wok
annotate cacerts/stuff/remove_cnnic.patch @ rev 17947
cacerts: remove CNNIC Root Certificate (nothing else changed).
author |
Aleksej Bobylev <al.bobylev@gmail.com> |
date |
Thu Apr 16 02:08:38 2015 +0300 (2015-04-16) |
parents |
|
children |
|
rev |
line source |
al@17947
|
1 # Remove CNNIC Root certificate (temporarily)
|
al@17947
|
2 # http://googleonlinesecurity.blogspot.com/2015/03/maintaining-digital-certificate-security.html
|
al@17947
|
3 --- a/certdata.txt
|
al@17947
|
4 +++ b/certdata.txt
|
al@17947
|
5 @@ -14889 +14889 @@
|
al@17947
|
6 -CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
|
al@17947
|
7 +CKA_TRUST_SERVER_AUTH TRUST_UNKNOWN
|