[ptxdist] [PATCH] ca-certificates: version bump NSS_3_68_RTM -> NSS_3_82_RTM

[ptxdist] [PATCH] ca-certificates: version bump NSS_3_68_RTM -> NSS_3_82_RTM

[Bruno Thomsen]

MD5 fingerprints has been replaced with SHA256 fingerprints.
The following changes in list of trusted certificates.

Removed certificates:

$ diff certdata-NSS_3_{68,82}_RTM.txt -u | grep "# Certificate " | grep -- "-# " | cut -c16-
"GlobalSign Root CA - R2"
"DST Root CA X3"
"Cybertrust Global Root"
"Explicitly Distrusted DigiNotar PKIoverheid G2"
"Hellenic Academic and Research Institutions RootCA 2011"
"GlobalSign ECC Root CA - R4"
"GTS Root R1"
"GTS Root R2"
"GTS Root R3"
"GTS Root R4"

Added certificates:

$ diff certdata-NSS_3_{68,82}_RTM.txt -u | grep "# Certificate " | grep -- "+# " | cut -c16-
"TunTrust Root CA"
"HARICA TLS RSA Root CA 2021"
"HARICA TLS ECC Root CA 2021"
"HARICA Client RSA Root CA 2021"
"HARICA Client ECC Root CA 2021"
"Autoridad de Certificacion Firmaprofesional CIF A62634068"
"vTrus ECC Root CA"
"vTrus Root CA"
"ISRG Root X2"
"HiPKI Root CA - G1"
"GlobalSign ECC Root CA - R4"
"GTS Root R1"
"GTS Root R2"
"GTS Root R3"
"GTS Root R4"
"Telia Root CA v2"
"D-TRUST BR Root CA 1 2020"
"D-TRUST EV Root CA 1 2020"
"DigiCert TLS ECC P384 Root G5"
"DigiCert TLS RSA4096 Root G5"
"DigiCert SMIME ECC P384 Root G5"
"DigiCert SMIME RSA4096 Root G5"
"Certainly Root R1"
"Certainly Root E1"
"E-Tugra Global Root CA RSA v3"
"E-Tugra Global Root CA ECC v3"

There seems to be a new sorting of some certificates, so that is way
the following are on both lists.

"GlobalSign ECC Root CA - R4
"GTS Root R1"
"GTS Root R2"
"GTS Root R3"
"GTS Root R4"

Signed-off-by: Bruno Thomsen <bruno.thomsen@gmail.com>
---
 rules/ca-certificates.make | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/rules/ca-certificates.make b/rules/ca-certificates.make
index 1a1bec5e7..a9b6454f1 100644
--- a/rules/ca-certificates.make
+++ b/rules/ca-certificates.make
@@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_CA_CERTIFICATES) += ca-certificates
 #
 # Paths and names
 #
-CA_CERTIFICATES_VERSION		:= NSS_3_68_RTM
-CA_CERTIFICATES_MD5		:= dd24833986a20d246a791be29f99acd9
+CA_CERTIFICATES_VERSION		:= NSS_3_82_RTM
+CA_CERTIFICATES_MD5		:= 1f52e5ce5b8a9c45f9098feb317b4e2d
 CA_CERTIFICATES			:= ca-certificates-$(CA_CERTIFICATES_VERSION)
 CA_CERTIFICATES_SUFFIX		:= txt
 CA_CERTIFICATES_URL		:= https://hg.mozilla.org/projects/nss/raw-file/$(CA_CERTIFICATES_VERSION)/lib/ckfw/builtins/certdata.$(CA_CERTIFICATES_SUFFIX)

base-commit: bdb6f5f98505a13dbeffda3dfdea4a4f3bf586c6
-- 
2.37.2

Re: [ptxdist] [APPLIED] ca-certificates: version bump NSS_3_68_RTM -> NSS_3_82_RTM

[Michael Olbrich]

Thanks, applied as 417cde5ba9c3be75b8cd3407d5e1f141c58c6612.

Michael

[sent from post-receive hook]

On Tue, 30 Aug 2022 11:09:34 +0200, Bruno Thomsen <bruno.thomsen@gmail.com> wrote:
> MD5 fingerprints has been replaced with SHA256 fingerprints.
> The following changes in list of trusted certificates.
> 
> Removed certificates:
> 
> $ diff certdata-NSS_3_{68,82}_RTM.txt -u | grep "# Certificate " | grep -- "-# " | cut -c16-
> "GlobalSign Root CA - R2"
> "DST Root CA X3"
> "Cybertrust Global Root"
> "Explicitly Distrusted DigiNotar PKIoverheid G2"
> "Hellenic Academic and Research Institutions RootCA 2011"
> "GlobalSign ECC Root CA - R4"
> "GTS Root R1"
> "GTS Root R2"
> "GTS Root R3"
> "GTS Root R4"
> 
> Added certificates:
> 
> $ diff certdata-NSS_3_{68,82}_RTM.txt -u | grep "# Certificate " | grep -- "+# " | cut -c16-
> "TunTrust Root CA"
> "HARICA TLS RSA Root CA 2021"
> "HARICA TLS ECC Root CA 2021"
> "HARICA Client RSA Root CA 2021"
> "HARICA Client ECC Root CA 2021"
> "Autoridad de Certificacion Firmaprofesional CIF A62634068"
> "vTrus ECC Root CA"
> "vTrus Root CA"
> "ISRG Root X2"
> "HiPKI Root CA - G1"
> "GlobalSign ECC Root CA - R4"
> "GTS Root R1"
> "GTS Root R2"
> "GTS Root R3"
> "GTS Root R4"
> "Telia Root CA v2"
> "D-TRUST BR Root CA 1 2020"
> "D-TRUST EV Root CA 1 2020"
> "DigiCert TLS ECC P384 Root G5"
> "DigiCert TLS RSA4096 Root G5"
> "DigiCert SMIME ECC P384 Root G5"
> "DigiCert SMIME RSA4096 Root G5"
> "Certainly Root R1"
> "Certainly Root E1"
> "E-Tugra Global Root CA RSA v3"
> "E-Tugra Global Root CA ECC v3"
> 
> There seems to be a new sorting of some certificates, so that is way
> the following are on both lists.
> 
> "GlobalSign ECC Root CA - R4
> "GTS Root R1"
> "GTS Root R2"
> "GTS Root R3"
> "GTS Root R4"
> 
> Signed-off-by: Bruno Thomsen <bruno.thomsen@gmail.com>
> Message-Id: <20220824050110.5317-1-bruno.thomsen@gmail.com>
> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
> 
> diff --git a/rules/ca-certificates.make b/rules/ca-certificates.make
> index 1a1bec5e7006..a9b6454f1f08 100644
> --- a/rules/ca-certificates.make
> +++ b/rules/ca-certificates.make
> @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_CA_CERTIFICATES) += ca-certificates
>  #
>  # Paths and names
>  #
> -CA_CERTIFICATES_VERSION		:= NSS_3_68_RTM
> -CA_CERTIFICATES_MD5		:= dd24833986a20d246a791be29f99acd9
> +CA_CERTIFICATES_VERSION		:= NSS_3_82_RTM
> +CA_CERTIFICATES_MD5		:= 1f52e5ce5b8a9c45f9098feb317b4e2d
>  CA_CERTIFICATES			:= ca-certificates-$(CA_CERTIFICATES_VERSION)
>  CA_CERTIFICATES_SUFFIX		:= txt
>  CA_CERTIFICATES_URL		:= https://hg.mozilla.org/projects/nss/raw-file/$(CA_CERTIFICATES_VERSION)/lib/ckfw/builtins/certdata.$(CA_CERTIFICATES_SUFFIX)