import ca-certificates-2023.2.60_v7.0.306-90.1.el9_2

.ca-certificates.metadata

@@ -0,0 +1 @@
+adc83b19e793491b1c6ea0fd8b46cd9f32e592fc SOURCES/trust-fixes

.gitignore

@@ -0,0 +1 @@
+SOURCES/trust-fixes

SOURCES/nssckbi.h

@@ -46,8 +46,8 @@
  * It's recommend to switch back to 0 after having reached version 98/99.
  */
 #define NSS_BUILTINS_LIBRARY_VERSION_MAJOR 2
-#define NSS_BUILTINS_LIBRARY_VERSION_MINOR 54
+#define NSS_BUILTINS_LIBRARY_VERSION_MINOR 60
-#define NSS_BUILTINS_LIBRARY_VERSION "2.54"
+#define NSS_BUILTINS_LIBRARY_VERSION "2.60"
 
 /* These version numbers detail the semantic changes to the ckfw engine. */
 #define NSS_BUILTINS_HARDWARE_VERSION_MAJOR 1

SOURCES/trust-fixes

@@ -1 +0,0 @@
-

SPECS/ca-certificates.spec

@@ -35,10 +35,10 @@ Name: ca-certificates
 # to have increasing version numbers. However, the new scheme will work, 
 # because all future versions will start with 2013 or larger.)
 
-Version: 2022.2.54
+Version: 2023.2.60_v7.0.306
 # for y-stream, please always use 91 <= release  < 100 (91,92,93)
 # for z-stream release branches, please use 90 <= release  < 91 (90.0, 90.1, ...)
-Release: 90.2%{?dist}.inferit
+Release: 90.1%{?dist}.inferit
 License: Public Domain
 
 URL: https://fedoraproject.org/wiki/CA-Certificates
@@ -395,6 +395,89 @@ fi
 
 
 %changelog
+*Tue Aug 29 2023 Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-90.1.inferit
+- Bump release number to make CI happy
+
+*Tue Aug 01 2023 Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-90.0
+- Update to CKBI 2.60_v7.0.306 from NSS 3.91
+-    Removing:
+-     # Certificate "Camerfirma Global Chambersign Root"
+-     # Certificate "Staat der Nederlanden EV Root CA"
+-     # Certificate "OpenTrust Root CA G1"
+-     # Certificate "Swedish Government Root Authority v1"
+-     # Certificate "DigiNotar Root CA G2"
+-     # Certificate "Federal Common Policy CA"
+-     # Certificate "TC TrustCenter Universal CA III"
+-     # Certificate "CCA India 2007"
+-     # Certificate "ipsCA Global CA Root"
+-     # Certificate "ipsCA Main CA Root"
+-     # Certificate "Macao Post eSignTrust Root Certification Authority"
+-     # Certificate "InfoNotary CSP Root"
+-     # Certificate "DigiNotar Root CA"
+-     # Certificate "Root CA"
+-     # Certificate "GPKIRootCA"
+-     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
+-     # Certificate "TC TrustCenter Universal CA I"
+-     # Certificate "TC TrustCenter Universal CA II"
+-     # Certificate "TC TrustCenter Class 2 CA II"
+-     # Certificate "TC TrustCenter Class 4 CA II"
+-     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
+-     # Certificate "CertRSA01"
+-     # Certificate "KISA RootCA 3"
+-     # Certificate "A-CERT ADVANCED"
+-     # Certificate "A-Trust-Qual-01"
+-     # Certificate "A-Trust-nQual-01"
+-     # Certificate "Serasa Certificate Authority II"
+-     # Certificate "TDC Internet"
+-     # Certificate "America Online Root Certification Authority 2"
+-     # Certificate "RSA Security Inc"
+-     # Certificate "Public Notary Root"
+-     # Certificate "Autoridade Certificadora Raiz Brasileira"
+-     # Certificate "Post.Trust Root CA"
+-     # Certificate "Entrust.net Secure Server Certification Authority"
+-     # Certificate "ePKI EV SSL Certification Authority - G1"
+-    Adding:
+-     # Certificate "DigiCert TLS ECC P384 Root G5"
+-     # Certificate "DigiCert TLS RSA4096 Root G5"
+-     # Certificate "DigiCert SMIME ECC P384 Root G5"
+-     # Certificate "DigiCert SMIME RSA4096 Root G5"
+-     # Certificate "Certainly Root R1"
+-     # Certificate "Certainly Root E1"
+-     # Certificate "E-Tugra Global Root CA RSA v3"
+-     # Certificate "E-Tugra Global Root CA ECC v3"
+-     # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
+-     # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
+-     # Certificate "BJCA Global Root CA1"
+-     # Certificate "BJCA Global Root CA2"
+-     # Certificate "Symantec Enterprise Mobile Root for Microsoft"
+-     # Certificate "A-Trust-Root-05"
+-     # Certificate "ADOCA02"
+-     # Certificate "StartCom Certification Authority G2"
+-     # Certificate "ATHEX Root CA"
+-     # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı"
+-     # Certificate "GeoTrust Primary Certification Authority"
+-     # Certificate "thawte Primary Root CA"
+-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
+-     # Certificate "America Online Root Certification Authority 1"
+-     # Certificate "Juur-SK"
+-     # Certificate "ComSign CA"
+-     # Certificate "ComSign Secured CA"
+-     # Certificate "ComSign Advanced Security CA"
+-     # Certificate "Global Chambersign Root"
+-     # Certificate "Sonera Class2 CA"
+-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
+-     # Certificate "VeriSign, Inc."
+-     # Certificate "GTE CyberTrust Global Root"
+-     # Certificate "Equifax Secure Global eBusiness CA-1"
+-     # Certificate "Equifax"
+-     # Certificate "Class 1 Primary CA"
+-     # Certificate "Swiss Government Root CA III"
+-     # Certificate "Application CA G4 Root"
+-     # Certificate "SSC GDL CA Root A"
+-     # Certificate "GlobalSign Code Signing Root E45"
+-     # Certificate "GlobalSign Code Signing Root R45"
+-     # Certificate "Entrust Code Signing Root Certification Authority - CSBR1"
+
 * Wed Apr 05 2023 Sergey Cherevko <s.cherevko@msvsphere.ru> - 2022.2.54-90.2.inferit
 - Added:
 -     # Certificate "Russian Trusted Root CA"