Hello community,
here is the log from the commit of package ca-certificates-mozilla for
openSUSE:Factory checked in at 2014-06-18 10:59:38
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/ca-certificates-mozilla (Old)
and /work/SRC/openSUSE:Factory/.ca-certificates-mozilla.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "ca-certificates-mozilla"
Changes:
--------
---
/work/SRC/openSUSE:Factory/ca-certificates-mozilla/ca-certificates-mozilla.changes
2014-02-25 16:41:07.000000000 +0100
+++
/work/SRC/openSUSE:Factory/.ca-certificates-mozilla.new/ca-certificates-mozilla.changes
2014-06-18 10:59:45.000000000 +0200
@@ -1,0 +2,17 @@
+Tue Jun 10 12:52:29 UTC 2014 - [email protected]
+
+- in sle11 we bumped openssl-certs version to match the NSS version,
+ so provide/obsolete the current version.
+
+-------------------------------------------------------------------
+Wed Jun 4 08:21:33 UTC 2014 - [email protected]
+
+- updated certificates to revision 1.97 (bnc#881241)
+ new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
+ new: "Tugra Certification Authority" (codeSigning serverAuth)
+ removed: "Firmaprofesional Root CA"
+ removed: "TDC OCES Root CA"
+ new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
+ new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)
+
+-------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ ca-certificates-mozilla.spec ++++++
--- /var/tmp/diff_new_pack.7dVaXR/_old 2014-06-18 10:59:46.000000000 +0200
+++ /var/tmp/diff_new_pack.7dVaXR/_new 2014-06-18 10:59:46.000000000 +0200
@@ -26,7 +26,7 @@
Name: ca-certificates-mozilla
# Version number is NSS_BUILTINS_LIBRARY_VERSION in this file:
#
https://hg.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/nssckbi.h
-Version: 1.96
+Version: 1.97
Release: 0
Summary: CA certificates for OpenSSL
License: MPL-2.0
@@ -38,8 +38,10 @@
# - download the new certdata.txt
# wget -O certdata.txt
"https://hg.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt";
# - run compareoldnew to show fingerprints of new and changed certificates
-# - check the bugs referenced in cvs log and compare the checksum
+# - check the bugs referenced in hg log and compare the checksum
# to output of compareoldnew
+# The correct history of the file is actually in the nss repo:
+#
http://hg.mozilla.org/projects/nss/log/8f026c806587/lib/ckfw/builtins/certdata.txt
# - Watch out that blacklisted or untrusted certificates are not
# accidentally included!
Source:
https://hg.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt
@@ -54,8 +56,8 @@
Requires(post): ca-certificates
Requires(postun): ca-certificates
#
-Provides: openssl-certs = 0.9.9
-Obsoletes: openssl-certs < 0.9.9
+Provides: openssl-certs = %version
+Obsoletes: openssl-certs < %version
%description
This package contains some CA root certificates for OpenSSL extracted
++++++ certdata.txt ++++++
++++ 1103 lines (skipped)
++++ between /work/SRC/openSUSE:Factory/ca-certificates-mozilla/certdata.txt
++++ and /work/SRC/openSUSE:Factory/.ca-certificates-mozilla.new/certdata.txt
++++++ compareoldnew ++++++
--- /var/tmp/diff_new_pack.7dVaXR/_old 2014-06-18 10:59:46.000000000 +0200
+++ /var/tmp/diff_new_pack.7dVaXR/_new 2014-06-18 10:59:46.000000000 +0200
@@ -8,7 +8,8 @@
showcert()
{
openssl x509 -in "$1" -noout -subject -fingerprint -nameopt
multiline,utf8,-esc_msb \
- | sed -ne 's/ *commonName *= / CN: /p; s/.*Fingerprint=/ sha1: /p'
+ | sed -ne 's/ *commonName *= / CN=/p; s/.*Fingerprint=/ sha1=/p'
+ sed -ne '/^# \(openssl\|distrust\|alias\)/s/^#/ /p' < "$1"
}
cleanup
trap cleanup EXIT
@@ -32,13 +33,13 @@
new="$2"
common="$3"
if [ -n "$old" ]; then
- echo "> removed: $old"
+ echo "- $old"
showcert old/$old
elif [ -n "$new" ]; then
- echo "> new: $new"
+ echo "+ $new"
showcert new/$new
elif ! cmp "old/$common" "new/$common"; then
- echo "> changed: $common"
+ echo "~ $common"
showcert old/$common
showcert new/$common
diff -u old/$common new/$common || true
++++++ nssckbi.h ++++++
--- /var/tmp/diff_new_pack.7dVaXR/_old 2014-06-18 10:59:46.000000000 +0200
+++ /var/tmp/diff_new_pack.7dVaXR/_new 2014-06-18 10:59:46.000000000 +0200
@@ -45,8 +45,8 @@
* of the comment in the CK_VERSION type definition.
*/
#define NSS_BUILTINS_LIBRARY_VERSION_MAJOR 1
-#define NSS_BUILTINS_LIBRARY_VERSION_MINOR 96
-#define NSS_BUILTINS_LIBRARY_VERSION "1.96"
+#define NSS_BUILTINS_LIBRARY_VERSION_MINOR 97
+#define NSS_BUILTINS_LIBRARY_VERSION "1.97"
/* These version numbers detail the semantic changes to the ckfw engine. */
#define NSS_BUILTINS_HARDWARE_VERSION_MAJOR 1
--
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
