Change log : ca-certificates package : Ubuntu

20170717~14.04.1

Published in trusty-updates on 2017-10-02

Published in trusty-security on 2017-10-02

ca-certificates (20170717~14.04.1) trusty-security; urgency=medium

  * Update ca-certificates database to 20170717:
    - backport changes from the Ubuntu 17.10 20170717 package

 -- Marc Deslauriers <email address hidden>  Wed, 27 Sep 2017 11:15:07 -0400

Available diffs

diff from 20160104ubuntu0.14.04.1 to 20170717~14.04.1 (109.3 KiB)

20170717~16.04.1

Published in xenial-updates on 2017-10-02

Published in xenial-security on 2017-10-02

ca-certificates (20170717~16.04.1) xenial-security; urgency=medium

  * Update ca-certificates database to 20170717:
    - backport changes from the Ubuntu 17.10 20170717 package

 -- Marc Deslauriers <email address hidden>  Wed, 27 Sep 2017 11:09:45 -0400

Available diffs

diff from 20160104ubuntu1 (in Ubuntu) to 20170717~16.04.1 (107.9 KiB)

20170717~17.04.1

Published in zesty-updates on 2017-10-02

Published in zesty-security on 2017-10-02

ca-certificates (20170717~17.04.1) zesty-security; urgency=medium

  * Update ca-certificates database to 20170717:
    - backport changes from the Ubuntu 17.10 20170717 package

 -- Marc Deslauriers <email address hidden>  Wed, 27 Sep 2017 11:05:01 -0400

Available diffs

diff from 20161130 (in Debian) to 20170717~17.04.1 (64.5 KiB)

20170717

Published in bionic-release on 2017-10-24

Published in artful-release on 2017-08-29

Deleted in artful-proposed (Reason: moved to release)

ca-certificates (20170717) unstable; urgency=medium

  * Update to Standards-Version: 4.0.1
  * debian/ca-certificates.postinst:
    Prevent postinst failure on read-only /usr/local. Closes: #843722
  * mozilla/certdata2pem.py:
    Remove email-only roots from mozilla trust store. Closes: #721976
  * mozilla/{certdata.txt,nssckbi.h}:
    Update Mozilla certificate authority bundle to version 2.14.
    Closes: #858064
    The following certificate authorities were added (+):
    + "AC RAIZ FNMT-RCM"
    + "Amazon Root CA 1"
    + "Amazon Root CA 2"
    + "Amazon Root CA 3"
    + "Amazon Root CA 4"
    + "D-TRUST Root CA 3 2013"
    + "LuxTrust Global Root 2"
    + "TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1"
    The following certificate authorities were removed (-):
    - "AC Raiz Certicamara S.A."
    - "ApplicationCA - Japanese Government"
    - "Buypass Class 2 CA 1"
    - "ComSign CA"
    - "EBG Elektronik Sertifika Hizmet Saglayicisi"
    - "Equifax Secure CA"
    - "Equifax Secure eBusiness CA 1"
    - "Equifax Secure Global eBusiness CA"
    - "IGC/A"
    - "Juur-SK"
    - "Microsec e-Szigno Root CA"
    - "Root CA Generalitat Valenciana"
    - "RSA Security 2048 v3"
    - "S-TRUST Authentication and Encryption Root CA 2005 PN"
    - "S-TRUST Universal Root CA"
    - "SwissSign Platinum CA - G2"
    - "TC TrustCenter Class 3 CA II"
    - "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6"
    - "UTN USERFirst Email Root CA"
    - "Verisign Class 1 Public Primary Certification Authority"
    - "Verisign Class 1 Public Primary Certification Authority - G3"
    - "Verisign Class 2 Public Primary Certification Authority - G2"
    - "Verisign Class 2 Public Primary Certification Authority - G3"
    - "Verisign Class 3 Public Primary Certification Authority"
    - "WellsSecure Public Root Certificate Authority"

 -- Michael Shuler <email address hidden>  Thu, 20 Jul 2017 00:18:08 -0500

Available diffs

diff from 20161130+nmu1 to 20170717 (64.7 KiB)

20161130+nmu1

Superseded in artful-release on 2017-08-29

Deleted in artful-proposed on 2017-08-31 (Reason: moved to release)

ca-certificates (20161130+nmu1) unstable; urgency=medium

  * Non-maintainer upload.
  * Add StartCom and WoSign certificates to mozilla/blacklist.txt as they are
    now untrusted by the major browser vendors. Closes: #858539

 -- Chris Lamb <email address hidden>  Fri, 19 May 2017 16:53:16 +0200

Available diffs

diff from 20161130 to 20161130+nmu1 (731 bytes)

20161130

Superseded in artful-release on 2017-05-26

Published in zesty-release on 2017-02-07

Deleted in zesty-proposed (Reason: moved to release)

ca-certificates (20161130) unstable; urgency=medium

  [ Philipp Kern ]
  * Add ca-certificates udeb package. Closes: #845456

  [ Michael Shuler ]
  * debian/{compat,control}:
    Update to compat level 10 and debhelper (>= 10)
    Shorten package description.
  * debian/po/id.po
    Update Indonesian debconf translation file for build time line reorder

 -- Michael Shuler <email address hidden>  Wed, 30 Nov 2016 21:20:53 -0600

Available diffs

diff from 20160104ubuntu1 (in Ubuntu) to 20161130 (41.0 KiB)
diff from 20161102 to 20161130 (4.7 KiB)

20161102

Superseded in zesty-proposed on 2016-12-05

ca-certificates (20161102) unstable; urgency=medium

  [ Michael Shuler ]
  * debian/control:
    Update to Standards-Version: 3.9.8
    Update to Vcs-Browser/Vcs-Git: https URLs
  * mozilla/{certdata.txt,nssckbi.h}:
    Update Mozilla certificate authority bundle to version 2.9.
    Thanks for the initial 2.7 patch, Jonathan Wiltshire. Closes: #828845
    The following certificate authorities were added (+):
    + "Certplus Root CA G1"
    + "Certplus Root CA G2"
    + "Certum Trusted Network CA 2"
    + "Hellenic Academic and Research Institutions ECC RootCA 2015"
    + "Hellenic Academic and Research Institutions RootCA 2015"
    + "ISRG Root X1"
    + "OpenTrust Root CA G1"
    + "OpenTrust Root CA G2"
    + "OpenTrust Root CA G3"
    + "SZAFIR ROOT CA2"
    The following certificate authorities were removed (-):
    - "CA Disig"
    - "NetLock Business (Class B) Root"
    - "NetLock Express (Class C) Root"
    - "NetLock Notary (Class A) Root"
    - "NetLock Qualified (Class QA) Root"
    - "Sonera Class 1 Root CA"
    - "Staat der Nederlanden Root CA"
    - "Verisign Class 1 Public Primary Certification Authority - G2"
    - "Verisign Class 3 Public Primary Certification Authority"
    - "Verisign Class 3 Public Primary Certification Authority - G2"

   [ Andreas Beckmann ]
   * debian/postinst:
     Run update-certificates without hooks to initially populate
     /etc/ssl/certs.  (The hooks are deferred to the noawait trigger.)
     Closes: #825730

    [ Izharul Haq ]
    * debian/po/id.po:
      Add Indonesian debconf translation. Thank you, Izharul! Closes: #835156

 -- Michael Shuler <email address hidden>  Wed, 02 Nov 2016 21:15:03 -0500

20160104ubuntu0.12.04.1

Published in precise-updates on 2016-02-24

Published in precise-security on 2016-02-24

ca-certificates (20160104ubuntu0.12.04.1) precise-security; urgency=medium

  * Update ca-certificates database to 20160104:
    - backport changes from the Ubuntu 16.04 LTS 20160104 package

 -- Marc Deslauriers <email address hidden>  Mon, 08 Feb 2016 10:28:49 -0500

Available diffs

diff from 20141019ubuntu0.12.04.1 (in Ubuntu) to 20160104ubuntu0.12.04.1 (74.8 KiB)
diff from 20111211 (in Debian) to 20160104ubuntu0.12.04.1 (210.5 KiB)

20160104ubuntu0.14.04.1

Superseded in trusty-updates on 2017-10-02

Superseded in trusty-security on 2017-10-02

ca-certificates (20160104ubuntu0.14.04.1) trusty-security; urgency=medium

  * Update ca-certificates database to 20160104:
    - backport changes from the Ubuntu 16.04 LTS 20160104 package

 -- Marc Deslauriers <email address hidden>  Mon, 08 Feb 2016 10:28:49 -0500

Available diffs

diff from 20141019ubuntu0.14.04.1 (in Ubuntu) to 20160104ubuntu0.14.04.1 (74.8 KiB)
diff from 20130906ubuntu2 (in Ubuntu) to 20160104ubuntu0.14.04.1 (145.4 KiB)

20160104ubuntu0.15.10.1

Published in wily-updates on 2016-02-24

Published in wily-security on 2016-02-24

ca-certificates (20160104ubuntu0.15.10.1) wily-security; urgency=medium

  * Update ca-certificates database to 20160104:
    - backport changes from the Ubuntu 16.04 LTS 20160104 package

 -- Marc Deslauriers <email address hidden>  Mon, 08 Feb 2016 10:28:49 -0500

Available diffs

diff from 20150426ubuntu1 (in Ubuntu) to 20160104ubuntu0.15.10.1 (46.3 KiB)

20160104ubuntu1

Superseded in zesty-release on 2017-02-07

Published in yakkety-release on 2016-04-22

Published in xenial-release on 2016-02-10

Deleted in xenial-proposed (Reason: moved to release)

ca-certificates (20160104ubuntu1) xenial; urgency=medium

  * Ship changelog to explain dropped mozilla-1024 certs.

 -- Marc Deslauriers <email address hidden>  Mon, 08 Feb 2016 07:38:07 -0500

Available diffs

diff from 20150426ubuntu1 to 20160104ubuntu1 (49.4 KiB)
diff from 20160104 (in Debian) to 20160104ubuntu1 (983 bytes)

20160104

Superseded in xenial-proposed on 2016-02-08

ca-certificates (20160104) unstable; urgency=medium

  * debian/rules:
    Sort certificate list for reproducible builds.  Closes: #808711
  * mozilla/certdata2pem.py:
    Drop old CK*_NETSCAPE trust flag checks

 -- Michael Shuler <email address hidden>  Mon, 04 Jan 2016 11:08:26 -0600

20150426ubuntu1

Superseded in xenial-release on 2016-02-10

Published in wily-release on 2015-07-15

Deleted in wily-proposed (Reason: moved to release)

ca-certificates (20150426ubuntu1) wily; urgency=medium

  * mozilla-1024/*, Makefile: Since version 20140927 of the ca-certificates
    package, containing the 2.1 version of the nss database, CA
    certificates with 1024-bit RSA keys have been removed. Unfortunately,
    older versions of libraries such as OpenSSL, GnuTLS and glib-networking
    are unable to automatically find alternative trust chains to continue
    connecting to certain sites. This update restores the certificates
    until all libraries have been updated to properly handle alternative
    trust chains. See mozilla-1024/certdata.txt for a list of the exact
    certificates that were added back. (LP: #1469803)

 -- Marc Deslauriers <email address hidden>  Mon, 13 Jul 2015 11:10:03 -0400

Available diffs

diff from 20150426 (in Debian) to 20150426ubuntu1 (9.8 KiB)

20150426

Superseded in wily-release on 2015-07-15

Deleted in wily-proposed on 2015-07-16 (Reason: moved to release)

ca-certificates (20150426) unstable; urgency=medium

  * debian/postinst:
    Set mode and group of /usr/local/share/ca-certificates based on current
    /usr/local permissions and ownership.  Closes: #611501
  * sbin/update-ca-certificates:
    Allow customisation of the paths used by update-ca-certificates.
    Add an option to set the certs in a directory to the defaults.
    Thanks for the patches, Paul Wise.  Closes: #774059, #774201
    Fix shellcheck warnings and a little indentation.
  * sbin/update-ca-certificates.8:
    Correct concatenated file name in man page from certificates.crt to
    ca-certificates.crt.  Closes: #782230
  * mozilla/{certdata.txt,nssckbi.h}:
    Update Mozilla certificate authority bundle to version 2.4.
    The following certificate authorities were added (+):
    + "CFCA EV ROOT"
    + "COMODO RSA Certification Authority"
    + "Entrust Root Certification Authority - EC1"
    + "Entrust Root Certification Authority - G2"
    + "GlobalSign ECC Root CA - R4"
    + "GlobalSign ECC Root CA - R5"
    + "IdenTrust Commercial Root CA 1"
    + "IdenTrust Public Sector Root CA 1"
    + "S-TRUST Universal Root CA"
    + "Staat der Nederlanden EV Root CA"
    + "Staat der Nederlanden Root CA - G3"
    + "USERTrust ECC Certification Authority"
    + "USERTrust RSA Certification Authority"  Closes: #762709
    The following certificate authorities were removed (-):
    - "America Online Root Certification Authority 1"
    - "America Online Root Certification Authority 2"
    - "E-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
    - "GTE CyberTrust Global Root"
    - "Thawte Premium Server CA"
    - "Thawte Server CA"

 -- Michael Shuler <email address hidden>  Sun, 26 Apr 2015 10:37:48 -0500

Available diffs

diff from 20141019 to 20150426 (39.2 KiB)

20141019ubuntu0.15.04.1

Published in vivid-updates on 2015-04-28

Published in vivid-security on 2015-04-28

ca-certificates (20141019ubuntu0.15.04.1) vivid-security; urgency=medium

  * No change rebuild in security pocket to fix upgrade issue (LP: #1448663)

 -- Marc Deslauriers <email address hidden>  Tue, 28 Apr 2015 13:28:32 -0400

Available diffs

diff from 20141019 (in Debian) to 20141019ubuntu0.15.04.1 (611 bytes)

20141019ubuntu0.14.10.1

Obsolete in utopic-updates on 2016-11-03

Obsolete in utopic-security on 2016-11-03

ca-certificates (20141019ubuntu0.14.10.1) utopic-security; urgency=medium

  * Update ca-certificates database to 20141019 (LP: #1423904):
    - backport changes from the Ubuntu 15.04 20141019 package
 -- Marc Deslauriers <email address hidden>   Fri, 20 Feb 2015 08:09:50 -0500

Available diffs

diff from 20140325 (in Debian) to 20141019ubuntu0.14.10.1 (35.1 KiB)

20141019ubuntu0.14.04.1

Superseded in trusty-updates on 2016-02-24

Superseded in trusty-security on 2016-02-24

ca-certificates (20141019ubuntu0.14.04.1) trusty-security; urgency=medium

  * Update ca-certificates database to 20141019 (LP: #1423904):
    - backport changes from the Ubuntu 15.04 20141019 package
 -- Marc Deslauriers <email address hidden>   Fri, 20 Feb 2015 08:17:24 -0500

Available diffs

diff from 20130906ubuntu2 (in Ubuntu) to 20141019ubuntu0.14.04.1 (90.2 KiB)

20141019ubuntu0.12.04.1

Superseded in precise-updates on 2016-02-24

Superseded in precise-security on 2016-02-24

ca-certificates (20141019ubuntu0.12.04.1) precise-security; urgency=medium

  * Update ca-certificates database to 20141019 (LP: #1423904):
    - backport changes from the Ubuntu 15.04 20141019 package
 -- Marc Deslauriers <email address hidden>   Fri, 20 Feb 2015 08:21:16 -0500

Available diffs

diff from 20130906ubuntu0.12.04.1 to 20141019ubuntu0.12.04.1 (90.3 KiB)

20141019ubuntu0.10.04.1

Obsolete in lucid-updates on 2016-10-26

Obsolete in lucid-security on 2016-10-26

ca-certificates (20141019ubuntu0.10.04.1) lucid-security; urgency=medium

  * Update ca-certificates database to 20141019 (LP: #1423904):
    - backport changes from the Ubuntu 15.04 20141019 package
 -- Marc Deslauriers <email address hidden>   Fri, 20 Feb 2015 08:23:55 -0500

Available diffs

diff from 20130906ubuntu0.10.04.1 to 20141019ubuntu0.10.04.1 (90.2 KiB)

20141019

Superseded in wily-release on 2015-06-04

Published in vivid-release on 2014-10-24

Deleted in vivid-proposed (Reason: moved to release)

ca-certificates (20141019) unstable; urgency=medium


  * debian/copyright:
    Add coverage for all files reported by lintian
    file-without-copyright-information warning.
  * debian/source/lintian-overrides:
    Add file-without-copyright-information override for SPI certificate file.
  * sbin/update-ca-certificates:
    Restore SELinux label after generating ca-certificates.crt file.
    Thanks to Laurent Bigonville for the patch.  Closes: #742957
    Tidy indentation whitespace.
    Thanks to Antonio Terceiro for the patch.  Closes: #742663
  * debian/control:
    Update to Standards-Version: 3.9.6 (no other changes needed).
    Update Vcs-Browser link to cgit URL.

 -- Michael Shuler <email address hidden>  Sun, 19 Oct 2014 10:36:49 -0500

Available diffs

diff from 20140325 to 20141019 (35.4 KiB)

20140325

Superseded in vivid-release on 2014-10-24

Obsolete in utopic-release on 2016-11-03

Deleted in utopic-proposed on 2016-11-03 (Reason: moved to release)

ca-certificates (20140325) unstable; urgency=medium


  * Update mozilla/certdata.txt to version 1.97+revert_of_936304
    Mozilla reverted the removal of 1024-bit root certificates for
    Entrust.net, GTE CyberTrust, and ValiCert (RSA), but did not update the
    version number in nssckbi.h.
    Certificates added (+) (none removed):
    + "Entrust.net Secure Server CA"
    + "GTE CyberTrust Global Root"
    + "RSA Root Certificate 1"
    + "ValiCert Class 1 VA"
    + "ValiCert Class 2 VA"

 -- Michael Shuler <email address hidden>  Tue, 25 Mar 2014 13:28:19 -0500

Available diffs

diff from 20130906ubuntu2 (in Ubuntu) to 20140325 (61.8 KiB)

20130906ubuntu0.13.10.1

Obsolete in saucy-updates on 2015-04-24

Obsolete in saucy-security on 2015-04-24

Deleted in saucy-proposed on 2015-04-28 (Reason: moved to -updates)

ca-certificates (20130906ubuntu0.13.10.1) saucy-security; urgency=medium

  * Update ca-certificates database to 20130906 (LP: #1257265):
    - backport changes from the Ubuntu 14.04 20130906ubuntu1 package
    - No longer ship cacert.org certificates (LP: #1258286)
    - mozilla/certdata2pem.py: Work around openssl issue by shipping both
      versions of the same signed roots. Previously, the script would
      simply overwrite the first one found in the certdata.txt with the
      later one since they both have the same CKA_LABEL, resulting in
      identical filenames. (LP: #1014640, LP: #1031333)
 -- Marc Deslauriers <email address hidden>   Thu, 06 Feb 2014 17:04:56 -0500

Available diffs

diff from 20130610 (in Debian) to 20130906ubuntu0.13.10.1 (29.3 KiB)

20130906ubuntu0.12.10.1

Obsolete in quantal-updates on 2015-04-24

Obsolete in quantal-security on 2015-04-24

Deleted in quantal-proposed on 2015-05-01 (Reason: moved to -updates)

ca-certificates (20130906ubuntu0.12.10.1) quantal-security; urgency=medium

  * Update ca-certificates database to 20130906 (LP: #1257265):
    - backport changes from the Ubuntu 14.04 20130906ubuntu1 package
    - No longer ship cacert.org certificates (LP: #1258286)
    - No longer ship obsolete debconf.org certificates
    - mozilla/certdata2pem.py: Work around openssl issue by shipping both
      versions of the same signed roots. Previously, the script would
      simply overwrite the first one found in the certdata.txt with the
      later one since they both have the same CKA_LABEL, resulting in
      identical filenames. (LP: #1014640, LP: #1031333)
 -- Marc Deslauriers <email address hidden>   Thu, 06 Feb 2014 17:23:27 -0500

Available diffs

diff from 20120623 (in Debian) to 20130906ubuntu0.12.10.1 (60.9 KiB)

20130906ubuntu0.12.04.1

Superseded in precise-updates on 2015-02-23

Superseded in precise-security on 2015-02-23

Deleted in precise-proposed on 2015-02-25 (Reason: moved to -updates)

ca-certificates (20130906ubuntu0.12.04.1) precise-security; urgency=medium

  * Update ca-certificates database to 20130906 (LP: #1257265):
    - backport changes from the Ubuntu 14.04 20130906ubuntu1 package
    - No longer ship cacert.org certificates (LP: #1258286)
    - No longer ship obsolete debconf.org certificates
    - mozilla/certdata2pem.py: Work around openssl issue by shipping both
      versions of the same signed roots. Previously, the script would
      simply overwrite the first one found in the certdata.txt with the
      later one since they both have the same CKA_LABEL, resulting in
      identical filenames. (LP: #1014640, LP: #1031333)
 -- Marc Deslauriers <email address hidden>   Thu, 06 Feb 2014 17:39:43 -0500

Available diffs

diff from 20111211 (in Debian) to 20130906ubuntu0.12.04.1 (71.8 KiB)

20130906ubuntu0.10.04.1

Superseded in lucid-updates on 2015-02-23

Superseded in lucid-security on 2015-02-23

Deleted in lucid-proposed on 2015-02-25 (Reason: moved to -updates)

ca-certificates (20130906ubuntu0.10.04.1) lucid-security; urgency=medium

  * Update ca-certificates database to 20130906 (LP: #1257265, LP: #1271357):
    - backport changes from the Ubuntu 14.04 20130906ubuntu1 package
    - No longer ship cacert.org certificates (LP: #1258286)
    - No longer ship obsolete debconf.org certificates
    - No longer ship expired brasil.gov.br certificates
    - No longer ship expired signet.pl certificates
    - No longer ship gouv.fr certificates, now part of mozilla bundle
    - No longer ship telesec.de certificates, now part of mozilla bundle
    - mozilla/certdata2pem.py: Work around openssl issue by shipping both
      versions of the same signed roots. Previously, the script would
      simply overwrite the first one found in the certdata.txt with the
      later one since they both have the same CKA_LABEL, resulting in
      identical filenames. (LP: #1014640, LP: #1031333)
 -- Marc Deslauriers <email address hidden>   Fri, 07 Feb 2014 13:58:53 -0500

Available diffs

diff from 20090814ubuntu0.10.04.1 (in Ubuntu) to 20130906ubuntu0.10.04.1 (427.0 KiB)
diff from 20090814 (in Ubuntu) to 20130906ubuntu0.10.04.1 (427.1 KiB)

20130906ubuntu2

Superseded in utopic-release on 2014-05-14

Published in trusty-release on 2014-02-19

Deleted in trusty-proposed (Reason: moved to release)

ca-certificates (20130906ubuntu2) trusty; urgency=medium

  * No longer ship cacert.org certificates. (LP: #1258286)
 -- Marc Deslauriers <email address hidden>   Wed, 19 Feb 2014 15:57:25 -0500

Available diffs

diff from 20130906ubuntu1 to 20130906ubuntu2 (521 bytes)

20130906ubuntu1

Superseded in trusty-release on 2014-02-19

Deleted in trusty-proposed on 2014-02-21 (Reason: moved to release)

ca-certificates (20130906ubuntu1) trusty; urgency=low

  * mozilla/certdata2pem.py: Work around openssl issue by shipping both
    versions of the same signed roots. Previously, the script would simply
    overwrite the first one found in the certdata.txt with the later one
    since they both have the same CKA_LABEL, resulting in identical
    filenames. (LP: #1014640)
 -- Marc Deslauriers <email address hidden>   Wed, 04 Dec 2013 16:53:53 -0500

Available diffs

diff from 20130906 (in Debian) to 20130906ubuntu1 (1.1 KiB)

20130906

Superseded in trusty-release on 2013-12-05

Deleted in trusty-proposed on 2013-12-06 (Reason: moved to release)

ca-certificates (20130906) unstable; urgency=low


  * Add ca-certificates-local source package example to documentation
  * Update local certificate handling in README.Debian.
    Closes: #718173, LP: #487845
  * Update CA inclusion policy for ca-certificates in README.Debian. With
    the exception of SPI and CAcert, only those CAs included in Mozilla's
    trust store will be included in ca-certificates in Debian.
    Closes: #647848, LP: #103074
  * Clarify that not all software that uses SSL uses ca-certificates in
    README.Debian.  Closes: #664769
  * Add mozilla/nssckbi.h to source, since certdata.txt no longer contains
    a version number.
  * Update debian/copyright to "Copyright: Mozilla Contributors" for
    mozilla/{certdata.txt,nssckbi.h}.
  * Update mozilla/certdata.txt to version 1.94
    Certificates added (+) and removed (-):
    + "CA Disig Root R1"
    + "CA Disig Root R2"
    + "China Internet Network Information Center EV Certificates Root"
    + "D-TRUST Root Class 3 CA 2 2009"
    + "D-TRUST Root Class 3 CA 2 EV 2009"
    + "PSCProcert"
    + "Swisscom Root CA 2"
    + "Swisscom Root EV CA 2"
    + "TURKTRUST Certificate Services Provider Root 2007"
    - "Equifax Secure eBusiness CA 2"
    - "TC TrustCenter Universal CA III"

 -- Michael Shuler <email address hidden>  Fri, 06 Sep 2013 11:31:06 -0500

Available diffs

diff from 20130610 to 20130906 (31.3 KiB)

20130610

Superseded in trusty-release on 2013-10-21

Obsolete in saucy-release on 2015-04-24

Deleted in saucy-proposed on 2015-04-28 (Reason: moved to release)

ca-certificates (20130610) unstable; urgency=low


  [ Michael Shuler ]
  * Install CAcert root and class3 certificates individually, no longer
    installing the concatenation of the two. The individual certificates
    are installed as cacert.org_root.crt and cacert.org_class3.crt for ease
    of identification. Additionally, this allows openssl maintainers to drop
    a problematic patch to c_rehash for handling multi-certificate files.
    (see #642314)  Closes: #692323
  * Update Vcs-* fields for lintian vcs-field-not-canonical
  * Update to machine-readable debian/copyright file v1.0

  [ Thijs Kinkhorst ]
  * Drop upgrading code for upgrades from Debian Etch and earlier. 
  * Remove obsolete debconf.org CA certificate. DebConf now uses an
    intermediate certificate signed by SPI. (Closes: #693405)
  * Remove obsolete SPI CA certiticate.
  * Update Standards-Version: 3.9.4 (no changes needed)
  * Clean up man page (LP#: 850997).

 -- Thijs Kinkhorst <email address hidden>  Mon, 10 Jun 2013 19:52:15 +0200

Available diffs

diff from 20130119 to 20130610 (17.6 KiB)

20130119

Superseded in saucy-release on 2013-06-11

Obsolete in raring-release on 2015-04-24

Deleted in raring-proposed on 2015-04-27 (Reason: moved to release)

ca-certificates (20130119) unstable; urgency=low


  * Update mozilla/certdata.txt to version 1.87  Closes: #697366
    Certificates removed (-) (none added):
    - "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  * Remove unneeded and confusing usage of interest-noawait; remove unneeded
    Pre-Depends on dpkg. Thanks to Guillem Jover for the help and patch.
    Closes: #537051

 -- Michael Shuler <email address hidden>  Sat, 19 Jan 2013 14:02:09 -0600

Available diffs

diff from 20121114 to 20130119 (5.8 KiB)

20121114

Superseded in raring-release on 2013-01-21

Deleted in raring-proposed on 2013-01-22 (Reason: moved to release)

ca-certificates (20121114) unstable; urgency=low


  [ Don Armstrong ]
  * Breaks ca-certificates-java (<<20121112+nmu1); partially fixing #537051.
  * Provide update-ca-certificates and update-ca-certificates-fresh
    triggers.
  * Call the triggers using no-await so that the configuration files from
    the newer version of ca-certificates-java are in places before the
    upgrade. Closes: #537051.

  [ Michael Shuler ]
  * Add note to previous mozilla/certdata.txt changelog entry to document
    CKT_NSS_MUST_VERIFY_TRUST changes.

 -- Michael Shuler <email address hidden>  Wed, 14 Nov 2012 23:58:59 -0600

Available diffs

diff from 20121105 to 20121114 (1.5 KiB)

20121105

Superseded in raring-release on 2012-11-29

Deleted in raring-proposed on 2012-11-30 (Reason: moved to release)

ca-certificates (20121105) unstable; urgency=low


  * Update mozilla/certdata.txt to version 1.86  Closes: #683728
    Certificates added (+) (none removed):
    + "Actalis Authentication Root CA"
    + "Trustis FPS Root CA"
    + "StartCom Certification Authority" (renewal/rehash)
    + "StartCom Certification Authority G2"
    + "Buypass Class 2 Root CA"
    + "Buypass Class 3 Root CA"
    + "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
    + "T-TeleSec GlobalRoot Class 3"
    + "EE Certification Centre Root CA"
  * Correct piuparts package remove/purge behavior  Closes: #682125
    - Remove deletes of /etc/ssl{,/certs} from debian/postrm

 -- Michael Shuler <email address hidden>  Mon, 05 Nov 2012 10:56:05 -0600

Available diffs

diff from 20120623 to 20121105 (22.6 KiB)

20120623

Superseded in raring-release on 2012-11-08

Obsolete in quantal-release on 2015-04-24

ca-certificates (20120623) unstable; urgency=low


  * Add Polish translation, thanks to Michał Kułach.  Closes: #660002
  * Add Turkish translation, thanks to Atila KOÇ.  Closes: #661785
  * Correct update-ca-certificates(8) alignment  Closes: #666932
  * Add note to update-ca-certificates(8) about .crt extension needed for
    CA certificates in /usr/local/share/ca-certificates  Closes: #595279
  * Update mozilla/certdata.txt to version 1.83
    Mozilla Public License updated to v2.0
    (no added/removed CAs)
  * Update debian/copyright to:
    - reflect MPL v2.0 update for mozilla/certdata.txt
    - specify GPL-2 instead of GPL symlink
  * Update debian/NEWS with added/removed certs from 20111211 and 20120212
  * Update to Standards-Version: 3.9.3 (no changes needed)

 -- Michael Shuler <email address hidden>  Sat, 23 Jun 2012 09:16:54 -0500

Available diffs

diff from 20120212 to 20120623 (10.8 KiB)

20120212

Superseded in quantal-release on 2012-06-24

ca-certificates (20120212) unstable; urgency=low


  * Update mozilla/certdata.txt to version 1.81
    Certificates added (+) and removed (-):
    + "Security Communication RootCA2"
    + "EC-ACC"
    + "Hellenic Academic and Research Institutions RootCA 2011"
    - "Verisign Class 2 Public Primary Certification Authority"
    - "Verisign Class 4 Public Primary Certification Authority - G2"
    - "TC TrustCenter, Germany, Class 2 CA"
    - "TC TrustCenter, Germany, Class 3 CA"
  * Add notice to README.Debian deprecating CA inclusions and refer to
    #647848 for Debian CA Certificate Policy discussion.

 -- Michael Shuler <email address hidden>  Sun, 12 Feb 2012 15:12:59 -0600

Available diffs

diff from 20111211 to 20120212 (13.0 KiB)

20111211

Superseded in quantal-release on 2012-04-30

Published in precise-release on 2012-02-07

ca-certificates (20111211) unstable; urgency=low


  * Clarify CA audit note in package description and README.debian. Thanks
    to C.J. Adams-Collier for the patch.  Closes: #594383
  * Remove French Government IGC/A CA certificates. The RSA certificate is
    included in the Mozilla bundle and the DSA certificate is not in use.
    Closes: #646767
  * Remove expired signet.pl CAs.  Closes: #647849
  * Remove expired brasil.gov.br CA.
  * Edit 20111025 changelog/NEWS entries to correctly list installed CAs
  * Use 'set -e' in body of debian/postinst
  * Update mozilla/certdata.txt to version 1.80
    (no added/removed CAs)
  * Update mozilla/certdata2pem.py to parse NETSCAPE or NSS data

 -- Michael Shuler <email address hidden>  Sun, 11 Dec 2011 19:05:32 -0600

Available diffs

diff from 20110502+nmu1ubuntu5 (in Ubuntu) to 20111211 (135.6 KiB)

20110502+nmu1ubuntu5

Superseded in precise-release on 2012-02-07

Obsolete in oneiric-release on 2015-04-24

ca-certificates (20110502+nmu1ubuntu5) oneiric; urgency=low

  * Tweak postinst to not run update-ca-certificates multiple times and remove
    dangerous plain c_rehash snippet; LP: #854927.
 -- Loic Minier <email address hidden>   Wed, 28 Sep 2011 15:49:34 +0200

Available diffs

diff from 20110502+nmu1ubuntu4 to 20110502+nmu1ubuntu5 (951 bytes)

20110502+nmu1ubuntu4

Superseded in oneiric-release on 2011-09-28

ca-certificates (20110502+nmu1ubuntu4) oneiric; urgency=low

  * Run update-ca-certificates --fresh on upgrades from versions older than
    this one as to remove links created by patched c_rehash or add missing
    links; depend on fixed openssl; drop after oneiric; see Debian #642314;
    LP: #855454.
 -- Loic Minier <email address hidden>   Tue, 27 Sep 2011 21:26:40 +0200

Available diffs

diff from 20110502+nmu1ubuntu3 to 20110502+nmu1ubuntu4 (879 bytes)

20110502+nmu1ubuntu3

Superseded in oneiric-release on 2011-09-28

ca-certificates (20110502+nmu1ubuntu3) oneiric; urgency=low

  * Conflict with ca-certificates-java == 20110912ubuntu1, since its hook
    will accidentally remove system libraries.  LP: #855171.
 -- Steve Langasek <email address hidden>   Tue, 20 Sep 2011 18:25:10 -0700

Available diffs

diff from 20110502+nmu1ubuntu2 to 20110502+nmu1ubuntu3 (633 bytes)

20110502+nmu1ubuntu2

Superseded in oneiric-release on 2011-09-21

ca-certificates (20110502+nmu1ubuntu2) oneiric; urgency=low

  * Really only call --fresh on upgrade, instead of all the time; thanks to
    Adam Conrad for catching this in the queue.

Available diffs

diff from 20110502+nmu1 to 20110502+nmu1ubuntu2 (1.3 KiB)

20090814+nmu2ubuntu0.1

Obsolete in natty-updates on 2013-06-04

Obsolete in natty-security on 2013-06-04

ca-certificates (20090814+nmu2ubuntu0.1) natty-security; urgency=low

  * SECURITY UPDATE: Blacklist "DigiNotar Root CA" due to fraudulent
    certificate issuance (LP: #837557)
    - update mozilla/blacklist.txt
 -- Micah Gersten <email address hidden>   Thu, 01 Sep 2011 11:53:21 -0500

Available diffs

diff from 20090814+nmu2 (in Ubuntu) to 20090814+nmu2ubuntu0.1 (784 bytes)

20090814ubuntu0.10.10.1

Obsolete in maverick-updates on 2013-03-05

Obsolete in maverick-security on 2013-03-05

ca-certificates (20090814ubuntu0.10.10.1) maverick-security; urgency=low

  * SECURITY UPDATE: Blacklist "DigiNotar Root CA" due to fraudulent
    certificate issuance (LP: #837557)
    - update mozilla/blacklist.txt
 -- Micah Gersten <email address hidden>   Thu, 01 Sep 2011 11:42:30 -0500

Available diffs

diff from 20090814 (in Ubuntu) to 20090814ubuntu0.10.10.1 (2.5 KiB)

20090814ubuntu0.10.04.1

Superseded in lucid-updates on 2014-03-24

Superseded in lucid-security on 2014-03-24

ca-certificates (20090814ubuntu0.10.04.1) lucid-security; urgency=low

  * SECURITY UPDATE: Blacklist "DigiNotar Root CA" due to fraudulent
    certificate issuance (LP: #837557)
    - update mozilla/blacklist.txt
 -- Micah Gersten <email address hidden>   Thu, 01 Sep 2011 11:38:01 -0500

Available diffs

diff from 20090814 (in Ubuntu) to 20090814ubuntu0.10.04.1 (2.5 KiB)

20110502+nmu1

Superseded in oneiric-release on 2011-09-20

ca-certificates (20110502+nmu1) unstable; urgency=high

  * Non-maintainer upload by the Security Team.
  * Blacklist "DigiNotar Root CA" (Closes: #639744)
 -- Micah Gersten <email address hidden>   Thu,  01 Sep 2011 15:49:34 +0000

Available diffs

diff from 20110502 to 20110502+nmu1 (511 bytes)

20110502

Superseded in oneiric-release on 2011-09-01

ca-certificates (20110502) unstable; urgency=low

  * QA upload.
  * Mark the package as multi-arch:foreign.  (Closes: #622323)
  * Use db_settitle in config script to allow translations of the
    dialog title; thanks to Frans Pop.  (Closes: #560314)
 -- Steve Langasek <email address hidden>   Thu,  30 Jun 2011 18:36:36 +0000

Available diffs

diff from 20110421ubuntu1 to 20110502 (7.4 KiB)

20110421ubuntu1

Superseded in oneiric-release on 2011-06-30

ca-certificates (20110421ubuntu1) oneiric; urgency=low

  * Mark ca-certificates Multi-Arch: foreign.
 -- Steve Langasek <email address hidden>   Mon, 11 Apr 2011 22:48:12 -0700

Available diffs

diff from 20110421 to 20110421ubuntu1 (719 bytes)

20110421

Superseded in oneiric-release on 2011-05-06

ca-certificates (20110421) unstable; urgency=low

  * QA upload.
  * Package is orphaned, set maintainer to QA group
  * Depend on openssl 1.0.0 and force a call of c_rehash so that we have
    both the old and new style of symlinks.  (Closes: #611102)
  * Remove libssl0.9.8 from enhances
  * Update mozilla certdata.txt file to the latest version.
    Removed:
    - ABAecom_=sub.__Am._Bankers_Assn.=_Root_CA.crt
    - beTRUSTed_Root_CA-Baltimore_Implementation.crt
    - beTRUSTed_Root_CA.crt
    - beTRUSTed_Root_CA_-_Entrust_Implementation.crt
    - beTRUSTed_Root_CA_-_RSA_Implementation.crt
    - Digital_Signature_Trust_Co._Global_CA_2.crt
    - Digital_Signature_Trust_Co._Global_CA_4.crt
    - Entrust.net_Global_Secure_Personal_CA.crt
    - Entrust.net_Global_Secure_Server_CA.crt
    - Entrust.net_Secure_Personal_CA.crt
    - GTE_CyberTrust_Root_CA.crt
    - IPS_Chained_CAs_root.crt
    - IPS_CLASE1_root.crt
    - IPS_CLASE3_root.crt
    - IPS_CLASEA1_root.crt
    - IPS_CLASEA3_root.crt
    - IPS_Servidores_root.crt
    - IPS_Timestamping_root.crt
    - RSA_Security_1024_v3.crt
    - StartCom_Ltd..crt
    - Thawte_Personal_Basic_CA.crt
    - Thawte_Personal_Premium_CA.crt
    - UTN-USER_First-Network_Applications.crt
    - Verisign_RSA_Secure_Server_CA.crt
    - Verisign_Time_Stamping_Authority_CA.crt
    - Visa_International_Global_Root_2.crt
    Added:
    - ACEDICOM_Root.crt
    - AC_Raíz_Certicámara_S.A..crt
    - ApplicationCA_-_Japanese_Government.crt
    - Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt
    - Buypass_Class_2_CA_1.crt
    - Buypass_Class_3_CA_1.crt
    - CA_Disig.crt
    - Certigna.crt
    - certSIGN_ROOT_CA.crt
    - Chambers_of_Commerce_Root_-_2008.crt
    - CNNIC_ROOT.crt
    - ComSign_CA.crt
    - ComSign_Secured_CA.crt
    - Cybertrust_Global_Root.crt
    - Deutsche_Telekom_Root_CA_2.crt
    - EBG_Elektronik_Sertifika_Hizmet_Sağlayıcısı.crt
    - E-Guven_Kok_Elektronik_Sertifika_Hizmet_Saglayicisi.crt
    - ePKI_Root_Certification_Authority.crt
    - GeoTrust_Primary_Certification_Authority_-_G2.crt
    - GeoTrust_Primary_Certification_Authority_-_G3.crt
    - Global_Chambersign_Root_-_2008.crt
    - GlobalSign_Root_CA_-_R3.crt
    - Hongkong_Post_Root_CA_1.crt
    - IGC_A.crt
    - Izenpe.com.crt
    - Juur-SK.crt
    - Microsec_e-Szigno_Root_CA_2009.crt
    - Microsec_e-Szigno_Root_CA.crt
    - NetLock_Arany_=Class_Gold=_Főtanúsítvány.crt
    - OISTE_WISeKey_Global_Root_GA_CA.crt
    - SecureSign_RootCA11.crt
    - Security_Communication_EV_RootCA1.crt
    - Staat_der_Nederlanden_Root_CA_-_G2.crt
    - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN.crt
    - TÜBİTAK_UEKAE_Kök_Sertifika_Hizmet_Sağlayıcısı_-_Sürüm_3.crt
    - TC_TrustCenter_Class_2_CA_II.crt
    - TC_TrustCenter_Class_3_CA_II.crt
    - TC_TrustCenter_Universal_CA_I.crt
    - TC_TrustCenter_Universal_CA_III.crt
    - thawte_Primary_Root_CA_-_G2.crt
    - thawte_Primary_Root_CA_-_G3.crt
    - VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.crt
    - VeriSign_Universal_Root_Certification_Authority.crt
    Changed:
    - Verisign_Class_1_Public_Primary_Certification_Authority.crt
    - Verisign_Class_3_Public_Primary_Certification_Authority.crt
  * Remove telesec.de/deutsche-telekom-root-ca-2.crt, now in mozilla.
  * String decode the mozilla certdata.txt so the filenames show up as
    proper UTF-8 strings.

Available diffs

diff from 20090814+nmu2 to 20110421 (94.4 KiB)

20090814+nmu2

Superseded in oneiric-release on 2011-04-30

Obsolete in natty-release on 2013-06-04

ca-certificates (20090814+nmu2) unstable; urgency=low

  * Non-maintainer upload.
  * Fixes buggy shell functions included in the postinst script.
    (Closes: #591607)

Available diffs

diff from 20090814 to 20090814+nmu2 (2.5 KiB)

20090814

Superseded in natty-release on 2010-10-15

Obsolete in maverick-release on 2013-03-05

Obsolete in lucid-release on 2016-10-26

Obsolete in karmic-release on 2013-03-04

ca-certificates (20090814) unstable; urgency=low

  * Call Debconf and its db_purge as early as possible in postrm.
    (Closes: #541275)

Available diffs

diff from 20090701 to 20090814 (8.8 KiB)

20090701

Superseded in karmic-release on 2009-10-02

ca-certificates (20090701) unstable; urgency=low

  * Reactivated "Equifax Secure Global eBusiness CA".  (Closes: #534674)
    Rationale: The rogue collision CA has its validity period in the past.
    Thus it does not impose a risk upon us at the moment.
  * Restrict search for local certificates to add on files ending with '.crt'.
  * Canonicalize PEM names by applying the same set of substitions to
    local and other certificates like the Mozilla certdata dumper does.

 -- Philipp Kern <email address hidden>   Mon,  06 Jul 2009 17:30:27 +0100

Available diffs

diff from 20090624build2 to 20090701 (2.9 KiB)

20090624build2

Superseded in karmic-release on 2009-07-06

ca-certificates (20090624build2) karmic; urgency=low

  * Revert the change from the previous upload.

 -- Matthias Klose <email address hidden>   Mon, 29 Jun 2009 15:45:36 +0200

Available diffs

diff from 20090624build1 to 20090624build2 (551 bytes)

20090624build1

Superseded in karmic-release on 2009-06-29

ca-certificates (20090624build1) karmic; urgency=low

  * Don't run the hooks in update-ca-certificates (temporary change).

 -- Matthias Klose <email address hidden>   Mon, 29 Jun 2009 11:07:23 +0200

Available diffs

diff from 20090624 to 20090624build1 (559 bytes)

20090624

Superseded in karmic-release on 2009-06-29

ca-certificates (20090624) unstable; urgency=low

  * Allow local certificate installation.  All certificates found
    in `/usr/local/share/ca-certificates' will be automatically added
    to the list of trusted certificates in `/etc/ssl/certs'.
    (Closes: #352637, #419491, #473677, #476663, #511150)
  * Updated Mozilla certificates from nss 3.12.3-1 (certdata.txt revision
    1.51):
    + COMODO ECC Certification Authority
    + DigiNotar Root CA
    + Network Solutions Certificate Authority
    + WellsSecure Public Root Certificate Authority
    - Equifax Secure Global eBusiness CA
    - UTN USERFirst Object Root CA
  * Reimplemented the Mozilla certdata parser mainly to exclude explicitly
    untrusted certificates.  This led to the exclusion of the
    "MD5 Collisions Forged Rogue CA 23c3" and its parent
    "Equifax Secure Global eBusiness CA".  Furthermore code signing-only
    certificates are no longer included neither.
  * Remove the purging of old PEM files in postinst dating back to
    versions earlier than 20030414.
  * Hooks are now called at every invocation of `update-ca-certificates'.
    If no changes were done to `/etc/ssl/certs', the input for the
    hooks will be empty, though.  Failure exit codes of hooks will not
    tear down the upgrade process anymore.  They are printed but ignored.

 -- Ubuntu Archive Auto-Sync <email address hidden>   Thu,  25 Jun 2009 07:43:41 +0100

Available diffs

diff from 20081127 to 20090624 (19.2 KiB)

20081127

Superseded in karmic-release on 2009-06-25

ca-certificates (20081127) unstable; urgency=low

  * Remove /etc/ssl{,/certs} in postrm to please piuparts.  (Closes:
    #454334)

 -- Ubuntu Archive Auto-Sync <email address hidden>   Tue,  28 Apr 2009 22:59:49 +0100

Available diffs

diff from 20080809 to 20081127 (782 bytes)

20080514-0ubuntu1.1

Obsolete in intrepid-updates on 2013-02-20

Deleted in intrepid-proposed on 2013-02-27 (Reason: moved to -updates)

ca-certificates (20080514-0ubuntu1.1) intrepid-proposed; urgency=low

  * Include gouv.fr certificates from version 20080809 to fix authentication
    problems with BOINC (LP: #246205)
    - debian/config
    - gouv.fr/cert_igca_dsa.crt, gouv.fr/cert_igca_rsa.crt, gouv.fr/Makefile
    - Makefile

 -- Daniel Hahler <email address hidden>   Wed, 19 Nov 2008 01:02:49 +0100

Available diffs

diff from 20080514-0ubuntu1 to 20080514-0ubuntu1.1 (4.5 KiB)

20080809

Superseded in karmic-release on 2009-04-28

Obsolete in jaunty-release on 2013-02-28

ca-certificates (20080809) unstable; urgency=low

  * New cacert.org.pem joining both CACert Class 1 and Class 3 certificates.
    This file can be used for proper certificate chaining if CACert
    server certificates are used.  The old class3.pem and root.pem
    certificates are deprecated.  This new file could safely serve as
    a replacement for both.  (Closes: #494343)
  * This also reintroduces the old name for the CACert certificate,
    thus closing a long-standing bug about its rename to root.crt.
    (Closes: #413766)

Available diffs

diff from 20080514-0ubuntu1 to 20080809 (8.7 KiB)

20080514-0ubuntu1

Superseded in jaunty-release on 2008-11-05

Obsolete in intrepid-release on 2013-02-20

ca-certificates (20080514-0ubuntu1) intrepid; urgency=low

  * Merge with Debian; remaining changes:
    - debian/templates: Do not mark the choices as translatable.

Available diffs

diff from 20070303-0ubuntu3 to 20080514-0ubuntu1 (161.9 KiB)

20070303-0ubuntu0.7.10.1

Obsolete in gutsy-updates on 2011-09-16

Deleted in gutsy-proposed on 2011-09-19 (Reason: moved to -updates)

ca-certificates (20070303-0ubuntu0.7.10.1) gutsy-proposed; urgency=low

  * Fix up generation of the /etc/ssl/certs/ca-certificates.crt
    file for those users who installed the package in a pt_BR
    locale (LP: #153625). A mistake in the translation template
    meant that the choices were not available in this locale,
    and so the file was always empty.
    - If you were affected and have not tried to reconfigure this
      package, then the problem should be corrected for you
      automatically.
    - If you were affected and have tried to reconfigure the package
      you may be shown a debconf question to allow you to select
      the certificates that you want.
    - The only users who were not affected by this bug but may
      be affected by this fix are those who installed in a different
      locale, and then reconfigured the package so that no
      certificates are trusted, and who now run in a pt_BR locale.
      They will have to deselect all of the certificates again.
  * In addition to the previous version this version prevents the
    question being asked multiple times for those who appear to
    have been hit by this issue.

 -- James Westby <email address hidden>   Tue, 08 Apr 2008 12:13:30 +0100

20061027-0ubuntu0.2

Obsolete in feisty-updates on 2009-08-20

Deleted in feisty-proposed on 2009-08-20 (Reason: moved to -updates)

ca-certificates (20061027-0ubuntu0.2) feisty-proposed; urgency=low

  * Fix up generation of the /etc/ssl/certs/ca-certificates.crt
    file for those users who installed the package in a pt_BR
    locale (LP: #153625). A mistake in the translation template
    meant that the choices were not available in this locale,
    and so the file was always empty.
    - If you were affected and have not tried to reconfigure this
      package, then the problem should be corrected for you
      automatically.
    - If you were affected and have tried to reconfigure the package
      you may be shown a debconf question to allow you to select
      the certificates that you want.
    - The only users who were not affected by this bug but may
      be affected by this fix are those who installed in a different
      locale, and then reconfigured the package so that no
      certificates are trusted, and who now run in a pt_BR locale.
      They will have to deselect all of the certificates again.
  * In addition to the previous version this version prevents the
    question being asked multiple times for those who appear to
    have been hit by this issue.

 -- James Westby <email address hidden>   Tue, 08 Apr 2008 12:00:17 +0100

20050804-0ubuntu0.6.06.1

Obsolete in dapper-updates on 2011-09-06

Deleted in dapper-proposed on 2011-09-15 (Reason: moved to -updates)

ca-certificates (20050804-0ubuntu0.6.06.1) dapper-proposed; urgency=low

  * Fix up generation of the /etc/ssl/certs/ca-certificates.crt
    file for those users who installed the package in a pt_BR
    locale (LP: #153625). A mistake in the translation template
    meant that the choices were not available in this locale,
    and so the file was always empty.
    - If you were affected and have not tried to reconfigure this
      package, then the problem should be corrected for you
      automatically.
    - If you were affected and have tried to reconfigure the package
      you may be shown a debconf question to allow you to select
      the certificates that you want.
    - The only users who were not affected by this bug but may
      be affected by this fix are those who installed in a different
      locale, and then reconfigured the package so that no
      certificates are trusted, and who now run in a pt_BR locale.
      They will have to deselect all of the certificates again.
  * In addition to the previous version this version prevents the
    question being asked multiple times for those who appear to
    have been hit by this issue.

 -- James Westby <email address hidden>   Tue, 08 Apr 2008 11:30:57 +0100

20070303-0ubuntu3

Superseded in intrepid-release on 2008-06-03

Obsolete in hardy-release on 2015-04-24

ca-certificates (20070303-0ubuntu3) hardy; urgency=low

  * Prevent the debconf question being forced twice for users we
    suspect to be affected. Also clean up the debconf value we
    use to do this in the postinst as it will not be needed post-hardy.

 -- James Westby <email address hidden>   Tue, 08 Apr 2008 09:40:09 +0100

20070303-0ubuntu0.7.10

Superseded in gutsy-proposed on 2008-04-24

ca-certificates (20070303-0ubuntu0.7.10) gutsy-proposed; urgency=low

  * Fix up generation of the /etc/ssl/certs/ca-certificates.crt
    file for those users who installed the package in a pt_BR
    locale (LP: #153625). A mistake in the translation template
    meant that the choices were not available in this locale,
    and so the file was always empty.
    - If you were affected and have not tried to reconfigure this
      package, then the problem should be corrected for you
      automatically.
    - If you were affected and have tried to reconfigure the package
      you may be shown a debconf question to allow you to select
      the certificates that you want.
    - The only users who were not affected by this bug but may
      be affected by this fix are those who installed in a different
      locale, and then reconfigured the package so that no
      certificates are trusted, and who now run in a pt_BR locale.
      They will have to deselect all of the certificates again.

 -- James Westby <email address hidden>   Wed, 02 Apr 2008 18:02:39 +0100

20061027-0ubuntu0.1

Superseded in feisty-proposed on 2008-04-24

ca-certificates (20061027-0ubuntu0.1) feisty-proposed; urgency=low

  * Fix up generation of the /etc/ssl/certs/ca-certificates.crt
    file for those users who installed the package in a pt_BR
    locale (LP: #153625). A mistake in the translation template
    meant that the choices were not available in this locale,
    and so the file was always empty.
    - If you were affected and have not tried to reconfigure this
      package, then the problem should be corrected for you
      automatically.
    - If you were affected and have tried to reconfigure the package
      you may be shown a debconf question to allow you to select
      the certificates that you want.
    - The only users who were not affected by this bug but may
      be affected by this fix are those who installed in a different
      locale, and then reconfigured the package so that no
      certificates are trusted, and who now run in a pt_BR locale.
      They will have to deselect all of the certificates again.

 -- James Westby <email address hidden>   Wed, 02 Apr 2008 18:22:58 +0100

20050804-0ubuntu0.6.10

Deleted in edgy-proposed on 2008-04-24 (Reason: obsolete SRU)

ca-certificates (20050804-0ubuntu0.6.10) edgy-proposed; urgency=low

  * Fix up generation of the /etc/ssl/certs/ca-certificates.crt
    file for those users who installed the package in a pt_BR
    locale (LP: #153625). A mistake in the translation template
    meant that the choices were not available in this locale,
    and so the file was always empty.
    - If you were affected and have not tried to reconfigure this
      package, then the problem should be corrected for you
      automatically.
    - If you were affected and have tried to reconfigure the package
      you may be shown a debconf question to allow you to select
      the certificates that you want.
    - The only users who were not affected by this bug but may
      be affected by this fix are those who installed in a different
      locale, and then reconfigured the package so that no
      certificates are trusted, and who now run in a pt_BR locale.
      They will have to deselect all of the certificates again.

 -- James Westby <email address hidden>   Wed, 02 Apr 2008 18:02:39 +0100

20050804-0ubuntu0.6.06

Superseded in dapper-proposed on 2008-04-24

ca-certificates (20050804-0ubuntu0.6.06) dapper-proposed; urgency=low

  * Fix up generation of the /etc/ssl/certs/ca-certificates.crt
    file for those users who installed the package in a pt_BR
    locale (LP: #153625). A mistake in the translation template
    meant that the choices were not available in this locale,
    and so the file was always empty.
    - If you were affected and have not tried to reconfigure this
      package, then the problem should be corrected for you
      automatically.
    - If you were affected and have tried to reconfigure the package
      you may be shown a debconf question to allow you to select
      the certificates that you want.
    - The only users who were not affected by this bug but may
      be affected by this fix are those who installed in a different
      locale, and then reconfigured the package so that no
      certificates are trusted, and who now run in a pt_BR locale.
      They will have to deselect all of the certificates again.

 -- James Westby <email address hidden>   Wed, 02 Apr 2008 11:22:53 +0100

20070303-0ubuntu2

Superseded in hardy-release on 2008-04-15

ca-certificates (20070303-0ubuntu2) hardy; urgency=low

  * Improve on the last fix by trying to fix up the problem for
    those that were affected. (LP: #153625)
    - If upgrading from a broken version and the file is empty,
      then
      - if the question was never seen then act like a default
        install
      - if the question was seen and we are in pt_BR locale then
        ask the question again defaulting to selected for all
        certificates.
      - else do nothing.
    - This covers the common cases well, but may require people
      who changed their locales to either answer a question they
      already answered, or to run dpkg-reconfigure manually.
    - All of this code should be dropped after hardy, as all upgrades
      must go through hardy, and everyone will have a fixed version
      then.

 -- James Westby <email address hidden>   Tue, 01 Apr 2008 14:58:12 +0100

20070303-0ubuntu1

Superseded in hardy-release on 2008-04-02

ca-certificates (20070303-0ubuntu1) hardy; urgency=low

  [ James Westby ]
  * Fix installation on pt_BR locales. This was caused by the .templates
    choices strings being marked for translation, and then a translator
    changing the substitution variable name. Thanks to Andreas Hasenack
    for spotting the problem, and Daniel Hahler for the fix. (LP: #153625)
    When merging this package check if the Debian upload fixed debian
    bug 472507 as that is where the issue is reported.

  [ Steve Langasek ]
  * Modify Maintainer value to match the DebianMaintainerField
    specification.

 -- Steve Langasek <email address hidden>   Sat, 29 Mar 2008 05:54:49 +0000

20070303

Superseded in hardy-release on 2008-03-29

Obsolete in gutsy-release on 2011-09-16

ca-certificates (20070303) unstable; urgency=low

  * Add debconf.org crt. closes: Bug#342088
  * Add cacert class3 crt. closes: Bug#350282
  * Add debian/po/pt.po. closes: Bug#408183
  * Update debian/po/ru.po. closes: Bug#410770
  * Update debian/po/pt_BR.po. closes: Bug#403824
  * Add debian/po/gl.po. closes: Bug#407951

20061027

Superseded in gutsy-release on 2007-04-27

Obsolete in feisty-release on 2009-08-20

ca-certificates (20061027) unstable; urgency=low

  * sbin/update-ca-certificates:
    in fresh mode, rm symlinks only point to /usr/share/ca-certificates.
    preserve other symlinks. closes: Bug#387089
  * debian/po/nl.po: updated
    closes: Bug#386767
  * debian/po/fr.po: updated
    closes: Bug#386806
  * debian/po/da.po: updated
    closes: Bug#388018

20050804

Superseded in feisty-release on 2006-11-08

Obsolete in edgy-release on 2008-06-19

Obsolete in dapper-release on 2011-09-06

Superseded in dapper-release on 2006-02-03

ca-certificates (20050804) unstable; urgency=low


  * use ${misc:Depends} in debian/control for debconf
  * update description in debian/control
    closes: Bug#309547
  * update debian/po/vi.po
    closes: Bug#313186
  * update debian/po/de.po
    closes: Bug#313678

 -- Fumitoshi UKAI <email address hidden>  Thu,  4 Aug 2005 01:29:38 +0900

20050518

Obsolete in breezy-release on 2008-03-25

ca-certificates (20050518) unstable; urgency=high


  * fix ca-certificates.crt generationumask-sensitive and racy
    closes: Bug#296212
  * update mozilla/certdata.txt
    add: "Certum Root CA", "Comodo AAA Services root"
         "Comodo Secure Services root", 
	 "Comodo Trusted Services root",
	 "IPS Chained CAs root", "IPS CLASE1 root", "IPS CLASE3 root",
	 "IPS CLASEA1 root", "IPS CLASEA3 root", "IPS Servidores root"
	 "IPS Timestamping root",
	 "QuoVadis Root CA",
	 "Security Communication Root CA",
	 "Sonera Class 1 Root CA", "Sonera Class 2 Root CA",
	 "Staat der Nederlanden Root CA",
	 "TDC Internet Root CA", "TDC OCES Root CA", 
	 "UTN DATACorp SGC Root CA", "UTN USERFirst Email Root CA",
	 "UTN USERFirst Hardware Root CA", "UTN USERFirst Object Root CA"
  * add CACert.org's Root CA
    closes: Bug#213086, Bug#288293
  * add debian/po/vi.po
    closes: Bug#309480
  * add debian/po/cs.po
    closes: Bug#309019
  * write "How certificate will be accepted in ca-certificates package"
    in README.Debain
    
 -- Fumitoshi UKAI <email address hidden>  Wed, 18 May 2005 00:40:54 +0900

20040809

Obsolete in hoary-release on 2008-03-19

ca-certificates (20040809) unstable; urgency=low


  * previous version was not fixed Bug#255933 correctly.
    update-ca-certificates now remove symlinks of deselected entries 
    in ca-certificates.conf
    closes: Bug#255933

 -- Fumitoshi UKAI <email address hidden>  Mon,  9 Aug 2004 03:23:20 +0900

20031007

Obsolete in warty-release on 2008-01-09

ca-certificates (20031007) unstable; urgency=low


  * add debian/po/ru.po: closes: Bug#214371

 -- Fumitoshi UKAI <email address hidden>  Tue,  7 Oct 2003 03:06:06 +0900

Ubuntuca-certificates package

Change log for ca-certificates package in Ubuntu

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Ubuntu
ca-certificates package