wok rev 17947

cacerts: remove CNNIC Root Certificate (nothing else changed).
author Aleksej Bobylev <al.bobylev@gmail.com>
date Thu Apr 16 02:08:38 2015 +0300 (2015-04-16)
parents 4660dacfa5c4
children 46683195f95c
files cacerts/receipt cacerts/stuff/remove_cnnic.patch
line diff
     1.1 --- a/cacerts/receipt	Thu Apr 16 02:02:30 2015 +0300
     1.2 +++ b/cacerts/receipt	Thu Apr 16 02:08:38 2015 +0300
     1.3 @@ -1,7 +1,7 @@
     1.4  # SliTaz package receipt.
     1.5  
     1.6  PACKAGE="cacerts"
     1.7 -VERSION="20150325"
     1.8 +VERSION="20150415"
     1.9  CATEGORY="security"
    1.10  SHORT_DESC="Certificate Authority Certificates"
    1.11  MAINTAINER="al.bobylev@gmail.com"
    1.12 @@ -18,6 +18,7 @@
    1.13  compile_rules()
    1.14  {
    1.15  	mv -f *.txt certdata.txt &&
    1.16 +	patch -p1 < $stuff/remove_cnnic.patch &&
    1.17  	cp -a $stuff/* $src &&
    1.18  	./make-ca.sh &&
    1.19  	./remove-expired-certs.sh $src/certs
     2.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     2.2 +++ b/cacerts/stuff/remove_cnnic.patch	Thu Apr 16 02:08:38 2015 +0300
     2.3 @@ -0,0 +1,7 @@
     2.4 +# Remove CNNIC Root certificate (temporarily)
     2.5 +# http://googleonlinesecurity.blogspot.com/2015/03/maintaining-digital-certificate-security.html
     2.6 +--- a/certdata.txt
     2.7 ++++ b/certdata.txt
     2.8 +@@ -14889 +14889 @@
     2.9 +-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
    2.10 ++CKA_TRUST_SERVER_AUTH TRUST_UNKNOWN