Changelog for ca-certificates-2015.2.4-1.0.fc22.noarch.rpm :
Tue May 5 14:00:00 2015 Kai Engert - 2015.2.4-1.0
- Update to CKBI 2.4 from NSS 3.18.1 with legacy modifications.
- Fixed a typo in the ca-legacy manual page.

Tue Mar 31 14:00:00 2015 Kai Engert - 2015.2.3-1.1
- Don\'t use \"enable\" as a value for the legacy configuration, instead
of the value \"default\", to make it clear that this preference isn\'t
a promise to keep certificates enabled, but rather that we only
keep them enabled as long as it\'s considered necessary.
- Changed the configuration file, the ca-legacy utility and filenames
to use the term \"default\" (instead of the term \"enable\").
- Added a manual page for the ca-legacy utility.
- Fixed the ca-legacy utility to handle absence of the configuration
setting and treat absence as the default setting.

Tue Mar 24 13:00:00 2015 Kai Engert - 2015.2.3-1.0
- Update to CKBI 2.3 from NSS 3.18 with legacy modifications
- Fixed a mistake in the legacy handling of the upstream 2.2 release:
Removed two AOL certificates from the legacy group, because
upstream didn\'t remove them as part of phasing out 1024-bit
certificates, which means it isn\'t necessary to keep them.
- Fixed a mistake in the legacy handling of the upstream 2.1 release:
Moved two NetLock certificates into the legacy group.

Tue Dec 16 13:00:00 2014 Kai Engert - 2014.2.2-2
- Update to CKBI 2.2 from NSS 3.17.3 with legacy modifications
- Update project URL
- Cleanup

Sat Nov 15 13:00:00 2014 Peter Lemenkov - 2014.2.1-7
- Restore Requires: coreutils

Fri Nov 14 13:00:00 2014 Peter Lemenkov - 2014.2.1-6
- A proper fix for rhbz#1158343

Wed Oct 29 13:00:00 2014 Kai Engert - 2014.2.1-5
- add Requires: coreutils (rhbz#1158343)

Tue Oct 28 13:00:00 2014 Kai Engert - 2014.2.1-4
- Introduce the ca-legacy utility and a ca-legacy.conf configuration file.
By default, legacy roots required for OpenSSL/GnuTLS compatibility
are kept enabled. Using the ca-legacy utility, the legacy roots can be
disabled. If disabled, the system will use the trust set as provided
by the upstream Mozilla CA list. (See also: rhbz#1158197)

Sun Sep 21 14:00:00 2014 Kai Engert - 2014.2.1-3
- Temporarily re-enable several legacy root CA certificates because of
compatibility issues with software based on OpenSSL/GnuTLS,
see rhbz#1144808

Thu Aug 14 14:00:00 2014 Kai Engert - 2014.2.1-2
- Update to CKBI 2.1 from NSS 3.16.4
- Fix rhbz#1130226

Sat Jun 7 14:00:00 2014 Fedora Release Engineering - 2013.1.97-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

Wed Mar 19 13:00:00 2014 Kai Engert - 2013.1.97-2
- Update to CKBI 1.97 from NSS 3.16

Mon Feb 10 13:00:00 2014 Kai Engert - 2013.1.96-3
- Remove openjdk build dependency

Sat Jan 25 13:00:00 2014 Ville Skyttä - 2013.1.96-2
- Own the %{_datadir}/pki dir.

Thu Jan 9 13:00:00 2014 Kai Engert - 2013.1.96-1
- Update to CKBI 1.96 from NSS 3.15.4

Tue Dec 17 13:00:00 2013 Kai Engert - 2013.1.95-1
- Update to CKBI 1.95 from NSS 3.15.3.1

Fri Sep 6 14:00:00 2013 Kai Engert - 2013.1.94-18
- Update the Entrust root stapled extension for compatibility with
p11-kit version 0.19.2, patch by Stef Walter, rhbz#988745

Tue Sep 3 14:00:00 2013 Kai Engert - 2013.1.94-17
- merge manual improvement from f19

Sat Aug 3 14:00:00 2013 Fedora Release Engineering - 2013.1.94-16
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

Tue Jul 9 14:00:00 2013 Kai Engert - 2013.1.94-15
- clarification updates to manual page

Mon Jul 8 14:00:00 2013 Kai Engert - 2013.1.94-14
- added a manual page and related build requirements
- simplify the README files now that we have a manual page
- set a certificate alias in trusted bundle (thanks to Ludwig Nussel)

Mon May 27 14:00:00 2013 Kai Engert - 2013.1.94-13
- use correct command in README files, rhbz#961809

Mon May 27 14:00:00 2013 Kai Engert - 2013.1.94-12
- update to version 1.94 provided by NSS 3.15 (beta)

Mon Apr 22 14:00:00 2013 Kai Engert - 2012.87-12
- Use both label and serial to identify cert during conversion, rhbz#927601
- Add myself as contributor to certdata2.pem.py and remove use of rcs/ident.
(thanks to Michael Shuler for suggesting to do so)
- Update source URLs and comments, add source file for version information.

Tue Mar 19 13:00:00 2013 Kai Engert - 2012.87-11
- adjust to changed and new functionality provided by p11-kit 0.17.3
- updated READMEs to describe the new directory-specific treatment of files
- ship a new file that contains certificates with neutral trust
- ship a new file that contains distrust objects, and also staple a
basic constraint extension to one legacy root contained in the
Mozilla CA list
- adjust the build script to dynamically produce most of above files
- add and own the anchors and blacklist subdirectories
- file generate-cacerts.pl is no longer required

Fri Mar 8 13:00:00 2013 Kai Engert - 2012.87-9
- Major rework for the Fedora SharedSystemCertificates feature.
- Only ship a PEM bundle file using the BEGIN TRUSTED CERTIFICATE file format.
- Require the p11-kit package that contains tools to automatically create
other file format bundles.
- Convert old file locations to symbolic links that point to dynamically
generated files.
- Old files, which might have been locally modified, will be saved in backup
files with .rpmsave extension.
- Added a update-ca-certificates script which can be used to regenerate
the merged trusted output.
- Refer to the various README files that have been added for more detailed
explanation of the new system.
- No longer require rsc for building.
- Add explanation for the future version numbering scheme,
because the old numbering scheme was based on upstream using cvs,
which is no longer true, and therefore can no longer be used.
- Includes changes from rhbz#873369.

Thu Mar 7 13:00:00 2013 Kai Engert - 2012.87-2.fc19.1
- Ship trust bundle file in /usr/share/pki/ca-trust-source/, temporarily in addition.
This location will soon become the only place containing this file.

Wed Feb 13 13:00:00 2013 Fedora Release Engineering - 2012.87-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

Fri Jan 4 13:00:00 2013 Paul Wouters - 2012.87-1
- Updated to r1.87 to blacklist mis-issued turktrust CA certs

Wed Oct 24 14:00:00 2012 Paul Wouters - 2012.86-2
- Updated blacklist with 20 entries (Diginotar, Trustwave, Comodo(?)
- Fix to certdata2pem.py to also check for CKT_NSS_NOT_TRUSTED

Tue Oct 23 14:00:00 2012 Paul Wouters - 2012.86-1
- update to r1.86

Mon Jul 23 14:00:00 2012 Joe Orton - 2012.85-2
- add openssl to BuildRequires

Mon Jul 23 14:00:00 2012 Joe Orton - 2012.85-1
- update to r1.85

Wed Jul 18 14:00:00 2012 Fedora Release Engineering - 2012.81-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

Mon Feb 13 13:00:00 2012 Joe Orton - 2012.81-1
- update to r1.81

Thu Jan 12 13:00:00 2012 Fedora Release Engineering - 2011.80-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

Wed Nov 9 13:00:00 2011 Joe Orton - 2011.80-1
- update to r1.80
- fix handling of certs with dublicate Subject names (#733032)

Thu Sep 1 14:00:00 2011 Joe Orton - 2011.78-1
- update to r1.78, removing trust from DigiNotar root (#734679)

Wed Aug 3 14:00:00 2011 Joe Orton - 2011.75-1
- update to r1.75

Wed Apr 20 14:00:00 2011 Joe Orton - 2011.74-1
- update to r1.74

Tue Feb 8 13:00:00 2011 Fedora Release Engineering - 2011.70-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

Wed Jan 12 13:00:00 2011 Joe Orton - 2011.70-1
- update to r1.70

Tue Nov 9 13:00:00 2010 Joe Orton - 2010.65-3
- update to r1.65

Wed Apr 7 14:00:00 2010 Joe Orton - 2010.63-3
- package /etc/ssl/certs symlink for third-party apps (#572725)

Wed Apr 7 14:00:00 2010 Joe Orton - 2010.63-2
- rebuild

Wed Apr 7 14:00:00 2010 Joe Orton - 2010.63-1
- update to certdata.txt r1.63
- use upstream RCS version in Version

Fri Mar 19 13:00:00 2010 Joe Orton - 2010-4
- fix ca-bundle.crt (#575111)

Thu Mar 18 13:00:00 2010 Joe Orton - 2010-3
- update to certdata.txt r1.58
- add /etc/pki/tls/certs/ca-bundle.trust.crt using \'TRUSTED CERTICATE\' format
- exclude ECC certs from the Java cacerts database
- catch keytool failures
- fail parsing certdata.txt on finding untrusted but not blacklisted cert

Fri Jan 15 13:00:00 2010 Joe Orton - 2010-2
- fix Java cacert database generation: use Subject rather than Issuer
for alias name; add diagnostics; fix some alias names.

Mon Jan 11 13:00:00 2010 Joe Orton - 2010-1
- adopt Python certdata.txt parsing script from Debian

Fri Jul 24 14:00:00 2009 Fedora Release Engineering - 2009-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

Wed Jul 22 14:00:00 2009 Joe Orton 2009-1
- update to certdata.txt r1.53

Mon Feb 23 13:00:00 2009 Fedora Release Engineering - 2008-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

Tue Oct 14 14:00:00 2008 Joe Orton 2008-7
- update to certdata.txt r1.49

Wed Jun 25 14:00:00 2008 Thomas Fitzsimmons - 2008-6
- Change generate-cacerts.pl to produce pretty aliases.

Mon Jun 2 14:00:00 2008 Joe Orton 2008-5
- include /etc/pki/tls/cert.pem symlink to ca-bundle.crt

Tue May 27 14:00:00 2008 Joe Orton 2008-4
- use package name for temp dir, recreate it in prep

Tue May 27 14:00:00 2008 Joe Orton 2008-3
- fix source script perms
- mark packaged files as config(noreplace)

Tue May 27 14:00:00 2008 Joe Orton 2008-2
- add (but don\'t use) mkcabundle.pl
- tweak description
- use /usr/bin/keytool directly; BR java-openjdk

Tue May 27 14:00:00 2008 Joe Orton 2008-1
- Initial build (#448497)