Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Mozilla CA certificate store to latest (07-22-2020) for libgit2 SSL. #36835

Merged
merged 1 commit into from
Jul 29, 2020

Conversation

mikhail-j
Copy link
Contributor

@staticfloat

The curl project has updated the Mozilla CA certificate store earlier last week (07/22/2020).

This update coincides with CA certificate list changes to Mozilla NSS 3.54.

4 CA certificates were added:

  • Microsoft ECC Root Certificate Authority 2017
  • Microsoft RSA Root Certificate Authority 2017
  • e-Szigno Root CA 2017
  • certSIGN Root CA G2

4 CA certificates were removed:

  • Verisign Class 3 Public Primary Certification Authority - G3
  • AddTrust External Root
  • Staat der Nederlanden Root CA - G2
  • LuxTrust Global Root 2

In addition, the curl project specifies that the CA certificate store file was changed on 06/24/2019 with 138 certificates from the previous 138 certificates in January 2020.

However, using the diff tool generated the following output:

--- cacert-2020-01-01.pem	2020-07-28 07:04:58.284267941 -0400
+++ cacert-2020-06-24.pem	2020-07-28 07:04:31.343974510 -0400
@@ -1,7 +1,7 @@
 ##
 ## Bundle of CA Root Certificates
 ##
-## Certificate data from Mozilla as of: Wed Jan  1 04:12:10 2020 GMT
+## Certificate data from Mozilla as of: Wed Jun 24 03:12:10 2020 GMT
 ##
 ## This is a bundle of X.509 certificates of public Certificate Authorities
 ## (CA). These were automatically extracted from Mozilla's root certificates
@@ -13,8 +13,8 @@
 ## an Apache+mod_ssl webserver for SSL client authentication.
 ## Just configure this file as the SSLCACertificateFile.
 ##
-## Conversion done with mk-ca-bundle.pl version 1.27.
-## SHA256: f3bdcd74612952da8476a9d4147f50b29ad0710b7dd95b4c8690500209986d70
+## Conversion done with mk-ca-bundle.pl version 1.28.
+## SHA256: 5796295533cad5a648a20a115b0894dc9b318c41501796e7158e824c323f11c3
 ##

@StefanKarpinski StefanKarpinski added merge me PR is reviewed. Merge when all tests are passing backport 1.0 labels Jul 29, 2020
@staticfloat staticfloat merged commit 02d5cb3 into JuliaLang:master Jul 29, 2020
@staticfloat
Copy link
Member

Thanks @mikhail-j! Man, this is really the kind of thing I'd like to be able to create a bot to do, I'm glad you've been doing it so faithfully so far!

KristofferC pushed a commit that referenced this pull request Aug 3, 2020
@KristofferC KristofferC mentioned this pull request Aug 3, 2020
25 tasks
simeonschaub pushed a commit to simeonschaub/julia that referenced this pull request Aug 11, 2020
@mikhail-j mikhail-j deleted the libgit2-cacert-july-2020 branch October 21, 2020 03:40
@DilumAluthge DilumAluthge removed the merge me PR is reviewed. Merge when all tests are passing label Jan 11, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants