Import Debian version 20090708

[ca-certificates.git] / debian / NEWS

diff --git a/debian/NEWS b/debian/NEWS
index 3444df19886513f573df1d8d8493d0b150b8a5c9..6a0b57a2a6a89853125d16d906e5b7e5d8960723 100644 (file)
--- a/debian/NEWS
+++ b/debian/NEWS
@@ -1,4 +1,64 @@
-ca-certificates (20080319) unstable; urgency=low
+ca-certificates (20090708) unstable; urgency=low
+
+  * Removed CA files:
+    - cacert.org/root.crt and cacert.org/class3.crt:
+      Both certificate files were deprecated with 20080809.  Users of these
+      root certificates are encouraged to switch to
+      `cacert.org/cacert.org.crt' which contains both class 1 and class 3
+      roots joined in a single file.
+    - quovadis.bm/QuoVadis_Root_Certification_Authority.crt:
+      This certificate has been added into the Mozilla truststore and
+      is available as `mozilla/QuoVadis_Root_CA.crt'.
+
+ -- Philipp Kern <pkern@debian.org>  Wed, 08 Jul 2009 23:19:56 +0200
+
+ca-certificates (20090701) unstable; urgency=low
+
+  * Readded Equifax Secure Global eBusiness CA.
+
+ -- Philipp Kern <pkern@debian.org>  Wed, 01 Jul 2009 14:47:02 +0200
+
+ca-certificates (20090624) unstable; urgency=low
+
+  * This update eases the installation of local certification authorities
+    by providing a canonical location in `/usr/local/share/ca-certificates'.
+    All certificates found in this directory will automatically be included
+    into the list of trusted certificates.  For details please see
+    `/usr/share/doc/ca-certificates/README.Debian'.
+  * New CA certificates:
+    - COMODO ECC Certification Authority
+    - DigiNotar Root CA
+    - Network Solutions Certificate Authority
+    - WellsSecure Public Root Certificate Authority
+  * Removed CA certificates:
+    - Equifax Secure Global eBusiness CA
+    - UTN USERFirst Object Root CA
+
+ -- Philipp Kern <pkern@debian.org>  Wed, 24 Jun 2009 21:04:45 +0200
+
+ca-certificates (20080809) unstable; urgency=low
+
+  * New cacert.org.pem joining both CACert Class 1 and Class 3 certificates.
+    This file can be used for proper certificate chaining if CACert
+    server certificates are used.  The old class3.pem and root.pem
+    certificates are deprecated.  This new file could safely serve as
+    a replacement for both.
+
+ -- Philipp Kern <pkern@debian.org>  Sat, 09 Aug 2008 14:58:24 -0300
+
+ca-certificates (20080617) unstable; urgency=low
+
+  * New CA certificates:
+    - gouv.fr: added French Government's IGC/A CA
+    - spi-inc.org: added new SPI CA certificate, created in reponse to
+      the infamous OpenSSL security update (already in 20080514)
+  * Removed CA certificates:
+    - spi-inc.org: removed old, still valid but possibly compromised
+      SPI CA certificates from 2006 and 2007 (already in 20080514)
+
+ -- Philipp Kern <pkern@debian.org>  Fri, 20 Jun 2008 10:05:49 +0200
+
+ca-certificates (20080411) unstable; urgency=low
 
   * New CA certificates:
     - spi-inc.org: current SPI CA certificate