wok-6.x rev 17947
cacerts: remove CNNIC Root Certificate (nothing else changed).
author | Aleksej Bobylev <al.bobylev@gmail.com> |
---|---|
date | Thu Apr 16 02:08:38 2015 +0300 (2015-04-16) |
parents | 4660dacfa5c4 |
children | 46683195f95c |
files | cacerts/receipt cacerts/stuff/remove_cnnic.patch |
line diff
1.1 --- a/cacerts/receipt Thu Apr 16 02:02:30 2015 +0300 1.2 +++ b/cacerts/receipt Thu Apr 16 02:08:38 2015 +0300 1.3 @@ -1,7 +1,7 @@ 1.4 # SliTaz package receipt. 1.5 1.6 PACKAGE="cacerts" 1.7 -VERSION="20150325" 1.8 +VERSION="20150415" 1.9 CATEGORY="security" 1.10 SHORT_DESC="Certificate Authority Certificates" 1.11 MAINTAINER="al.bobylev@gmail.com" 1.12 @@ -18,6 +18,7 @@ 1.13 compile_rules() 1.14 { 1.15 mv -f *.txt certdata.txt && 1.16 + patch -p1 < $stuff/remove_cnnic.patch && 1.17 cp -a $stuff/* $src && 1.18 ./make-ca.sh && 1.19 ./remove-expired-certs.sh $src/certs
2.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 2.2 +++ b/cacerts/stuff/remove_cnnic.patch Thu Apr 16 02:08:38 2015 +0300 2.3 @@ -0,0 +1,7 @@ 2.4 +# Remove CNNIC Root certificate (temporarily) 2.5 +# http://googleonlinesecurity.blogspot.com/2015/03/maintaining-digital-certificate-security.html 2.6 +--- a/certdata.txt 2.7 ++++ b/certdata.txt 2.8 +@@ -14889 +14889 @@ 2.9 +-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR 2.10 ++CKA_TRUST_SERVER_AUTH TRUST_UNKNOWN