mirror of
https://gitlab.alpinelinux.org/alpine/ca-certificates.git
synced 2025-04-18 03:44:02 +03:00
914471a540
Apply the [upstream patch][0] to restore certificates that are going to
be removed in the future, but should still be available to verify
existing certificates.
Note that the CKA_NSS_SERVER_DISTRUST_AFTER cannot be encoded in the
generated certificate bundle, so that means newly generated certificates
will be trusted as well. This is a trade-off between breaking existing
certificates versus not trusting newly generated certificates.
With this change, the following root certificates would be restored:
- Entrust.net Premium 2048 Secure Server CA
- Entrust Root Certification Authority
- AffirmTrust Commercial
- AffirmTrust Networking
- AffirmTrust Premium
- AffirmTrust Premium ECC
- Entrust Root Certification Authority - G2
- Entrust Root Certification Authority - EC
- GLOBALTRUST 2020
[0]:448df98d92.patch
Fixes #6
Closes #6
See merge request alpine/ca-certificates!16