---
- branch: MAIN
  date: Mon Jun  8 09:55:37 UTC 2020
  files:
  - new: '1.2'
    old: '1.1'
    path: pkgsrc/security/ca-certificates/DESCR
    pathrev: pkgsrc/security/ca-certificates/DESCR@1.2
    type: modified
  - new: '1.2'
    old: '1.1'
    path: pkgsrc/security/ca-certificates/Makefile
    pathrev: pkgsrc/security/ca-certificates/Makefile@1.2
    type: modified
  - new: '1.2'
    old: '1.1'
    path: pkgsrc/security/ca-certificates/PLIST
    pathrev: pkgsrc/security/ca-certificates/PLIST@1.2
    type: modified
  - new: '1.2'
    old: '1.1'
    path: pkgsrc/security/ca-certificates/distinfo
    pathrev: pkgsrc/security/ca-certificates/distinfo@1.2
    type: modified
  - new: '0'
    old: '1.1'
    path: pkgsrc/security/ca-certificates/MESSAGE
    pathrev: pkgsrc/security/ca-certificates/MESSAGE@0
    type: deleted
  - new: '1.1'
    old: '0'
    path: pkgsrc/security/ca-certificates/files/README.pkgsrc
    pathrev: pkgsrc/security/ca-certificates/files/README.pkgsrc@1.1
    type: added
  id: 20200608T095537Z.2f4cc76ceceb7c8da8fb6bf7179711d4ee392d1c
  log: |
    Upgrade to 20200601

    * Update Mozilla certificate authority bundle to version 2.40.
    * Add distrusted Symantec CA list to blacklist for explicit removal.
    * Blacklist expired root certificate, "AddTrust External Root".

    The following certificate authorities were added (+):
    + "Certigna Root CA"
    + "emSign ECC Root CA - C3"
    + "emSign ECC Root CA - G3"
    + "emSign Root CA - C1"
    + "emSign Root CA - G1"
    + "Entrust Root Certification Authority - G4"
    + "GTS Root R1"
    + "GTS Root R2"
    + "GTS Root R3"
    + "GTS Root R4"
    + "Hongkong Post Root CA 3"
    + "UCA Extended Validation Root"
    + "UCA Global G2 Root"

    The following certificate authorities were removed (-):
    - "AddTrust External Root"
    - "Certinomis - Root CA"
    - "Certplus Class 2 Primary CA"
    - "Deutsche Telekom Root CA 2"
    - "GeoTrust Global CA"
    - "GeoTrust Primary Certification Authority"
    - "GeoTrust Primary Certification Authority - G2"
    - "GeoTrust Primary Certification Authority - G3"
    - "GeoTrust Universal CA"
    - "thawte Primary Root CA"
    - "thawte Primary Root CA - G2"
    - "thawte Primary Root CA - G3"
    - "VeriSign Class 3 Public Primary Certification Authority - G4"
    - "VeriSign Class 3 Public Primary Certification Authority - G5"
    - "VeriSign Universal Root Certification Authority"

    Changes for pkgsrc packaging:
    * Add README.pkgsrc, replacing MESSAGE.
    * Improve DESCR to better describe the functionality of the package.
    * Install changelog and README.source from the distribution package.
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/security/ca-certificates'
  unixtime: '1591610137'
  user: kim