
    src/external/mpl/mozilla-certdata/share/certs/XRamp_Global_CA_Root.pem \
    src/external/mpl/mozilla-certdata/share/certs/certSIGN_ROOT_CA.pem \
    src/external/mpl/mozilla-certdata/share/certs/ePKI_Root_Certification_Authority.pem \
    src/external/mpl/mozilla-certdata/share/certs/emSign_ECC_Root_CA_-_C3.pem \
    src/external/mpl/mozilla-certdata/share/certs/emSign_ECC_Root_CA_-_G3.pem \
    src/external/mpl/mozilla-certdata/share/certs/emSign_Root_CA_-_C1.pem
cvs rdiff -u -r0 -r1.1.2.2 \
    src/external/mpl/mozilla-certdata/share/certs/D-TRUST_BR_Root_CA_2_2023.pem \
    src/external/mpl/mozilla-certdata/share/certs/D-TRUST_EV_Root_CA_2_2023.pem \
    src/external/mpl/mozilla-certdata/share/certs/OISTE_Client_Root_ECC_G1.pem \
    src/external/mpl/mozilla-certdata/share/certs/OISTE_Client_Root_RSA_G1.pem \
    src/external/mpl/mozilla-certdata/share/certs/OISTE_Server_Root_ECC_G1.pem \
    src/external/mpl/mozilla-certdata/share/certs/OISTE_Server_Root_RSA_G1.pem \
    src/external/mpl/mozilla-certdata/share/certs/SECOM_SMIME_RSA_Root_CA_2024.pem \
    src/external/mpl/mozilla-certdata/share/certs/SECOM_TLS_ECC_Root_CA_2024.pem \
    src/external/mpl/mozilla-certdata/share/certs/SECOM_TLS_RSA_Root_CA_2024.pem \
    src/external/mpl/mozilla-certdata/share/certs/SecureSign_Root_CA16.pem \
    src/external/mpl/mozilla-certdata/share/certs/SwissSign_RSA_SMIME_Root_CA_2022_-_1.pem \
    src/external/mpl/mozilla-certdata/share/certs/SwissSign_RSA_TLS_Root_CA_2022_-_1.pem \
    src/external/mpl/mozilla-certdata/share/certs/Telia_EC_Email_Root_CA_v3.pem \
    src/external/mpl/mozilla-certdata/share/certs/Telia_EC_TLS_Root_CA_v3.pem \
    src/external/mpl/mozilla-certdata/share/certs/Telia_RSA_Email_Root_CA_v3.pem \
    src/external/mpl/mozilla-certdata/share/certs/Telia_RSA_TLS_Root_CA_v3.pem \
    src/external/mpl/mozilla-certdata/share/certs/TrustAsia_SMIME_ECC_Root_CA.pem \
    src/external/mpl/mozilla-certdata/share/certs/TrustAsia_SMIME_RSA_Root_CA.pem \
    src/external/mpl/mozilla-certdata/share/certs/TrustAsia_TLS_ECC_Root_CA.pem \
    src/external/mpl/mozilla-certdata/share/certs/TrustAsia_TLS_RSA_Root_CA.pem \
    src/external/mpl/mozilla-certdata/share/certs/e-Szigno_TLS_Root_CA_2023.pem

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.