Author: Michael Shuler
Revision Date: 2015-04-26 10:37:48 UTC

* debian/postinst:
  Set mode and group of /usr/local/share/ca-certificates based on current
  /usr/local permissions and ownership. Closes: #611501
* sbin/update-ca-certificates:
  Allow customisation of the paths used by update-ca-certificates.
  Add an option to set the certs in a directory to the defaults.
  Thanks for the patches, Paul Wise. Closes: #774059, #774201
  Fix shellcheck warnings and a little indentation.
* sbin/update-ca-certificates.8:
  Correct concatenated file name in man page from certificates.crt to
  ca-certificates.crt. Closes: #782230
* mozilla/{certdata.txt,nssckbi.h}:
  Update Mozilla certificate authority bundle to version 2.4.
  The following certificate authorities were added (+):
  + "CFCA EV ROOT"
  + "COMODO RSA Certification Authority"
  + "Entrust Root Certification Authority - EC1"
  + "Entrust Root Certification Authority - G2"
  + "GlobalSign ECC Root CA - R4"
  + "GlobalSign ECC Root CA - R5"
  + "IdenTrust Commercial Root CA 1"
  + "IdenTrust Public Sector Root CA 1"
  + "S-TRUST Universal Root CA"
  + "Staat der Nederlanden EV Root CA"
  + "Staat der Nederlanden Root CA - G3"
  + "USERTrust ECC Certification Authority"
  + "USERTrust RSA Certification Authority" Closes: #762709
  The following certificate authorities were removed (-):
  - "America Online Root Certification Authority 1"
  - "America Online Root Certification Authority 2"
  - "E-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
  - "GTE CyberTrust Global Root"
  - "Thawte Premium Server CA"
  - "Thawte Server CA"

Author: Michael Shuler
Revision Date: 2015-04-26 10:37:48 UTC

* debian/postinst:
  Set mode and group of /usr/local/share/ca-certificates based on current
  /usr/local permissions and ownership. Closes: #611501
* sbin/update-ca-certificates:
  Allow customisation of the paths used by update-ca-certificates.
  Add an option to set the certs in a directory to the defaults.
  Thanks for the patches, Paul Wise. Closes: #774059, #774201
  Fix shellcheck warnings and a little indentation.
* sbin/update-ca-certificates.8:
  Correct concatenated file name in man page from certificates.crt to
  ca-certificates.crt. Closes: #782230
* mozilla/{certdata.txt,nssckbi.h}:
  Update Mozilla certificate authority bundle to version 2.4.
  The following certificate authorities were added (+):
  + "CFCA EV ROOT"
  + "COMODO RSA Certification Authority"
  + "Entrust Root Certification Authority - EC1"
  + "Entrust Root Certification Authority - G2"
  + "GlobalSign ECC Root CA - R4"
  + "GlobalSign ECC Root CA - R5"
  + "IdenTrust Commercial Root CA 1"
  + "IdenTrust Public Sector Root CA 1"
  + "S-TRUST Universal Root CA"
  + "Staat der Nederlanden EV Root CA"
  + "Staat der Nederlanden Root CA - G3"
  + "USERTrust ECC Certification Authority"
  + "USERTrust RSA Certification Authority" Closes: #762709
  The following certificate authorities were removed (-):
  - "America Online Root Certification Authority 1"
  - "America Online Root Certification Authority 2"
  - "E-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
  - "GTE CyberTrust Global Root"
  - "Thawte Premium Server CA"
  - "Thawte Server CA"

Author: Michael Shuler
Revision Date: 2014-10-19 10:36:49 UTC

* debian/copyright:
  Add coverage for all files reported by lintian
  file-without-copyright-information warning.
* debian/source/lintian-overrides:
  Add file-without-copyright-information override for SPI certificate file.
* sbin/update-ca-certificates:
  Restore SELinux label after generating ca-certificates.crt file.
  Thanks to Laurent Bigonville for the patch. Closes: #742957
  Tidy indentation whitespace.
  Thanks to Antonio Terceiro for the patch. Closes: #742663
* debian/control:
  Update to Standards-Version: 3.9.6 (no other changes needed).
  Update Vcs-Browser link to cgit URL.

Author: Michael Shuler
Revision Date: 2014-03-30 17:49:01 UTC

* Stable update including one patch and current mozilla/certdata.txt.
  Closes: #501123
* Fix certdata2pem.py for multiple CAs using the same CKA_LABEL. Thanks
  to Marc Deslauriers for the patch. Closes: #683403, LP: #1031333
* Update mozilla/certdata.txt to version 1.97 (version now in nssckbi.h).
  Certificates added (+), removed (-), and renamed (~):
  + "ACCVRAIZ1"
  + "Atos TrustedRoot 2011"
  + "CA Disig Root R1"
  + "CA Disig Root R2"
  + "China Internet Network Information Center EV Certificates Root"
  + "D-TRUST Root Class 3 CA 2 2009"
  + "D-TRUST Root Class 3 CA 2 EV 2009"
  + "E-Tugra Certification Authority"
  + "PSCProcert"
  + "SG TRUST SERVICES RACINE"
  + "StartCom Certification Authority"
  ~ "StartCom Certification Authority"_2
    (both StartCom CAs now included with duplicate CKA_LABEL fix)
  + "Swisscom Root CA 2"
  + "Swisscom Root EV CA 2"
  + "T-TeleSec GlobalRoot Class 2"
  + "TURKTRUST Certificate Services Provider Root 2007"
  + "TWCA Global Root CA"
  + "TeliaSonera Root CA v1"
  + "Verisign Class 3 Public Primary Certification Authority"
  ~ "Verisign Class 3 Public Primary Certification Authority"_2
    (both Verisign Class 3 CAs now included with duplicate CKA_LABEL fix)
  - "Equifax Secure eBusiness CA 2"
  - "Firmaprofesional Root CA"
  - "TC TrustCenter Universal CA III"
  - "TDC OCES Root CA"
  - "Wells Fargo Root CA"

Author: Thijs Kinkhorst
Revision Date: 2011-09-13 11:29:21 UTC

* Non-maintainer upload.
* No-change upload with incremented version number to avoid a
  version number conflict with '20090814+nmu3'.

Author: Philipp Kern
Revision Date: 2008-08-09 14:58:24 UTC

* New cacert.org.pem joining both CACert Class 1 and Class 3 certificates.
  This file can be used for proper certificate chaining if CACert
  server certificates are used. The old class3.pem and root.pem
  certificates are deprecated. This new file could safely serve as
  a replacement for both. (Closes: #494343)
* This also reintroduces the old name for the CACert certificate,
  thus closing a long-standing bug about its rename to root.crt.
  (Closes: #413766)