Bug#962596: Divergence in Symantec CA blacklist reverting between sid and *stable?

2021-03-15 Thread Julien Cristau 
On Mon, Mar 15, 2021 at 05:44:44PM +, Thorsten Glaser wrote:
> Hi Julien,
> 
> >Yes, they're different.  I'm not sure what you're asking.
> 
> the reason for the difference; sorry if I was unclear.
> 
They're different versions of the mozilla root store, so they include
different sets of CA certificates.

Cheers,
Julien

Bug#962596: Divergence in Symantec CA blacklist reverting between sid and *stable?

2021-03-15 Thread Thorsten Glaser 
Hi Julien,

>Yes, they're different.  I'm not sure what you're asking.

the reason for the difference; sorry if I was unclear.

Thanks,
//mirabilos
-- 
18:47⎜ well channels… you see, I see everything in the
same window anyway  18:48⎜ i know, you have some kind of
telnet with automatic pong 18:48⎜ haha, yes :D
18:49⎜ though that's more tinyirc – sirc is more comfy

Bug#962596: Divergence in Symantec CA blacklist reverting between sid and *stable?

2021-03-15 Thread Julien Cristau 
On Sat, Mar 13, 2021 at 08:32:32PM +, Thorsten Glaser wrote:
> Hi,
> 
> the changelogs seem to differ in re-added certificates:
> 
Yes, they're different.  I'm not sure what you're asking.

Cheers,
Julien

Bug#962596: Divergence in Symantec CA blacklist reverting between sid and *stable?

2021-03-13 Thread Thorsten Glaser 
Hi,

the changelogs seem to differ in re-added certificates:

 ca-certificates (20210119) unstable; urgency=medium

   [ Michael Shuler ]
   * mozilla/blacklist:
 Revert Symantec CA blacklist (#911289). Closes: #962596
 The following root certificates were added back (+):
 + "GeoTrust Primary Certification Authority - G2"
 + "VeriSign Universal Root Certification Authority"

 ca-certificates (20200601~deb10u2) buster; urgency=medium

   [ Michael Shuler ]
   * mozilla/blacklist:
 Revert Symantec CA blacklist (#911289). Closes: #962596, #968002.
 The following root certificates were added back (+):
 + "GeoTrust Global CA"
 + "GeoTrust Primary Certification Authority"
 + "GeoTrust Primary Certification Authority - G2"
 + "GeoTrust Primary Certification Authority - G3"
 + "GeoTrust Universal CA"
 + "thawte Primary Root CA"
 + "thawte Primary Root CA - G2"
 + "thawte Primary Root CA - G3"
 + "VeriSign Class 3 Public Primary Certification Authority - G4"
 + "VeriSign Class 3 Public Primary Certification Authority - G5"
 + "VeriSign Universal Root Certification Authority"

 ca-certificates (20200601~deb9u2) stretch-security; urgency=high

   * mozilla/blacklist:
 Revert Symantec CA blacklist (#911289). Closes: #962596
 The following root certificates were added back (+):
 + "GeoTrust Global CA"
 + "GeoTrust Primary Certification Authority"
 + "GeoTrust Primary Certification Authority - G2"
 + "GeoTrust Primary Certification Authority - G3"
 + "GeoTrust Universal CA"
 + "thawte Primary Root CA"
 + "thawte Primary Root CA - G2"
 + "thawte Primary Root CA - G3"
 + "VeriSign Class 3 Public Primary Certification Authority - G4"
 + "VeriSign Class 3 Public Primary Certification Authority - G5"
 + "VeriSign Universal Root Certification Authority"

So, which is correct?

Thanks in advance,
//mirabilos
-- 
 you introduced a merge commit│ % g rebase -i HEAD^^
 sorry, no idea and rebasing just fscked │ Segmentation
 should have cloned into a clean repo  │  fault (core dumped)
 if I rebase that now, it's really ugh │ wuahh