CVS commit: pkgsrc/security/ca-certificates

["Kimmo Suominen" <kim%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   kim
Date:           Sat Apr  4 21:48:56 UTC 2026

Modified Files:
        pkgsrc/security/ca-certificates: Makefile PLIST distinfo

Log Message:
ca-certificates: Update to 20260223

ca-certificates (20260223) unstable; urgency=medium

  * Update Mozilla certificate authority bundle to version 2.82
    The following certificate authorities were added (+):
    + TrustAsia TLS ECC Root CA
    + TrustAsia TLS RSA Root CA
    + SwissSign RSA TLS Root CA 2022 - 1
    + OISTE Server Root ECC G1
    +  OISTE Server Root RSA G1
    The following certificate authorities were removed (-):
    - GlobalSign Root CA
    - Entrust.net Premium 2048 Secure Server CA
    - Baltimore CyberTrust Root (closes: #1121936)
    - Comodo AAA Services root
    - XRamp Global CA Root
    - Go Daddy Class 2 CA
    - Starfield Class 2 CA
    - CommScope Public Trust ECC Root-01
    - CommScope Public Trust ECC Root-02
    - CommScope Public Trust RSA Root-01
    - CommScope Public Trust RSA Root-02
  * Use dh_usrlocal to create /usr/local/share/ca-certificates
    (closes: #1127100)

 -- Julien Cristau <jcristau%debian.org@localhost>  Mon, 23 Feb 2026 17:46:55 +0100


To generate a diff of this commit:
cvs rdiff -u -r1.16 -r1.17 pkgsrc/security/ca-certificates/Makefile
cvs rdiff -u -r1.8 -r1.9 pkgsrc/security/ca-certificates/PLIST
cvs rdiff -u -r1.13 -r1.14 pkgsrc/security/ca-certificates/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/ca-certificates/Makefile
diff -u pkgsrc/security/ca-certificates/Makefile:1.16 pkgsrc/security/ca-certificates/Makefile:1.17
--- pkgsrc/security/ca-certificates/Makefile:1.16       Wed Apr 30 18:29:53 2025
+++ pkgsrc/security/ca-certificates/Makefile    Sat Apr  4 21:48:56 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.16 2025/04/30 18:29:53 kim Exp $
+# $NetBSD: Makefile,v 1.17 2026/04/04 21:48:56 kim Exp $
 
-PKGNAME=       ca-certificates-20250419
+PKGNAME=       ca-certificates-20260223
 DISTNAME=      ${PKGNAME_NOREV:C/-([^-]*)$/_\1/}
 CATEGORIES=    security
 MASTER_SITES=  http://deb.debian.org/debian/pool/main/c/ca-certificates/

Index: pkgsrc/security/ca-certificates/PLIST
diff -u pkgsrc/security/ca-certificates/PLIST:1.8 pkgsrc/security/ca-certificates/PLIST:1.9
--- pkgsrc/security/ca-certificates/PLIST:1.8   Wed Apr 30 18:29:53 2025
+++ pkgsrc/security/ca-certificates/PLIST       Sat Apr  4 21:48:56 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.8 2025/04/30 18:29:53 kim Exp $
+@comment $NetBSD: PLIST,v 1.9 2026/04/04 21:48:56 kim Exp $
 man/man8/update-ca-certificates.8
 sbin/update-ca-certificates
 share/ca-certificates/mozilla/ACCVRAIZ1.crt
@@ -20,7 +20,6 @@ share/ca-certificates/mozilla/Atos_Trust
 share/ca-certificates/mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt
 share/ca-certificates/mozilla/BJCA_Global_Root_CA1.crt
 share/ca-certificates/mozilla/BJCA_Global_Root_CA2.crt
-share/ca-certificates/mozilla/Baltimore_CyberTrust_Root.crt
 share/ca-certificates/mozilla/Buypass_Class_2_Root_CA.crt
 share/ca-certificates/mozilla/Buypass_Class_3_Root_CA.crt
 share/ca-certificates/mozilla/CA_Disig_Root_R2.crt
@@ -36,11 +35,6 @@ share/ca-certificates/mozilla/Certum_EC-
 share/ca-certificates/mozilla/Certum_Trusted_Network_CA.crt
 share/ca-certificates/mozilla/Certum_Trusted_Network_CA_2.crt
 share/ca-certificates/mozilla/Certum_Trusted_Root_CA.crt
-share/ca-certificates/mozilla/CommScope_Public_Trust_ECC_Root-01.crt
-share/ca-certificates/mozilla/CommScope_Public_Trust_ECC_Root-02.crt
-share/ca-certificates/mozilla/CommScope_Public_Trust_RSA_Root-01.crt
-share/ca-certificates/mozilla/CommScope_Public_Trust_RSA_Root-02.crt
-share/ca-certificates/mozilla/Comodo_AAA_Services_root.crt
 share/ca-certificates/mozilla/D-TRUST_BR_Root_CA_1_2020.crt
 share/ca-certificates/mozilla/D-TRUST_BR_Root_CA_2_2023.crt
 share/ca-certificates/mozilla/D-TRUST_EV_Root_CA_1_2020.crt
@@ -57,7 +51,6 @@ share/ca-certificates/mozilla/DigiCert_H
 share/ca-certificates/mozilla/DigiCert_TLS_ECC_P384_Root_G5.crt
 share/ca-certificates/mozilla/DigiCert_TLS_RSA4096_Root_G5.crt
 share/ca-certificates/mozilla/DigiCert_Trusted_Root_G4.crt
-share/ca-certificates/mozilla/Entrust.net_Premium_2048_Secure_Server_CA.crt
 share/ca-certificates/mozilla/Entrust_Root_Certification_Authority.crt
 share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_EC1.crt
 share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G2.crt
@@ -70,12 +63,10 @@ share/ca-certificates/mozilla/GTS_Root_R
 share/ca-certificates/mozilla/GTS_Root_R4.crt
 share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R4.crt
 share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R5.crt
-share/ca-certificates/mozilla/GlobalSign_Root_CA.crt
 share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R3.crt
 share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R6.crt
 share/ca-certificates/mozilla/GlobalSign_Root_E46.crt
 share/ca-certificates/mozilla/GlobalSign_Root_R46.crt
-share/ca-certificates/mozilla/Go_Daddy_Class_2_CA.crt
 share/ca-certificates/mozilla/Go_Daddy_Root_Certificate_Authority_-_G2.crt
 share/ca-certificates/mozilla/HARICA_TLS_ECC_Root_CA_2021.crt
 share/ca-certificates/mozilla/HARICA_TLS_RSA_Root_CA_2021.crt
@@ -93,6 +84,7 @@ share/ca-certificates/mozilla/Microsoft_
 share/ca-certificates/mozilla/Microsoft_RSA_Root_Certificate_Authority_2017.crt
 share/ca-certificates/mozilla/NAVER_Global_Root_Certification_Authority.crt
 share/ca-certificates/mozilla/NetLock_Arany_=Class_Gold=_Főtanúsítvány.crt
+share/ca-certificates/mozilla/OISTE_Server_Root_ECC_G1.crt
 share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GB_CA.crt
 share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GC_CA.crt
 share/ca-certificates/mozilla/QuoVadis_Root_CA_1_G3.crt
@@ -116,10 +108,10 @@ share/ca-certificates/mozilla/SecureTrus
 share/ca-certificates/mozilla/Secure_Global_CA.crt
 share/ca-certificates/mozilla/Security_Communication_ECC_RootCA1.crt
 share/ca-certificates/mozilla/Security_Communication_RootCA2.crt
-share/ca-certificates/mozilla/Starfield_Class_2_CA.crt
 share/ca-certificates/mozilla/Starfield_Root_Certificate_Authority_-_G2.crt
 share/ca-certificates/mozilla/Starfield_Services_Root_Certificate_Authority_-_G2.crt
 share/ca-certificates/mozilla/SwissSign_Gold_CA_-_G2.crt
+share/ca-certificates/mozilla/SwissSign_RSA_TLS_Root_CA_2022_-_1.crt
 share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_2.crt
 share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_3.crt
 share/ca-certificates/mozilla/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt
@@ -132,6 +124,8 @@ share/ca-certificates/mozilla/TeliaSoner
 share/ca-certificates/mozilla/Telia_Root_CA_v2.crt
 share/ca-certificates/mozilla/TrustAsia_Global_Root_CA_G3.crt
 share/ca-certificates/mozilla/TrustAsia_Global_Root_CA_G4.crt
+share/ca-certificates/mozilla/TrustAsia_TLS_ECC_Root_CA.crt
+share/ca-certificates/mozilla/TrustAsia_TLS_RSA_Root_CA.crt
 share/ca-certificates/mozilla/Trustwave_Global_Certification_Authority.crt
 share/ca-certificates/mozilla/Trustwave_Global_ECC_P256_Certification_Authority.crt
 share/ca-certificates/mozilla/Trustwave_Global_ECC_P384_Certification_Authority.crt
@@ -140,7 +134,7 @@ share/ca-certificates/mozilla/UCA_Extend
 share/ca-certificates/mozilla/UCA_Global_G2_Root.crt
 share/ca-certificates/mozilla/USERTrust_ECC_Certification_Authority.crt
 share/ca-certificates/mozilla/USERTrust_RSA_Certification_Authority.crt
-share/ca-certificates/mozilla/XRamp_Global_CA_Root.crt
+share/ca-certificates/mozilla/_OISTE_Server_Root_RSA_G1.crt
 share/ca-certificates/mozilla/certSIGN_ROOT_CA.crt
 share/ca-certificates/mozilla/certSIGN_Root_CA_G2.crt
 share/ca-certificates/mozilla/e-Szigno_Root_CA_2017.crt

Index: pkgsrc/security/ca-certificates/distinfo
diff -u pkgsrc/security/ca-certificates/distinfo:1.13 pkgsrc/security/ca-certificates/distinfo:1.14
--- pkgsrc/security/ca-certificates/distinfo:1.13       Wed Apr 30 18:29:53 2025
+++ pkgsrc/security/ca-certificates/distinfo    Sat Apr  4 21:48:56 2026
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.13 2025/04/30 18:29:53 kim Exp $
+$NetBSD: distinfo,v 1.14 2026/04/04 21:48:56 kim Exp $
 
-BLAKE2s (ca-certificates_20250419.tar.xz) = 9c23134d0cd5268aca563392a90112ad1c532babc28c29f712bae844f8a39656
-SHA512 (ca-certificates_20250419.tar.xz) = 5a66a4aabbc18bce752b9e2d362309812cb685e24c0bb52cbb04cde3284b023034955c0ba8c9a3fa065392ab8372d166e6cb17b82fb336cb485e2b63485e9631
-Size (ca-certificates_20250419.tar.xz) = 277504 bytes
+BLAKE2s (ca-certificates_20260223.tar.xz) = 72741f46ba6aae85b9cac54f55d0119c3679349e2ef6170a37c3ed9a50a75574
+SHA512 (ca-certificates_20260223.tar.xz) = 19b729f602756e8f909ee741fc11c288e167032b4bde243ce4b29a7a3392d28103d60df6c0c16875791fa355ce7abcf3050501ddcf1ac4e545c951c69a55c534
+Size (ca-certificates_20260223.tar.xz) = 282672 bytes
 SHA1 (patch-sbin_update-ca-certificates) = 8d8944d4139477fbf7f25021fa86a0116be0ea1a