diff options
| author |   sthen <sthen@openbsd.org> | 2016-02-17 13:06:54 +0000 |
|---|---|---|
| committer | sthen <sthen@openbsd.org> | 2016-02-17 13:06:54 +0000 |
| commit | 60a16b4514d18f9991d033ca4c771c18e6b02b11 (patch) | |
| tree | 78940980b0c66af46439b581ce8082c9be41a3af /usr.sbin/syslogd/syslogd.c | |
| parent | rsa-sha2-512,rsa-sha2-256 cannot be selected explicitly in (diff) | |
| download | wireguard-openbsd-60a16b4514d18f9991d033ca4c771c18e6b02b11.tar.xz wireguard-openbsd-60a16b4514d18f9991d033ca4c771c18e6b02b11.zip | |
Sync some root certificates with Mozilla's cert store. ok bcook@
- Add new root certificates present in Mozilla cert store from CA
organizations who are already in cert.pem (AddTrust, Comodo, DigiCert,
Entrust, GeoTrust, USERTrust).
- Replace Startcom's root with their updated sha256 version present in
Mozilla cert store. (They maintained serial# etc so this is still valid
for existing signed certificates).
- Add two root certificates from CA not previously present:
"C=US, O=Network Solutions L.L.C., CN=Network Solutions Certificate Authority"
"C=PL, O=Unizeto Sp. z o.o., CN=Certum CA" (the latter used by yandex.ru)
We are still listing some certificates that have been removed from
Mozilla's store (1024-bit etc) however these cannot be removed until
cert validation is improved (we don't currently accept a certificate
as valid unless the CA is at the end of a chain).
Diffstat (limited to 'usr.sbin/syslogd/syslogd.c')
0 files changed, 0 insertions, 0 deletions