Blacklist "Bogus *" and "Explicitly Distrust DigiNotar *" certificates

[ca-certificates.git] / mozilla / blacklist.txt

diff --git a/mozilla/blacklist.txt b/mozilla/blacklist.txt
index cc3e19b63413dccfc9d6e02af46bbbb89d1ac5c1..9a71bc46b4c49e66e299d23899c884c246fb6dd5 100644 (file)
--- a/mozilla/blacklist.txt
+++ b/mozilla/blacklist.txt
@@ -1,8 +1,27 @@
 # One blacklist entry per line, corresponding to the label in certdata.txt.
 
-# Parent of "MD5 Collisions Forged Rogue CA 25c3"
-"Equifax Secure Global eBusiness CA"
-
 # MD5 Collision Proof of Concept CA
 "MD5 Collisions Forged Rogue CA 25c3"
 
+# DigiNotar Root CA (see debbug#639744)
+"DigiNotar Root CA"
+
+# Explicitly Distrust DigiNotar certs added by Mozilla
+"Explicitly Distrust DigiNotar Root CA"
+"Explicitly Distrust DigiNotar Services 1024 CA"
+"Explicitly Distrust DigiNotar Cyber CA"
+"Explicitly Distrust DigiNotar Cyber CA 2nd"
+"Explicitly Distrusted DigiNotar PKIoverheid"
+"Explicitly Distrusted DigiNotar PKIoverheid G2"
+
+# Bogus certs added by Mozilla (see #619587)
+"Bogus Mozilla Addons"
+"Bogus Global Trustee"
+"Bogus GMail"
+"Bogus Google"
+"Bogus Skype"
+"Bogus Yahoo 1"
+"Bogus Yahoo 2"
+"Bogus Yahoo 3"
+"Bogus live.com"
+"Bogus kuix.de"