Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package ca-certificates-mozilla for
openSUSE:Factory checked in at 2021-10-08 22:04:37
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/ca-certificates-mozilla (Old)
and /work/SRC/openSUSE:Factory/.ca-certificates-mozilla.new.2443 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "ca-certificates-mozilla"
Fri Oct 8 22:04:37 2021 rev:53 rq:923405 version:2.52
Changes:
--------
New Changes file:
--- /dev/null 2021-09-30 08:29:43.195243981 +0200
+++
/work/SRC/openSUSE:Factory/.ca-certificates-mozilla.new.2443/ca-certificates-mozilla-prebuilt.changes
2021-10-08 22:04:43.792528699 +0200
@@ -0,0 +1,4 @@
+-------------------------------------------------------------------
+Mon Oct 4 14:38:44 UTC 2021 - Ludwig Nussel <lnus...@suse.de>
+
+- new package for minimal base containers (jsc#SLE-22162)
---
/work/SRC/openSUSE:Factory/ca-certificates-mozilla/ca-certificates-mozilla.changes
2021-07-07 18:30:21.255050005 +0200
+++
/work/SRC/openSUSE:Factory/.ca-certificates-mozilla.new.2443/ca-certificates-mozilla.changes
2021-10-08 22:04:43.812528732 +0200
@@ -1,0 +2,17 @@
+Sat Oct 2 07:33:52 UTC 2021 - Marcus Meissner <meiss...@suse.com>
+
+- updated to 2.50 state of the Mozilla NSS Certificate store (bsc#1188006)
+- Added CAs:
+ + HARICA Client ECC Root CA 2021
+ + HARICA Client RSA Root CA 2021
+ + HARICA TLS ECC Root CA 2021
+ + HARICA TLS RSA Root CA 2021
+ + TunTrust Root CA
+
+-------------------------------------------------------------------
+Fri Sep 24 13:56:30 UTC 2021 - Marcus Meissner <meiss...@suse.com>
+
+- remove the DST_Root_CA_X3.pem trust, as it expires september 30th 2021.
+ (bsc#1190858)
+
+-------------------------------------------------------------------
New:
----
ca-certificates-mozilla-prebuilt.changes
ca-certificates-mozilla-prebuilt.spec
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ ca-certificates-mozilla-prebuilt.spec ++++++
#
# spec file for package ca-certificates-mozilla-prebuilt
#
# Copyright (c) 2021 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
Name: ca-certificates-mozilla-prebuilt
Version: %(rpm -q --qf %{version} ca-certificates-mozilla)
Release: 0
Summary: Pre-built CA certificates for OpenSSL
License: MPL-2.0
Group: Productivity/Networking/Security
URL: https://www.mozilla.org
BuildRequires: ca-certificates-mozilla
BuildArch: noarch
Requires(post): /bin/cp
%description
This package contains a static set of CA root certificates for
OpenSSL extracted from MozillaFirefox for use in containers. The
package pre-fills /var/lib/ca-certificates with a static set of
certificates if /var/lib/ca-certificates does not exist yet.
Therefore an upgrade of this package will NOT update the list of
root CA certificates in the system.
It it not possible to configure additional root CA certificates
using this package.
The package is only intended for use in containers that want to
avoid installing p11-kit.
For all other use cases please install the
"ca-certificates-mozilla" package.
%prep
%setup -qcT
%build
cp /usr/share/licenses/ca-certificates-mozilla/COPYING .
%install
mkdir -p %{buildroot}/etc/ssl
ln -s /var/lib/ca-certificates/pem %{buildroot}/etc/ssl/certs
ln -s /var/lib/ca-certificates/ca-bundle.pem %{buildroot}/etc/ssl/ca-bundle.pem
mkdir -p %{buildroot}/usr/share/factory/var/lib
cp -a /var/lib/ca-certificates %{buildroot}/usr/share/factory/var/lib
# need rpm needs to be able to delete the buildroot
chmod u+w %{buildroot}/usr/share/factory/var/lib/ca-certificates/*
mkdir -p %{buildroot}%{_tmpfilesdir}
echo "C /var/lib/ca-certificates" > %{buildroot}%{_tmpfilesdir}/%{name}.conf
%post
if [ -z "${TRANSACTIONAL_UPDATE}" ]; then
if [ -x /usr/bin/systemd-tmpfiles ]; then
/usr/bin/systemd-tmpfiles --create
%{_tmpfilesdir}/ca-certificates-mozilla-prebuilt.conf || :
elif [ -x /bin/cp ] && [ ! -e /var/lib/ca-certificates ]; then
/bin/cp -as /usr/share/factory/var/lib/ca-certificates /var/lib || :
fi
fi
%files
%license COPYING
/etc/ssl/ca-bundle.pem
/etc/ssl/certs
%{_tmpfilesdir}/%{name}.conf
/usr/share/factory
%ghost %dir /var/lib/ca-certificates
%defattr(0444,root,root,0555)
%ghost %dir /var/lib/ca-certificates/pem
%ghost %dir /var/lib/ca-certificates/openssl
%ghost /var/lib/ca-certificates/java-cacerts
%ghost /var/lib/ca-certificates/ca-bundle.pem
%changelog
++++++ ca-certificates-mozilla.spec ++++++
--- /var/tmp/diff_new_pack.R0BM6L/_old 2021-10-08 22:04:45.004530693 +0200
+++ /var/tmp/diff_new_pack.R0BM6L/_new 2021-10-08 22:04:45.004530693 +0200
@@ -37,7 +37,7 @@
Name: ca-certificates-mozilla
# Version number is NSS_BUILTINS_LIBRARY_VERSION in this file:
# http://hg.mozilla.org/projects/nss/file/default/lib/ckfw/builtins/nssckbi.h
-Version: 2.50
+Version: 2.52
Release: 0
Summary: CA certificates for OpenSSL
License: MPL-2.0
@@ -95,6 +95,8 @@
export LANG=en_US.UTF-8
cd certs
python3 %{SOURCE10}
+# temporary remove expired CA
+rm
DST_Root_CA_X3:2.16.68.175.176.128.214.163.39.186.137.48.57.134.46.248.64.107.tmp-p11-kit
cd ..
(
cat <<-EOF
++++++ certdata.txt ++++++
++++ 777 lines (skipped)
++++ between /work/SRC/openSUSE:Factory/ca-certificates-mozilla/certdata.txt
++++ and
/work/SRC/openSUSE:Factory/.ca-certificates-mozilla.new.2443/certdata.txt
++++++ nssckbi.h ++++++
--- /var/tmp/diff_new_pack.R0BM6L/_old 2021-10-08 22:04:45.124530890 +0200
+++ /var/tmp/diff_new_pack.R0BM6L/_new 2021-10-08 22:04:45.124530890 +0200
@@ -46,8 +46,8 @@
* It's recommend to switch back to 0 after having reached version 98/99.
*/
#define NSS_BUILTINS_LIBRARY_VERSION_MAJOR 2
-#define NSS_BUILTINS_LIBRARY_VERSION_MINOR 50
-#define NSS_BUILTINS_LIBRARY_VERSION "2.50"
+#define NSS_BUILTINS_LIBRARY_VERSION_MINOR 52
+#define NSS_BUILTINS_LIBRARY_VERSION "2.52"
/* These version numbers detail the semantic changes to the ckfw engine. */
#define NSS_BUILTINS_HARDWARE_VERSION_MAJOR 1
