-
ca-certificates (20210119~16.04.1) xenial-security; urgency=medium
* Update ca-certificates database to 20210119 (LP: #1914064):
- mozilla/{certdata.txt,nssckbi.h}: Update Mozilla certificate
authority bundle to version 2.46.
- backport certain changes from the Ubuntu 20.10 20210119 package
-- Marc Deslauriers <email address hidden> Mon, 01 Feb 2021 10:14:19 -0500
-
ca-certificates (20201027ubuntu0.16.04.1) xenial-security; urgency=medium
* mozilla/{certdata.txt,nssckbi.h}:
Update Mozilla certificate authority bundle to version 2.44.
(LP: #1900727)
-- Marc Deslauriers <email address hidden> Tue, 27 Oct 2020 07:37:00 -0400
-
ca-certificates (20190110~16.04.1) xenial-security; urgency=medium
* Update ca-certificates database to 20190110:
- backport certain changes from the Ubuntu 19.10 20190110 package
* mozilla/blacklist.txt: blacklist expired AddTrust External Root CA.
-- Marc Deslauriers <email address hidden> Fri, 29 May 2020 07:56:48 -0400
-
ca-certificates (20170717~16.04.2) xenial; urgency=medium
* Add ca-certificates udeb package (LP: #1807023)
-- Mauricio Faria de Oliveira <email address hidden> Thu, 06 Dec 2018 16:20:55 -0200
-
ca-certificates (20170717~16.04.1) xenial-security; urgency=medium
* Update ca-certificates database to 20170717:
- backport changes from the Ubuntu 17.10 20170717 package
-- Marc Deslauriers <email address hidden> Wed, 27 Sep 2017 11:09:45 -0400
-
ca-certificates (20160104ubuntu1) xenial; urgency=medium
* Ship changelog to explain dropped mozilla-1024 certs.
-- Marc Deslauriers <email address hidden> Mon, 08 Feb 2016 07:38:07 -0500
-
ca-certificates (20160104) unstable; urgency=medium
* debian/rules:
Sort certificate list for reproducible builds. Closes: #808711
* mozilla/certdata2pem.py:
Drop old CK*_NETSCAPE trust flag checks
-- Michael Shuler <email address hidden> Mon, 04 Jan 2016 11:08:26 -0600
-
ca-certificates (20150426ubuntu1) wily; urgency=medium
* mozilla-1024/*, Makefile: Since version 20140927 of the ca-certificates
package, containing the 2.1 version of the nss database, CA
certificates with 1024-bit RSA keys have been removed. Unfortunately,
older versions of libraries such as OpenSSL, GnuTLS and glib-networking
are unable to automatically find alternative trust chains to continue
connecting to certain sites. This update restores the certificates
until all libraries have been updated to properly handle alternative
trust chains. See mozilla-1024/certdata.txt for a list of the exact
certificates that were added back. (LP: #1469803)
-- Marc Deslauriers <email address hidden> Mon, 13 Jul 2015 11:10:03 -0400
