CVS commit: pkgsrc/security/ca-certificates

["Kimmo Suominen" <kim%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   kim
Date:           Wed Apr 30 18:29:54 UTC 2025

Modified Files:
        pkgsrc/security/ca-certificates: Makefile PLIST distinfo
        pkgsrc/security/ca-certificates/patches:
            patch-sbin_update-ca-certificates

Log Message:
ca-certificates: Update to 20250419

ca-certificates (20250419) unstable; urgency=medium

  [ Alexander Kanavin ]
  * update-ca-certificates: add a --sysroot option

  [ Julien Cristau ]
  * Update Mozilla certificate authority bundle to version 2.74.
    The following certificate authorities were added (+):
    + D-TRUST BR Root CA 2 2023
    + D-TRUST EV Root CA 2 2023
    The following certificate authorities were removed (-):
    - Entrust Root Certification Authority - G4
    - SecureSign RootCA11
    - Security Communication RootCA3
    - SwissSign Silver CA - G2

 -- Julien Cristau <jcristau%debian.org@localhost>  Sat, 19 Apr 2025 09:25:37 +0200

ca-certificates (20241223) unstable; urgency=medium

  * Update Mozilla certificate authority bundle to version 2.70.
    The following certificate authorities were added (+):
    + Telekom Security TLS ECC Root 2020
    + Telekom Security TLS RSA Root 2023
    + FIRMAPROFESIONAL CA ROOT-A WEB
    + TWCA CYBER Root CA
    + SecureSign Root CA12
    + SecureSign Root CA14
    + SecureSign Root CA15
    The following certificate authorities were removed (-):
    - Security Communication Root CA (closes: #1063093)
  * Add Romanian debconf translation, thanks to Remus-Gabriel Chelu.
    Closes: #1067042, #1031490.

 -- Julien Cristau <jcristau%debian.org@localhost>  Mon, 23 Dec 2024 12:53:45 +0100


To generate a diff of this commit:
cvs rdiff -u -r1.15 -r1.16 pkgsrc/security/ca-certificates/Makefile
cvs rdiff -u -r1.7 -r1.8 pkgsrc/security/ca-certificates/PLIST
cvs rdiff -u -r1.12 -r1.13 pkgsrc/security/ca-certificates/distinfo
cvs rdiff -u -r1.5 -r1.6 \
    pkgsrc/security/ca-certificates/patches/patch-sbin_update-ca-certificates

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/ca-certificates/Makefile
diff -u pkgsrc/security/ca-certificates/Makefile:1.15 pkgsrc/security/ca-certificates/Makefile:1.16
--- pkgsrc/security/ca-certificates/Makefile:1.15       Fri Mar 22 05:37:43 2024
+++ pkgsrc/security/ca-certificates/Makefile    Wed Apr 30 18:29:53 2025
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.15 2024/03/22 05:37:43 kim Exp $
+# $NetBSD: Makefile,v 1.16 2025/04/30 18:29:53 kim Exp $
 
-PKGNAME=       ca-certificates-20240203
+PKGNAME=       ca-certificates-20250419
 DISTNAME=      ${PKGNAME_NOREV:C/-([^-]*)$/_\1/}
 CATEGORIES=    security
 MASTER_SITES=  http://deb.debian.org/debian/pool/main/c/ca-certificates/

Index: pkgsrc/security/ca-certificates/PLIST
diff -u pkgsrc/security/ca-certificates/PLIST:1.7 pkgsrc/security/ca-certificates/PLIST:1.8
--- pkgsrc/security/ca-certificates/PLIST:1.7   Fri Mar 22 05:37:43 2024
+++ pkgsrc/security/ca-certificates/PLIST       Wed Apr 30 18:29:53 2025
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.7 2024/03/22 05:37:43 kim Exp $
+@comment $NetBSD: PLIST,v 1.8 2025/04/30 18:29:53 kim Exp $
 man/man8/update-ca-certificates.8
 sbin/update-ca-certificates
 share/ca-certificates/mozilla/ACCVRAIZ1.crt
@@ -42,7 +42,9 @@ share/ca-certificates/mozilla/CommScope_
 share/ca-certificates/mozilla/CommScope_Public_Trust_RSA_Root-02.crt
 share/ca-certificates/mozilla/Comodo_AAA_Services_root.crt
 share/ca-certificates/mozilla/D-TRUST_BR_Root_CA_1_2020.crt
+share/ca-certificates/mozilla/D-TRUST_BR_Root_CA_2_2023.crt
 share/ca-certificates/mozilla/D-TRUST_EV_Root_CA_1_2020.crt
+share/ca-certificates/mozilla/D-TRUST_EV_Root_CA_2_2023.crt
 share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_2009.crt
 share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_EV_2009.crt
 share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_CA.crt
@@ -59,7 +61,7 @@ share/ca-certificates/mozilla/Entrust.ne
 share/ca-certificates/mozilla/Entrust_Root_Certification_Authority.crt
 share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_EC1.crt
 share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G2.crt
-share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G4.crt
+share/ca-certificates/mozilla/FIRMAPROFESIONAL_CA_ROOT-A_WEB.crt
 share/ca-certificates/mozilla/GDCA_TrustAUTH_R5_ROOT.crt
 share/ca-certificates/mozilla/GLOBALTRUST_2020.crt
 share/ca-certificates/mozilla/GTS_Root_R1.crt
@@ -107,23 +109,25 @@ share/ca-certificates/mozilla/SSL.com_TL
 share/ca-certificates/mozilla/SZAFIR_ROOT_CA2.crt
 share/ca-certificates/mozilla/Sectigo_Public_Server_Authentication_Root_E46.crt
 share/ca-certificates/mozilla/Sectigo_Public_Server_Authentication_Root_R46.crt
-share/ca-certificates/mozilla/SecureSign_RootCA11.crt
+share/ca-certificates/mozilla/SecureSign_Root_CA12.crt
+share/ca-certificates/mozilla/SecureSign_Root_CA14.crt
+share/ca-certificates/mozilla/SecureSign_Root_CA15.crt
 share/ca-certificates/mozilla/SecureTrust_CA.crt
 share/ca-certificates/mozilla/Secure_Global_CA.crt
 share/ca-certificates/mozilla/Security_Communication_ECC_RootCA1.crt
 share/ca-certificates/mozilla/Security_Communication_RootCA2.crt
-share/ca-certificates/mozilla/Security_Communication_RootCA3.crt
-share/ca-certificates/mozilla/Security_Communication_Root_CA.crt
 share/ca-certificates/mozilla/Starfield_Class_2_CA.crt
 share/ca-certificates/mozilla/Starfield_Root_Certificate_Authority_-_G2.crt
 share/ca-certificates/mozilla/Starfield_Services_Root_Certificate_Authority_-_G2.crt
 share/ca-certificates/mozilla/SwissSign_Gold_CA_-_G2.crt
-share/ca-certificates/mozilla/SwissSign_Silver_CA_-_G2.crt
 share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_2.crt
 share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_3.crt
 share/ca-certificates/mozilla/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt
+share/ca-certificates/mozilla/TWCA_CYBER_Root_CA.crt
 share/ca-certificates/mozilla/TWCA_Global_Root_CA.crt
 share/ca-certificates/mozilla/TWCA_Root_Certification_Authority.crt
+share/ca-certificates/mozilla/Telekom_Security_TLS_ECC_Root_2020.crt
+share/ca-certificates/mozilla/Telekom_Security_TLS_RSA_Root_2023.crt
 share/ca-certificates/mozilla/TeliaSonera_Root_CA_v1.crt
 share/ca-certificates/mozilla/Telia_Root_CA_v2.crt
 share/ca-certificates/mozilla/TrustAsia_Global_Root_CA_G3.crt

Index: pkgsrc/security/ca-certificates/distinfo
diff -u pkgsrc/security/ca-certificates/distinfo:1.12 pkgsrc/security/ca-certificates/distinfo:1.13
--- pkgsrc/security/ca-certificates/distinfo:1.12       Fri Mar 22 05:37:43 2024
+++ pkgsrc/security/ca-certificates/distinfo    Wed Apr 30 18:29:53 2025
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.12 2024/03/22 05:37:43 kim Exp $
+$NetBSD: distinfo,v 1.13 2025/04/30 18:29:53 kim Exp $
 
-BLAKE2s (ca-certificates_20240203.tar.xz) = 2540a2fa198fd8927b5a04e7bfe4388517bab77604971e5c649b8aabe5e62f6d
-SHA512 (ca-certificates_20240203.tar.xz) = e9d7b5283c2be9425d18eb4a9b54b1fa54db0b9d1bdb28f9c6db7f8b2e03fd93442ac973f9b024b7a148d71ac2789edbc1207c2048ce4be589eb1a5376640670
-Size (ca-certificates_20240203.tar.xz) = 263276 bytes
-SHA1 (patch-sbin_update-ca-certificates) = 0d52bd83bd69ade5cd32766a2f43fbfc59ef12ab
+BLAKE2s (ca-certificates_20250419.tar.xz) = 9c23134d0cd5268aca563392a90112ad1c532babc28c29f712bae844f8a39656
+SHA512 (ca-certificates_20250419.tar.xz) = 5a66a4aabbc18bce752b9e2d362309812cb685e24c0bb52cbb04cde3284b023034955c0ba8c9a3fa065392ab8372d166e6cb17b82fb336cb485e2b63485e9631
+Size (ca-certificates_20250419.tar.xz) = 277504 bytes
+SHA1 (patch-sbin_update-ca-certificates) = 8d8944d4139477fbf7f25021fa86a0116be0ea1a

Index: pkgsrc/security/ca-certificates/patches/patch-sbin_update-ca-certificates
diff -u pkgsrc/security/ca-certificates/patches/patch-sbin_update-ca-certificates:1.5 pkgsrc/security/ca-certificates/patches/patch-sbin_update-ca-certificates:1.6
--- pkgsrc/security/ca-certificates/patches/patch-sbin_update-ca-certificates:1.5       Wed Jul  5 18:13:22 2023
+++ pkgsrc/security/ca-certificates/patches/patch-sbin_update-ca-certificates   Wed Apr 30 18:29:53 2025
@@ -1,10 +1,10 @@
-$NetBSD: patch-sbin_update-ca-certificates,v 1.5 2023/07/05 18:13:22 kim Exp $
+$NetBSD: patch-sbin_update-ca-certificates,v 1.6 2025/04/30 18:29:53 kim Exp $
 
 Add a configuration file for enabling CA certificate management in
 a system directory (such as /etc/openssl on NetBSD).
 
---- sbin/update-ca-certificates.orig   2021-12-15 18:51:05.000000000 +0000
-+++ sbin/update-ca-certificates        2023-07-05 18:10:26.326602441 +0000
+--- sbin/update-ca-certificates.orig   2025-04-19 07:12:33.000000000 +0000
++++ sbin/update-ca-certificates        2025-04-30 18:06:44.691505573 +0000
 @@ -25,12 +25,27 @@
  fresh=0
  default=0
@@ -35,7 +35,7 @@ a system directory (such as /etc/openssl
  while [ $# -gt 0 ];
  do
    case $1 in
-@@ -66,6 +81,20 @@
+@@ -74,6 +89,20 @@
    shift
  done