From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Mon, 26 Oct 2026 16:14:20 +0100 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1xLMOy-003YU2-1Z for lore@lore.pengutronix.de; Mon, 26 Oct 2026 16:14:20 +0100 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xLMOy-0000LS-0P; Mon, 26 Oct 2026 16:14:20 +0100 Received: from mx1.white.stw.pengutronix.de ([185.203.200.13]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xLMOe-0000Kv-Nn for ptxdist@pengutronix.de; Mon, 26 Oct 2026 16:14:01 +0100 Received: from mail-ed1-x536.google.com (mail-ed1-x536.google.com [IPv6:2a00:1450:4864:20::536]) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPS id 5150A200F26 for ; Mon, 26 Oct 2026 16:13:56 +0100 (CET) ARC-Seal: i=1; s=20260414; d=pengutronix.de; t=1793027636; a=rsa-sha256; cv=none; b=MLkwHigYz68RUsYDYqghXVrUwss3xZ8JD0CKaJ1f82vQ5FaHY0q9lQLMh+CeUQaunYmaRZ OPhFdBN5CPAnh3JWYlq9bmE+XLZSjA38qszvl93uw0Su4GYY8fTmUOU+T4d2WWQw56CO0f o41m6RksMudZMjHtrk6ocQ2TgAHwV9Fm6fQ+3onY93T+0xNqRDlsH+Mb2wiRk1Ba/2OzMl 7uSUwifdzm8NjE57hRvEw9FdMcQ53PlgW59lD2w/ewN+a8kGXadC6etAm7+JKo1KzNVF86 zcDl5ti2/mnpcU7mrHZcrS61XJ/WwSqxqqGbYUcu5n0GVEMcI00aLGMr9DE85g== ARC-Authentication-Results: i=1; mx1.white.stw.pengutronix.de; dkim=pass header.d=gmail.com header.s=20251104 header.b=KfVb7Z9V; spf=pass (mx1.white.stw.pengutronix.de: domain of bruno.thomsen@gmail.com designates 2a00:1450:4864:20::536 as permitted sender) smtp.mailfrom=bruno.thomsen@gmail.com; dmarc=pass (policy=none) header.from=gmail.com ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=pengutronix.de; s=20260414; t=1793027636; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding:dkim-signature; bh=XRGHn8FXUq5grEfxBWZE5VUNPg647tQOHUOSEHPtTdY=; b=E0v1X3YMtwN4Zu3HyltiSaR58/HSJV7YBtBpg8mJ6pL/jih+Vy85nZ2dUmwHTlD64MhGJg tRssD8QKEebkn6gnATs6F/ZTkjPfG02bKTE54uj+Nra15m63odXY9aem/ax7O1Znt/bbHX ui7rwDXgiF8ksnTVsVBo61Gvh5oaErYgT5C/Zk8YywKrXuZaU0itvVPiSLuHSWj0IwZ+zb dYByQdxD5SSJXmYTG43il/QouKQQ+zjfaGTqoqGei3fERElRQ+Y4M5RX77JG7lFt49NDOD 9aWl+o9cNJ30M6Ml7eQ/tuB67s2QRSZ6SBCvMmjWekMe1bCBqKvcGD8ldkd6fg== Received: by mail-ed1-x536.google.com with SMTP id 4fb4d7f45d1cf-6a0794669a6so4007027a12.2 for ; Mon, 26 Oct 2026 08:13:56 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793027635; x=1793632435; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=XRGHn8FXUq5grEfxBWZE5VUNPg647tQOHUOSEHPtTdY=; b=aDev6WmH/tLmlAhhC6zELaBdjL6A72dPzc+m8fP9a/dEBbPrW1uYP+O9JoiFNePhbD uF+433QfdZaaXg6ZmbAOnteDHWAqnfGSVHvKDSHtOk6yraV5N/s7v7xup1Ez+54f0kLC 0c8W13WNEKsWeyBEqWWxWEmnpM0k+z9nn2fYmeHUIncGmkm2Jjvff3WEQSTqKsmr40Eb 5hHLTeGs4LNnVSp/P1LIhFFGXByrSQixLoC9rCnVWX8Pfsvwbej0qZazFTTEIymkHwJx 0wYhLN8ug8RvTSFd5HjXcXPpSy0OsZ7etuGvTDXvxWivJjJj2CNrPlV3rxuuGlW9XP7n Jvng== X-Gm-Message-State: AFq9FYJA/UiKHr0ilVqMKzuY0X4gBNOXwou5w4FKHmHYIysgUCwCyxPE 12OgffyL78l/aJqos83Lt3JNl529T218GzltM0lLOBFlM9XDpdbXimJ3VlnW9w== X-Gm-Gg: AYBFou1IiS9ao39VLXXUmUWpPxnfmfWlaLTShRTvCygUTRxvRB0sNqqiETEo8oXf3fC eJBytjzN6Mkm+aPEnhjxLjAIpSmjeqbnlxLegGjvOgOqZYt1sNjF+oGYd6XGJtSk4RVtU4cbFEB WQky2w33tSA2Cth6LJ5ypg2EfyrpBMAlKHNvdVEdHcl87qaspZDPXm2ACXc875EvZkp2IrY+5Re 5auCg/USWdc70F5RC/SXNlW9eQgW5puq3vFcdTRFrbNgdd37KohNrFxKy1Z2HUswQTozoTQY+5Z KnGzyhB8GwS42Cz+NWlXB/WgB8JHKvXR3tPlBfJ9M71Rs41kHWDQ0d5ELzQEyFXb1QDSAarJ62D 2yK6viomnbkJ0xmBu0tMRsMUuH+AOm7z78b1rzy87wbUTL/N3Pon54DKInQkVE4vE7QkahenORp 7Nbz7XEBH0nxAyc1jGMfFEy3fKn9MPZcFjI/mEop7A48v8UYJSCbwXPNz8RvY17Xmf7QQB9lQQ4 mSt2ZL891uYECXeg4QV+jzPROakM/Bx8mZBO9lvL+9vFG21GJnUdLLmlzWL2nmurGXxDuwjcDV+ opbT48lP3aE8sFzRrQeBRo9crfnny0O5bLj7lA== X-Received: by 2002:aa7:d6cd:0:b0:6af:d968:dd26 with SMTP id 4fb4d7f45d1cf-6b442fe8733mr5395451a12.25.1793027635341; Mon, 26 Oct 2026 08:13:55 -0700 (PDT) Received: from fedora.tux.internal (85.191.71.118.dynamic.dhcp.aura-net.dk. [85.191.71.118]) by smtp.gmail.com with ESMTPSA id 4fb4d7f45d1cf-6b467e42f75sm1640421a12.23.2026.10.26.08.13.53 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 26 Oct 2026 08:13:54 -0700 (PDT) From: Bruno Thomsen To: ptxdist@pengutronix.de Date: Mon, 26 Oct 2026 16:13:47 +0100 Message-ID: <20261026151347.9747-1-bruno.thomsen@gmail.com> X-Mailer: git-send-email 2.56.0 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Rspamd-Server: mx1 X-Rspamd-Queue-Id: 5150A200F26 X-Spamd-Result: default: False [-3.50 / 15.00]; BAYES_HAM(-3.00)[100.00%]; R_MISSING_CHARSET(0.50)[]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; R_SPF_ALLOW(-0.20)[+ip6:2a00:1450:4864::/56]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20251104]; MIME_GOOD(-0.10)[text/plain]; ARC_NA(0.00)[]; RCVD_TLS_LAST(0.00)[]; RCPT_COUNT_TWO(0.00)[2]; TO_MATCH_ENVRCPT_SOME(0.00)[]; MIME_TRACE(0.00)[0:+]; TO_DN_SOME(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim]; TAGGED_FROM(0.00)[]; FREEMAIL_ENVFROM(0.00)[gmail.com]; FREEMAIL_FROM(0.00)[gmail.com]; FROM_EQ_ENVFROM(0.00)[]; FREEMAIL_CC(0.00)[gmail.com]; RCVD_IN_DNSWL_NONE(0.00)[2a00:1450:4864:20::536:from]; NEURAL_HAM(-0.00)[-1.000]; PREVIOUSLY_DELIVERED(0.00)[ptxdist@pengutronix.de]; ARC_SIGNED(0.00)[pengutronix.de:s=20260414:i=1]; RCVD_COUNT_TWO(0.00)[2]; MID_RHS_MATCH_FROM(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; TAGGED_RCPT(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; FROM_HAS_DN(0.00)[] X-Rspamd-Action: no action X-Stat-Signature: jjnudn4b9xn6fitndryzxcaoquocc98s X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-1.5 required=5.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,FORGED_GMAIL_RCVD,FREEMAIL_FROM, RCVD_IN_DNSWL_NONE,SPF_HELO_NONE autolearn=no autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH] ca-certificates: version bump 3.130 -> 3.132 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Cc: Bruno Thomsen Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Remove eMudhra emSign Root CA. https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_132.html https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_131.html Signed-off-by: Bruno Thomsen --- rules/ca-certificates.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/ca-certificates.make b/rules/ca-certificates.make index edebddb2c..c0dfb8d0e 100644 --- a/rules/ca-certificates.make +++ b/rules/ca-certificates.make @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_CA_CERTIFICATES) += ca-certificates # # Paths and names # -CA_CERTIFICATES_VERSION := NSS_3_130_RTM -CA_CERTIFICATES_SHA256 := beb7e6dfe6499926e52c075c27bcfbe4c957f8609c575b3860273ae2806f63eb +CA_CERTIFICATES_VERSION := NSS_3_132_RTM +CA_CERTIFICATES_SHA256 := 3ec2b4d240dc12c747eaf450061db84af757c483bbda302f9e29ceb5d70be510 CA_CERTIFICATES := ca-certificates-$(CA_CERTIFICATES_VERSION) CA_CERTIFICATES_SUFFIX := txt CA_CERTIFICATES_URL := https://hg.mozilla.org/projects/nss/raw-file/$(CA_CERTIFICATES_VERSION)/lib/ckfw/builtins/certdata.$(CA_CERTIFICATES_SUFFIX) base-commit: 25578c25031573977db826d12d05156574cc2898 -- 2.53.0