public-mirrors/ca-certificates
1
0
Fork 0
mirror of https://git.launchpad.net/ubuntu/+source/ca-certificates synced 2025-04-13 09:38:26 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

20090701 (patches unapplied)

Browse source 
Imported using git-ubuntu import.
This commit is contained in:
Philipp Kern 2009-07-01 14:50:00 +02:00 • committed by git-ubuntu importer
parent 0b0f1b1ec0
commit 4c4a346f60
Notes: git-ubuntu importer 2020-07-14 23:24:44 +00:00 
  * Reactivated "Equifax Secure Global eBusiness CA".  (Closes: #534674)
    Rationale: The rogue collision CA has its validity period in the past.
    Thus it does not impose a risk upon us at the moment.
  * Restrict search for local certificates to add on files ending with '.crt'.
  * Canonicalize PEM names by applying the same set of substitions to
    local and other certificates like the Mozilla certdata dumper does.
5 changed files with 23 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
debian/NEWS vendored
View file

@ -1,3 +1,9 @@
ca-certificates (20090701) unstable; urgency=low
* Readded Equifax Secure Global eBusiness CA.
-- Philipp Kern <pkern@debian.org> Wed, 01 Jul 2009 14:47:02 +0200
ca-certificates (20090624) unstable; urgency=low ca-certificates (20090624) unstable; urgency=low
* This update eases the installation of local certification authorities * This update eases the installation of local certification authorities

11
debian/changelog vendored
View file

@ -1,3 +1,14 @@
ca-certificates (20090701) unstable; urgency=low
* Reactivated "Equifax Secure Global eBusiness CA". (Closes: #534674)
Rationale: The rogue collision CA has its validity period in the past.
Thus it does not impose a risk upon us at the moment.
* Restrict search for local certificates to add on files ending with '.crt'.
* Canonicalize PEM names by applying the same set of substitions to
local and other certificates like the Mozilla certdata dumper does.
-- Philipp Kern <pkern@debian.org> Wed, 01 Jul 2009 14:50:00 +0200
ca-certificates (20090624) unstable; urgency=low ca-certificates (20090624) unstable; urgency=low
* Allow local certificate installation. All certificates found * Allow local certificate installation. All certificates found

4
debian/config vendored
View file

File diff suppressed because one or more lines are too long

3
mozilla/blacklist.txt
View file

@ -1,8 +1,5 @@
# One blacklist entry per line, corresponding to the label in certdata.txt. # One blacklist entry per line, corresponding to the label in certdata.txt.
# Parent of "MD5 Collisions Forged Rogue CA 25c3"
"Equifax Secure Global eBusiness CA"
# MD5 Collision Proof of Concept CA # MD5 Collision Proof of Concept CA
"MD5 Collisions Forged Rogue CA 25c3" "MD5 Collisions Forged Rogue CA 25c3"

6
sbin/update-ca-certificates
View file

@ -60,7 +60,9 @@ REMOVED="$(mktemp -t "ca-certificates.tmp.XXXXXX")"
# bundle. # bundle.
add() { add() {
CERT="$1" CERT="$1"
PEM="$ETCCERTSDIR/$(basename "$CERT" .crt).pem" PEM="$ETCCERTSDIR/$(basename "$CERT" .crt | sed -e 's/ /_/g' \
-e 's/[()]/=/g' \
-e 's/,/_/g').pem"
if ! test -e "$PEM" || [ "$(readlink "$PEM")" != "$CERT" ] if ! test -e "$PEM" || [ "$(readlink "$PEM")" != "$CERT" ]
then then
ln -sf "$CERT" "$PEM" ln -sf "$CERT" "$PEM"
@ -118,7 +120,7 @@ done
# administrator. # administrator.
if [ -d "$LOCALCERTSDIR" ] if [ -d "$LOCALCERTSDIR" ]
then then
find -L "$LOCALCERTSDIR" -type f | while read crt find -L "$LOCALCERTSDIR" -type f -name '*.crt' | while read crt
do do
add "$crt" add "$crt"
done done