Changelog for ca-certificates-2016.2.10-65.4.el6.noarch.rpm :
Tue Nov 1 13:00:00 2016 Kai Engert - 2016.2.10-65.4
- fix a typo in the manual page

Wed Oct 26 14:00:00 2016 Kai Engert - 2016.2.10-65.3
- Update to CKBI 2.10 from NSS 3.27 with legacy modifications.

Mon Jan 18 13:00:00 2016 Kai Engert - 2015.2.6-65.1
- Update to CKBI 2.6 from NSS 3.21 with legacy modifications.

Thu Apr 23 14:00:00 2015 Kai Engert - 2015.2.4-65.1
- Update to CKBI 2.4 from NSS 3.18.1 with legacy modifications.

Tue Apr 14 14:00:00 2015 Kai Engert - 2015.2.3-65.3
- Fix a typo in the ca-legacy manual page (rhbz#1208850)

Wed Apr 1 14:00:00 2015 Kai Engert - 2015.2.3-65.2
- Include the legacy CA certificates in the classic TLS bundle, too.

Tue Mar 31 14:00:00 2015 Kai Engert - 2015.2.3-65.1
- Update to CKBI 2.3 from NSS 3.18 with legacy modifications.
- Add a patch to the source RPM that documents the changes from the
upstream version.
- Introduce the ca-legacy utility, a manual page, and the ca-legacy.conf
configuration file.
- The new scriptlets require the coreutils package.
- Remove the obsolete blacklist.txt file.

Thu Dec 4 13:00:00 2014 Kai Engert - 2014.1.98-65.2
- Add an alternative version of the \"Thawte Premium Server CA\" root,
which carries a SHA1-RSA signature, to allow OpenJDK to verify applets
which contain that version of the root certificate (rhbz#1138230).
This change doesn\'t add trust for another key, because both versions
of the certificate use the same public key.

Mon Jul 14 14:00:00 2014 Kai Engert - 2014.1.98-65.1
- Rebuild, ensure y-stream uses larger release number than z-stream.

Thu May 29 14:00:00 2014 Kai Engert - 2014.1.98-65.0
- Update to CKBI 1.98 from NSS 3.16.1

Tue Dec 17 13:00:00 2013 Kai Engert - 2013.1.95-65.1
- Bump release number for consistency across branches

Tue Dec 17 13:00:00 2013 Kai Engert - 2013.1.95-65.0
- Update to CKBI 1.95 from NSS 3.15.3.1

Tue Sep 3 14:00:00 2013 Kai Engert - 2013.1.94-65.0
- Update to CKBI 1.94 from NSS 3.15

Thu Jul 18 14:00:00 2013 Kai Engert - 2012.87-65.9
- fix manpage format

Wed Jul 17 14:00:00 2013 Kai Engert - 2012.87-65.8
- improve manpage

Thu Jul 11 14:00:00 2013 Kai Engert - 2012.87-65.7
- ExcludeArch/ExclusiveArch doesn\'t work to enforce a build host
- Added comment that explains the special build requirements.
- Added a comment suggesting to keep the release number below the
ones used on RHEL 7.
- Fixed permissions of /etc/pki/java (thanks to stefw)

Mon Jul 8 14:00:00 2013 Kai Engert - 2012.87-65.6
- set a certificate alias in trusted bundle (thanks to Ludwig Nussel)

Mon Jul 8 14:00:00 2013 Kai Engert - 2012.87-65.5
- update required p11-kit version

Wed Jul 3 14:00:00 2013 Kai Engert - 2012.87-65.4
- attempt to handle unsupported downgrades, where the admin has enabled
legacy support, but downgrades to an old package that is incompatible
provide the new feature.
- move manual page to the man8 section (system administration commands)
- simplify the README files now that we have a manual page

Fri Jun 14 14:00:00 2013 Kai Engert - 2012.87-65.3
- added a manual page and related build requirements
- updated copyright sections in scripts
- enhance update-ca-trust script

Fri Jun 14 14:00:00 2013 Stef Walter - 2012.87-65.2
- update-ca-trust: Print warnings to stderr

Fri Jun 14 14:00:00 2013 Stef Walter - 2012.87-65.1
- update-ca-trust: Update p11-kit script path
- update-ca-trust: script uses bash not sh

Fri Jun 14 14:00:00 2013 Kai Engert - 2012.87-65.0
- Major rework introducing the SharedSystemCertificates feature,
disabled by default.
- Require the p11-kit package that contains tools to automatically create
other file format bundles.
- Added a update-ca-trust script which can be used to enable the
new system and to regenerate the merged trust output.
- Refer to the various README files that have been added for more detailed
explanation of the new system.
- No longer require rsc for building. Remove use of rcs/ident.
- Update source URLs and comments, add source file for version information.
- Add explanation for the future version numbering scheme,
because the old numbering scheme assumed upstream using cvs,
which is no longer true, and therefore can no longer be used.

Thu Mar 1 13:00:00 2012 Joe Orton - 2010.63-4
- fix inclusion of code-signing-only certs in .trust.crt
- exclude blacklisted root from java keystore too
- remove trust from DigiNotar root (#734678)

Wed Apr 7 14:00:00 2010 Joe Orton - 2010.63-3
- package /etc/ssl/certs symlink for third-party apps (#572725)

Wed Apr 7 14:00:00 2010 Joe Orton - 2010.63-2
- rebuild

Wed Apr 7 14:00:00 2010 Joe Orton - 2010.63-1
- update to certdata.txt r1.63
- use upstream RCS version in Version

Fri Mar 19 13:00:00 2010 Joe Orton - 2010-4
- fix ca-bundle.crt (#575111)

Thu Mar 18 13:00:00 2010 Joe Orton - 2010-3
- update to certdata.txt r1.58
- add /etc/pki/tls/certs/ca-bundle.trust.crt using \'TRUSTED CERTICATE\' format
- exclude ECC certs from the Java cacerts database
- catch keytool failures
- fail parsing certdata.txt on finding untrusted but not blacklisted cert

Fri Jan 15 13:00:00 2010 Joe Orton - 2010-2
- fix Java cacert database generation: use Subject rather than Issuer
for alias name; add diagnostics; fix some alias names.

Mon Jan 11 13:00:00 2010 Joe Orton - 2010-1
- adopt Python certdata.txt parsing script from Debian

Fri Jul 24 14:00:00 2009 Fedora Release Engineering - 2009-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

Wed Jul 22 14:00:00 2009 Joe Orton 2009-1
- update to certdata.txt r1.53

Mon Feb 23 13:00:00 2009 Fedora Release Engineering - 2008-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

Tue Oct 14 14:00:00 2008 Joe Orton 2008-7
- update to certdata.txt r1.49

Wed Jun 25 14:00:00 2008 Thomas Fitzsimmons - 2008-6
- Change generate-cacerts.pl to produce pretty aliases.

Mon Jun 2 14:00:00 2008 Joe Orton 2008-5
- include /etc/pki/tls/cert.pem symlink to ca-bundle.crt

Tue May 27 14:00:00 2008 Joe Orton 2008-4
- use package name for temp dir, recreate it in prep

Tue May 27 14:00:00 2008 Joe Orton 2008-3
- fix source script perms
- mark packaged files as config(noreplace)

Tue May 27 14:00:00 2008 Joe Orton 2008-2
- add (but don\'t use) mkcabundle.pl
- tweak description
- use /usr/bin/keytool directly; BR java-openjdk

Tue May 27 14:00:00 2008 Joe Orton 2008-1
- Initial build (#448497)