Commit ID: 10050E8C02C69331119
CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2013/01/06 00:08:10 UTC
Modified files:
etc : ssl.certs.shar
Log message:
• SECURITY: remove TÜRKTRUST because they apparently “accidentally” issue
intermediate roots when the request was just for a regular certificate,
do not notice it and a “*.google.com” cert signed by that was seen in the
wild (the patch to explicitly distrust certificates in OpenSSL is still
not ready)
• remove expired ones
To generate a diff of this changeset, execute the following commands:
cvs -R rdiff -kk -upr1.40 -r1.41 src/etc/ssl.certs.shar