ca-certificates: Remove TrustCor Systems root CAs

[ipfire-2.x.git] / lfs / ca-certificates

diff --git a/lfs/ca-certificates b/lfs/ca-certificates
index 2911cc6a5b24dd70390643ced3cf199d5bb31fca..70f9e0ea6ea7c71b0eaaaa6e1386e75e79b8f075 100644 (file)
--- a/lfs/ca-certificates
+++ b/lfs/ca-certificates
@@ -24,7 +24,9 @@
 
 include Config
 
-VER        = 20220302
+VER        = 20221201
+
+# From https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/builtins/certdata.txt
 
 THISAPP    = ca-certificates
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
@@ -40,7 +42,7 @@ check :
 
 download :
 
-md5 :
+b2 :
 
 ###############################################################################
 # Installation Details
@@ -50,6 +52,10 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
        @$(PREBUILD)
        @rm -rf $(DIR_APP) && cp -av $(DIR_CONF)/$(THISAPP) $(DIR_APP)
 
+       # Remove TrustCor Systems root CAs (see mailing list thread:
+       # https://lists.ipfire.org/pipermail/development/2022-November/014681.html)
+       cd $(DIR_APP) && patch -Np0 < $(DIR_SRC)/src/patches/ca-certificates-Remove-TrustCor-Systems-root-CAs.patch
+
        cd $(DIR_APP) && sh ./build.sh
 
        -mkdir -pv /etc/ssl/certs