-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 01 Jun 2020 11:45:49 -0500 Source: ca-certificates Architecture: source Version: 20200601 Distribution: unstable Urgency: medium Maintainer: Michael Shuler <michael@pbandjelly.org> Changed-By: Michael Shuler <michael@pbandjelly.org> Closes: 911289 955038 956411 961907 Changes: ca-certificates (20200601) unstable; urgency=medium . * debian/control: Set Standards-Version: 4.5.0.2 Set Build-Depends: debhelper-compat (= 13) * debian/copyright: Replace tabs in license text * mozilla/{certdata.txt,nssckbi.h}: Update Mozilla certificate authority bundle to version 2.40. Closes: #956411, #955038 * mozilla/blacklist.txt Add distrusted Symantec CA list to blacklist for explicit removal. Closes: #911289 Blacklist expired root certificate, "AddTrust External Root" Closes: #961907 The following certificate authorities were added (+): + "Certigna Root CA" + "emSign ECC Root CA - C3" + "emSign ECC Root CA - G3" + "emSign Root CA - C1" + "emSign Root CA - G1" + "Entrust Root Certification Authority - G4" + "GTS Root R1" + "GTS Root R2" + "GTS Root R3" + "GTS Root R4" + "Hongkong Post Root CA 3" + "UCA Extended Validation Root" + "UCA Global G2 Root" The following certificate authorities were removed (-): - "AddTrust External Root" - "Certinomis - Root CA" - "Certplus Class 2 Primary CA" - "Deutsche Telekom Root CA 2" - "GeoTrust Global CA" - "GeoTrust Primary Certification Authority" - "GeoTrust Primary Certification Authority - G2" - "GeoTrust Primary Certification Authority - G3" - "GeoTrust Universal CA" - "thawte Primary Root CA" - "thawte Primary Root CA - G2" - "thawte Primary Root CA - G3" - "VeriSign Class 3 Public Primary Certification Authority - G4" - "VeriSign Class 3 Public Primary Certification Authority - G5" - "VeriSign Universal Root Certification Authority" Checksums-Sha1: a50340689426d06821d0200f76b674f81c27e703 1582 ca-certificates_20200601.dsc f17235bc9c3aec538065a655681815c242a6d7d5 245668 ca-certificates_20200601.tar.xz Checksums-Sha256: 4c18f8be89824bc7e4c51895e513b0d8b748ea84e8190571aa4126ad9dcdd1fe 1582 ca-certificates_20200601.dsc 43766d5a436519503dfd65ab83488ae33ab4d4ca3d0993797b58c92eb9ed4e63 245668 ca-certificates_20200601.tar.xz Files: 47c286787c4b1c5881721370eec53369 1582 misc optional ca-certificates_20200601.dsc 9b37bd1bc002d9f041c0a811667cb65a 245668 misc optional ca-certificates_20200601.tar.xz -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEeuS9ZL8A0js0NGiOXkCM2RzYOdIFAl7WGXIACgkQXkCM2RzY OdIAgwf/STormWX7W2/whWSdJst/GJKJYqNTMihwKWQ9Hh3MXaZtvmFnLQS5CJ3M S0nizUZJ002glsUJoJCtKLcsM2Zs1TFFq10cl6ibpMzHcxGLR3QFfzOdwdPiN1YM 2zRxuVabcs8QLYqpxgZ1ZC34IgfwkHVNbYEyKu6IvWLYDI8fA8txJOcrBI1O679m t+0VToEsSxmKkLPqr0kNZwVE8i1QbvjIqLysUDrcXLxUAOcEQpgJ5nCPKxGAaxjN mqNNjIslp0znuRC6/iFOUSkAxkeUN07fu+qmm/NIO9B0+OHqLFi/hINC9oCiEQxD RA3BliNRYLdKzjKQEHhBPjAW9xZ5pw== =KDkw -----END PGP SIGNATURE-----