Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[v8.x] crypto: update root certificates #29137

Closed
wants to merge 7 commits into from
Closed

[v8.x] crypto: update root certificates #29137

wants to merge 7 commits into from

Commits on Aug 15, 2019

  1. tools: update certdata.txt 

    This is the certdata.txt[0] from NSS 3.41, released on 2018-12-03.

This is the version of NSS that will ship in Firefox 65 on 2018-12-11.

[0] https://hg.mozilla.org/projects/nss/raw-file/NSS_3_41_RTM/lib/ckfw/builtins/certdata.txt

PR-URL: nodejs#25113
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
Reviewed-By: Ruben Bridgewater <ruben@bridgewater.de>
    @sam-github @bnoordhuis
    sam-github authored and bnoordhuis committed Aug 15, 2019
    Configuration menu
    Copy the full SHA
    9dd2a78 View commit details
    Browse the repository at this point in the history

  2. tools: update certdata.txt 

    This is the certdata.txt[0] from NSS 3.43, released on 2019-03-15.

This is the version of NSS that will ship in Firefox 67 on
2019-03-19.

[0] https://hg.mozilla.org/projects/nss/raw-file/NSS_3_43_RTM/lib/ckfw/builtins/certdata.txt

PR-URL: nodejs#27374
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
Reviewed-By: Ruben Bridgewater <ruben@bridgewater.de>
    @sam-github @bnoordhuis
    sam-github authored and bnoordhuis committed Aug 15, 2019
    Configuration menu
    Copy the full SHA
    2421e96 View commit details
    Browse the repository at this point in the history

  3. tools: update certdata.txt 

    This is the certdata.txt[0] from NSS 3.45, released on 2019-07-05.

This is the version of NSS that will ship in Firefox 69 on
2019-09-03.

[0] https://hg.mozilla.org/projects/nss/raw-file/NSS_3_45_RTM/lib/ckfw/builtins/certdata.txt

PR-URL: nodejs#28808
Reviewed-By: Rich Trott <rtrott@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
    @sam-github @bnoordhuis
    sam-github authored and bnoordhuis committed Aug 15, 2019
    Configuration menu
    Copy the full SHA
    5d2453c View commit details
    Browse the repository at this point in the history

  4. crypto: update root certificates 

    Update the list of root certificates in src/node_root_certs.h with
tools/mk-ca-bundle.pl.

Certificates added:
- GlobalSign Root CA - R6
- OISTE WISeKey Global Root GC CA
- GTS Root R1
- GTS Root R2
- GTS Root R3
- GTS Root R4
- UCA Global G2 Root
- UCA Extended Validation Root
- Certigna Root CA

Certificates removed:
- Visa eCommerce Root
- TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5
- Certplus Root CA G1
- Certplus Root CA G2
- OpenTrust Root CA G1
- OpenTrust Root CA G2
- OpenTrust Root CA G3

PR-URL: nodejs#25113
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
Reviewed-By: Ruben Bridgewater <ruben@bridgewater.de>
    @sam-github @bnoordhuis
    sam-github authored and bnoordhuis committed Aug 15, 2019
    Configuration menu
    Copy the full SHA
    de5d023 View commit details
    Browse the repository at this point in the history

  5. crypto: update root certificates 

    Update the list of root certificates in src/node_root_certs.h with
tools/mk-ca-bundle.pl.

Certificates added:
- emSign Root CA - G1
- emSign ECC Root CA - G3
- emSign Root CA - C1
- emSign ECC Root CA - C3
- Hongkong Post Root CA 3

PR-URL: nodejs#27374
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
Reviewed-By: Ruben Bridgewater <ruben@bridgewater.de>
    @sam-github @bnoordhuis
    sam-github authored and bnoordhuis committed Aug 15, 2019
    Configuration menu
    Copy the full SHA
    9e62956 View commit details
    Browse the repository at this point in the history

  6. tls: partially backport pull request nodejs#26415 

    This is a partial backport of commit f1a3968 ("tls: expose built-in
root certificates") from the master branch. The original commit adds a
new API, this commit just backports the non-visible changes to ease
backporting follow-up commits.

Refs: nodejs#26415
    @bnoordhuis
    bnoordhuis committed Aug 15, 2019
    Configuration menu
    Copy the full SHA
    eadc82b View commit details
    Browse the repository at this point in the history

  7. crypto: update root certificates 

    Update the list of root certificates in src/node_root_certs.h with
tools/mk-ca-bundle.pl.

Certificates added: (none)

Certificates removed:
- Certinomis - Root CA

PR-URL: nodejs#28808
Reviewed-By: Rich Trott <rtrott@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
    @sam-github @bnoordhuis
    sam-github authored and bnoordhuis committed Aug 15, 2019
    Configuration menu
    Copy the full SHA
    4b3d6aa View commit details
    Browse the repository at this point in the history