From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Fri, 13 Nov 2026 09:40:38 +0100 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1xRmpp-00AMMk-2P for lore@lore.pengutronix.de; Fri, 13 Nov 2026 09:40:38 +0100 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xRmpn-0002iB-At; Fri, 13 Nov 2026 09:40:35 +0100 Received: from mx1.white.stw.pengutronix.de ([185.203.200.13]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xRmoU-0005LK-TJ for ptxdist@pengutronix.de; Fri, 13 Nov 2026 09:39:16 +0100 Received: from dude05.red.stw.pengutronix.de (dude05.red.stw.4.pengutronix.de [10.17.1.19]) (Authenticated sender: relay-from-dude05.red.stw.pengutronix.de) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPSA id CA7A22059D0; Fri, 13 Nov 2026 09:39:14 +0100 (CET) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=pengutronix.de; s=20260414; t=1794559154; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=qe7wXoXbhVksdnFK/78CHHI4DuD2AaqNqKHf+NW3MGs=; b=NGtSd47J/IwOkK0IzfkMU45o0eeD9VKgSh1MkzJqvs2EZ11y5UiSVSo1vaEjbbstRAahoD zsrG6BOy3kxv2oAOc5QSzS4bwjq5tkkplVBeFtfqS2ktV4jJNBiuzZoCex8gU9pfic0C7V Wi08SaXq+6tDJ1Y1UWDqhzWRdWq44psEnPs1td4YYSU3E1safDjXrMhVcjAzw/yp1vhTkU aQGUDw/3Xm8yELLh+ubmGN2yQzNykPHz8L9vB19lLDatpyU+EXBz5M2eWrIiOWJGM//XtF 1t4SQ/HBMaodGXNNPvl8vib5lJqucZkC2ZmuRh4pYMMOVuhglkUVV7hyVHOH8A== ARC-Seal: i=1; s=20260414; d=pengutronix.de; t=1794559154; a=rsa-sha256; cv=none; b=L9OpAskdLTQFn5MZSLmmtHJFOyMUUzQY/b+H/txvykKNmPcedh/XmYAbodjr3E0tXTGVaa V5JF5Fm0Vb546EsHdWAmu2ur0QpKgIrBgDDw7H+ecuHTxtFmKhyE5qOpQqhFZ5VIODLjBx 2sGRKPl7+/mdt2Co3GCnFBu0g7Q7yHrpd1dg3XvLWTmQlgrfJIbgoZ3MJDpzfJgZNb4oXT Mnatt1OURu9+cqrFB/IrOmsssVN6+BVxTnNXwRhapnxM7Y5NFuofaAxG/uqa2Iq2mVMbvM Pte93xOTRXaN3JP7RWsqq4LJzF1iKrex+B5wPw3VbEM56PTa86gc3KNXLZ7eTw== ARC-Authentication-Results: i=1; ORIGINATING; auth=pass smtp.auth=relay-from-dude05.red.stw.pengutronix.de smtp.mailfrom=mol@pengutronix.de Received: by dude05.red.stw.pengutronix.de (Postfix, from userid 1014) id BAC04743103; Fri, 13 Nov 2026 09:39:14 +0100 (CET) From: Michael Olbrich To: ptxdist@pengutronix.de Date: Fri, 13 Nov 2026 09:39:14 +0100 Message-ID: <20261113083914.1379904-1-m.olbrich@pengutronix.de> X-Mailer: git-send-email 2.47.3 In-Reply-To: <20261026151347.9747-1-bruno.thomsen@gmail.com> References: <20261026151347.9747-1-bruno.thomsen@gmail.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-3.0 required=5.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU autolearn=ham autolearn_force=no version=3.4.2 Subject: Re: [ptxdist] [APPLIED] ca-certificates: version bump 3.130 -> 3.132 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Cc: Bruno Thomsen Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Thanks, applied as 1843efe3d36bd1591a7466ec916d8324ba47f682. Michael [sent from post-receive hook] On Fri, 13 Nov 2026 09:39:14 +0100, Bruno Thomsen wrote: > Remove eMudhra emSign Root CA. > > https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_132.html > https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_131.html > > Signed-off-by: Bruno Thomsen > Message-Id: <20261026151347.9747-1-bruno.thomsen@gmail.com> > Signed-off-by: Michael Olbrich > > diff --git a/rules/ca-certificates.make b/rules/ca-certificates.make > index edebddb2cc1c..c0dfb8d0e466 100644 > --- a/rules/ca-certificates.make > +++ b/rules/ca-certificates.make > @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_CA_CERTIFICATES) += ca-certificates > # > # Paths and names > # > -CA_CERTIFICATES_VERSION := NSS_3_130_RTM > -CA_CERTIFICATES_SHA256 := beb7e6dfe6499926e52c075c27bcfbe4c957f8609c575b3860273ae2806f63eb > +CA_CERTIFICATES_VERSION := NSS_3_132_RTM > +CA_CERTIFICATES_SHA256 := 3ec2b4d240dc12c747eaf450061db84af757c483bbda302f9e29ceb5d70be510 > CA_CERTIFICATES := ca-certificates-$(CA_CERTIFICATES_VERSION) > CA_CERTIFICATES_SUFFIX := txt > CA_CERTIFICATES_URL := https://hg.mozilla.org/projects/nss/raw-file/$(CA_CERTIFICATES_VERSION)/lib/ckfw/builtins/certdata.$(CA_CERTIFICATES_SUFFIX)