From a64eeee35dc8edf7f72e8e2ea7b3677b9bcdbe0e Mon Sep 17 00:00:00 2001 From: Michael Shuler Date: Fri, 28 Oct 2011 07:12:41 -0500 Subject: [PATCH] Blacklist "Bogus *" and "Explicitly Distrust DigiNotar *" certificates --- debian/changelog | 6 ++++++ mozilla/blacklist.txt | 20 ++++++++++++++++++++ 2 files changed, 26 insertions(+) diff --git a/debian/changelog b/debian/changelog index e20bef6..e301c8a 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,9 @@ +ca-certificates (20111025.1) UNRELEASED; urgency=low + + * Blacklist "Bogus *" and "Explicitly Distrust DigiNotar *" certificates + + -- Michael Shuler Fri, 28 Oct 2011 07:06:00 -0500 + ca-certificates (20111025) unstable; urgency=low [ Michael Shuler ] diff --git a/mozilla/blacklist.txt b/mozilla/blacklist.txt index 911f9f1..9a71bc4 100644 --- a/mozilla/blacklist.txt +++ b/mozilla/blacklist.txt @@ -5,3 +5,23 @@ # DigiNotar Root CA (see debbug#639744) "DigiNotar Root CA" + +# Explicitly Distrust DigiNotar certs added by Mozilla +"Explicitly Distrust DigiNotar Root CA" +"Explicitly Distrust DigiNotar Services 1024 CA" +"Explicitly Distrust DigiNotar Cyber CA" +"Explicitly Distrust DigiNotar Cyber CA 2nd" +"Explicitly Distrusted DigiNotar PKIoverheid" +"Explicitly Distrusted DigiNotar PKIoverheid G2" + +# Bogus certs added by Mozilla (see #619587) +"Bogus Mozilla Addons" +"Bogus Global Trustee" +"Bogus GMail" +"Bogus Google" +"Bogus Skype" +"Bogus Yahoo 1" +"Bogus Yahoo 2" +"Bogus Yahoo 3" +"Bogus live.com" +"Bogus kuix.de" -- 2.39.2