-ca-certificates (20111024) unstable; urgency=low
+ca-certificates (20111025.4) UNRELEASED; urgency=low
+
+ * Clarify CA audit note in package description and README.debian. Thanks
+ to C.J. Adams-Collier for the patch. Closes: #594383
+ * Remove French Government IGC/A CA certificates. The RSA certificate is
+ included in the Mozilla bundle and the DSA certificate is not in use.
+ Closes: #646767
+ * Remove expired signet.pl CAs. Closes: #647849
+ * Remove expired brasil.gov.br CA.
+ * Edit 20111025 changelog/NEWS entries to correctly list installed CAs
+ * Use 'set -e' in body of debian/postinst
+ * Update mozilla/certdata.txt to primary Mozilla repository version 1.80
+ (no added/removed CAs)
+ * Update mozilla/certdata2pem.py to parse NETSCAPE or NSS data
+
+ -- Michael Shuler <michael@pbandjelly.org> Sun, 11 Dec 2011 17:26:19 -0600
+
+ca-certificates (20111025) unstable; urgency=low
[ Michael Shuler ]
* Add 3.0 (native) source format
+ "AffirmTrust Premium"
+ "AffirmTrust Premium ECC"
+ "A-Trust-nQual-03"
- + "Bogus Global Trustee"
- + "Bogus GMail"
- + "Bogus Google"
- + "Bogus kuix.de"
- + "Bogus live.com"
- + "Bogus Mozilla Addons"
- + "Bogus Skype"
- + "Bogus Yahoo 1"
- + "Bogus Yahoo 2"
- + "Bogus Yahoo 3"
+ "Certinomis - Autorité Racine"
+ "Certum Trusted Network CA"
- + "Explicitly Distrust DigiNotar Cyber CA"
- + "Explicitly Distrust DigiNotar Cyber CA 2nd"
- + "Explicitly Distrust DigiNotar Root CA"
- + "Explicitly Distrust DigiNotar Services 1024 CA"
- + "Explicitly Distrusted DigiNotar PKIoverheid"
- + "Explicitly Distrusted DigiNotar PKIoverheid G2"
+ "Go Daddy Root Certificate Authority - G2"
+ "Root CA Generalitat Valenciana"
+ "Starfield Root Certificate Authority - G2"
- "IPS Timestamping root"
- "Thawte Personal Freemail CA"
- "Thawte Time Stamping CA"
- * "Bogus *" CAs above address Comodo MITM 03/11 Closes: #619587
* Update CAcert-Class 3-Subroot-certificate Closes: #630232
[ Steve Langasek ]
* Drop bogus c_rehash on upgrades, which caused issue when
ca-certificates.crt was still in place; instead, call
update-ca-certificates --fresh on upgrades to this version, and
- the usual update-ca-certificates otherwise Closes: #643667, 537382
+ the usual update-ca-certificates otherwise Closes: #643667, #537382
- -- Michael Shuler <michael@pbandjelly.org> Mon, 24 Oct 2011 19:55:10 -0500
+ -- Michael Shuler <michael@pbandjelly.org> Tue, 25 Oct 2011 09:12:10 -0500
ca-certificates (20111022) unstable; urgency=low