Updated certificate blacklist

Added the two wrongly issued intermediate certificates from TÜRKTRUST
community-ssu · Jan 6, 2013 · 0be0388 · 0be0388
1 parent fc21ae9
commit 0be0388
Show file tree

Hide file tree

Showing 5 changed files with 69 additions and 5 deletions.
diff --git a/configure.ac b/configure.ac
@@ -1,5 +1,5 @@
 dnl AC_PREREQ(2.59)
-AC_INIT([maemo-security-certman], [0.2.1])
+AC_INIT([maemo-security-certman], [0.2.2])
 dnl AC_CONFIG_SRCDIR(lib/certman/maemosec_certman_main.cpp)
 AM_INIT_AUTOMAKE(AC_PACKAGE_NAME, AC_PACKAGE_VERSION)
 AC_CONFIG_HEADERS(include/config.h)

diff --git a/debian/changelog b/debian/changelog
@@ -1,3 +1,10 @@
+maemo-security-certman (0.2.2) unstable; urgency=low
+
+  Added the two wrongly issued intermediate certficates from TÜRKTRUST
+  see http://googleonlinesecurity.blogspot.co.at/2013/01/enhancing-digital-certificate-security.html
+
+ -- Christian Ratzenhofer <christian.ratzenhofer@cdnm.at>  Sun,  6 Jan 2013 22:19:22 +0100
+
 maemo-security-certman (0.2.1) unstable; urgency=low
 
   Added the two compromised Malaysian signing certs to the

diff --git a/etc/certs/blacklist/64fb1b863db84af24482f9563dea26c0f4e3b334.pem b/etc/certs/blacklist/64fb1b863db84af24482f9563dea26c0f4e3b334.pem
@@ -0,0 +1,31 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/etc/certs/blacklist/ef918e90bbc79150e645852bd7b6fa8145fe0063.pem b/etc/certs/blacklist/ef918e90bbc79150e645852bd7b6fa8145fe0063.pem
@@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/etc/secure/s/certman.blacklist b/etc/secure/s/certman.blacklist
@@ -2,6 +2,7 @@
 7d244df054443a5d45da3ff26fed604cc84304b2 */etc/certs/blacklist/182aa2c8d47a3f7bad048bbd6f9e10461378719d.pem
 22f25d141df609d39b31379f69e8cc3a05853005 */etc/certs/blacklist/408f39269c4c862399c65109a6e6f2c1fea7f6b7.pem
 f6160fd535e043404f49034bab6989c35b2f61f4 */etc/certs/blacklist/4c08c98d76f198c73edf3cd72f750db1767997cc.pem
+cadbdaa23acf396516e6b2007564a17549d5e0eb */etc/certs/blacklist/64fb1b863db84af24482f9563dea26c0f4e3b334.pem
 57db10796786f2b2c4b72c15deb7e30ea4f904da */etc/certs/blacklist/864945fc331933d404ed2761eee801c90c7f2f7e-1.pem
 1cd3a7bd6b0f65470e3527a2f146a6afad2ae247 */etc/certs/blacklist/864945fc331933d404ed2761eee801c90c7f2f7e-2.pem
 d9e75e487758e2a330e0d4dd6427ee01742f557d */etc/certs/blacklist/864945fc331933d404ed2761eee801c90c7f2f7e.pem
@@ -15,9 +16,10 @@ a95d9209dd84fc5437829d7db507df873f2588a8 */etc/certs/blacklist/c616934e1617ec16a
 69a4c7f177a41a8f9dc7b4192db5e7c1ed5615ea */etc/certs/blacklist/d464f6a9e8a57ed7bf6352038353dbc5418dea80.pem
 a064a89e0a1aab23cb3f9e0038e1b26af1f62e89 */etc/certs/blacklist/d58e5a5113b4290d31b61c8d3e5151310a33aa81.pem
 d26bf2a549bd284bb8f4fc748a13307732679ddf */etc/certs/blacklist/dd80d2543df74c70caa3b0dd347a32e4e83b5a3b.pem
+f25fbdb83480fc5589f0345f4d8dded76c325bce */etc/certs/blacklist/ef918e90bbc79150e645852bd7b6fa8145fe0063.pem
 bfb2622cf8a833020917d649b76180b443c37cb1 */etc/certs/blacklist/fedc94490c6fef5c7fc6f112994f1649adfb8265.pem
 SIGNATURE:
-926244d7e202917ebdcecbb15d3166063fdf761191d275cfea071e61b3f6c913
-bdb2b0be7f0827e73e8f863ff5f67612e0b6a8b2a039ea8ca0ba36321e19a367
-6145186babfbcda660e570048dc5b66ee0fdc04cf9e45f70ebdeb8a2f0e25872
-aad1ba85820efe16f7313530511f335c0def1fc5fb6a2e7968382afff11a535f
+247361cda112f39aa37e512314fabc52860b777bf7ddc5a3311d85d4a3b79caa
+c9c53561a02437cbc641daf0e72c88cfdbcdeb45b495422d787708274dc0d54d
+0430a2dd8cdafa16bfcab0268f7ffe1d29de5e0d38435afb47234840861d92ea
+c0d9c4749d81084145d4b4711b0d2acc95766db4fb814c288dd5500e78d31edb