Debian version 20120212

[ca-certificates.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index c380fcdc63f278951e732f71cbf81be6eea268d1..3cccead8d62e928d56423fc0f8b5ba4c0dd0fe05 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,13 +1,35 @@
-ca-certificates (20111025.1) UNRELEASED; urgency=low
+ca-certificates (20120112) unstable; urgency=low
 
-  * Blacklist "Bogus *" and "Explicitly Distrust DigiNotar *" certificates.
-  * Clarify CA audit note in README.debian. Thanks to C.J. Adams-Collier for
-    the patch.  Closes: #594383
+  * Update mozilla/certdata.txt to version 1.81
+    Certificates added (+) and removed (-):
+    + "Security Communication RootCA2"
+    + "EC-ACC"
+    + "Hellenic Academic and Research Institutions RootCA 2011"
+    - "Verisign Class 2 Public Primary Certification Authority"
+    - "Verisign Class 4 Public Primary Certification Authority - G2"
+    - "TC TrustCenter, Germany, Class 2 CA"
+    - "TC TrustCenter, Germany, Class 3 CA"
+  * Add notice to README.Debian deprecating CA inclusions and refer to
+    #647848 for Debian CA Certificate Policy discussion.
+
+ -- Michael Shuler <michael@pbandjelly.org>  Sun, 12 Feb 2012 14:02:02 -0600
+
+ca-certificates (20111211) unstable; urgency=low
+
+  * Clarify CA audit note in package description and README.debian. Thanks
+    to C.J. Adams-Collier for the patch.  Closes: #594383
   * Remove French Government IGC/A CA certificates. The RSA certificate is
     included in the Mozilla bundle and the DSA certificate is not in use.
     Closes: #646767
+  * Remove expired signet.pl CAs.  Closes: #647849
+  * Remove expired brasil.gov.br CA.
+  * Edit 20111025 changelog/NEWS entries to correctly list installed CAs
+  * Use 'set -e' in body of debian/postinst
+  * Update mozilla/certdata.txt to version 1.80
+    (no added/removed CAs)
+  * Update mozilla/certdata2pem.py to parse NETSCAPE or NSS data
 
- -- Michael Shuler <michael@pbandjelly.org>  Fri, 28 Oct 2011 21:15:01 -0500
+ -- Michael Shuler <michael@pbandjelly.org>  Sun, 11 Dec 2011 19:05:32 -0600
 
 ca-certificates (20111025) unstable; urgency=low
 
@@ -22,24 +44,8 @@ ca-certificates (20111025) unstable; urgency=low
     + "AffirmTrust Premium"
     + "AffirmTrust Premium ECC"
     + "A-Trust-nQual-03"
-    + "Bogus Global Trustee"
-    + "Bogus GMail"
-    + "Bogus Google"
-    + "Bogus kuix.de"
-    + "Bogus live.com"
-    + "Bogus Mozilla Addons"
-    + "Bogus Skype"
-    + "Bogus Yahoo 1"
-    + "Bogus Yahoo 2"
-    + "Bogus Yahoo 3"
     + "Certinomis - Autorité Racine"
     + "Certum Trusted Network CA"
-    + "Explicitly Distrust DigiNotar Cyber CA"
-    + "Explicitly Distrust DigiNotar Cyber CA 2nd"
-    + "Explicitly Distrust DigiNotar Root CA"
-    + "Explicitly Distrust DigiNotar Services 1024 CA"
-    + "Explicitly Distrusted DigiNotar PKIoverheid"
-    + "Explicitly Distrusted DigiNotar PKIoverheid G2"
     + "Go Daddy Root Certificate Authority - G2"
     + "Root CA Generalitat Valenciana"
     + "Starfield Root Certificate Authority - G2"
@@ -59,7 +65,6 @@ ca-certificates (20111025) unstable; urgency=low
     - "IPS Timestamping root"
     - "Thawte Personal Freemail CA"
     - "Thawte Time Stamping CA"
-  * "Bogus *" CAs above address Comodo MITM 03/11  Closes: #619587
   * Update CAcert-Class 3-Subroot-certificate  Closes: #630232
 
   [ Steve Langasek ]