emo
/
make-ca
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
164 Commits 1 Branch 0 Tags 220 KiB
Commit Graph

164 Commits

Author SHA1 Message Date
pepe 806e3d65c3 :( 2023-10-02 10:27:51 +00:00
Pierre Labastie 832f544098 Prepare a new release 
It's needed because there is a new root certificate for hg.mozilla.org
 2023-09-26 22:11:58 +02:00
Pierre Labastie 63b9a3bf6f Update mozilla CA root certificate 
It seems it has changed on September 19th, 2023
 2023-09-26 22:05:49 +02:00
DJ Lucas 9291cf9319 make-ca.conf.dist: remove link to aurora 2022-12-27 20:12:26 -06:00
DJ Lucas 5fec9b5317 CS.txt: Update to latestest list of Microsoft certs. 2022-12-27 20:10:32 -06:00
DJ Lucas 6eee45ffc9 CHANGELOG: add missing changelog entries. 2022-12-27 20:07:18 -06:00
DJ Lucas 327c7e9306 make-ca{,.conf.dist}: set nss tree to default source and introduce workaround for p11-kit mishandling of nss-{email,server}-distrust-after values. 2022-12-21 23:10:22 -06:00
DJ Lucas dac19a3cf1 make-ca: Keep upstream formatting and remove Opnessl data 2022-11-25 11:17:50 -06:00
DJ Lucas 10d6241bd2
make-ca: post-release version bump 2022-11-23 10:55:18 -06:00
DJ Lucas 0b408bda43
Update CHANGELOG 2022-11-23 10:06:27 -06:00
DJ Lucas 1528fdd47c
update-mscertsign.sh: Fix ouput error in script 2022-11-23 10:01:26 -06:00
DJ Lucas 55f8847147
Update CS.txt 
Fix comment
 2022-11-23 09:59:56 -06:00
DJ Lucas 62ce400648
Update CS.txt before release 2022-11-23 09:59:23 -06:00
DJ Lucas accd6b49fb
Merge pull request #22 from xry111/ship-mozilla-ca-root 
verify hg.mozilla.org with bundled CA root
 2022-11-23 08:31:07 -06:00
Xi Ruoyao d3562bc2f0
verify hg.mozilla.org with bundled CA root 
Before this, make-ca does not verify the certificate of hg.mozilla.org
at all.  It makes sense as make-ca often runs on systems without trust
anchor.  But, a MIM can easily fake hg.mozilla.org and completely hijack
the trust anchor of a BLFS system.

To improve the situation, we ship the certificate of the CA root for
hg.mozilla.org (DigiCert Global Root CA) in the make-ca package, and use
it to verify hg.mozilla.org.
 2022-01-31 19:07:08 +08:00
DJ Lucas 3093851fdd
Update CHANGELOG 2022-01-10 00:17:38 -06:00
DJ Lucas 76fa47f5d0
Don't install systemd timers on non-systemd 
Fixes #18
 2022-01-10 00:16:47 -06:00
DJ Lucas a7ceb85300
Update CS.txt (no changes since last release) 2022-01-10 00:12:39 -06:00
DJ Lucas 23daa436c8
Merge pull request #20 from xry111/fix-19 
make-ca: use --filter=ca-anchors for all stores
 2022-01-09 22:56:51 -06:00
Xi Ruoyao 151af87198
make-ca: use --filter=ca-anchors for all stores 
Fixes #19.
 2022-01-09 00:00:22 +08:00
DJ Lucas 6d1c729972 CHANGELOG: all current updates. 2021-09-16 18:56:59 -05:00
DJ Lucas 92dbb064c5 CS.txt,update-mscertsign.sh: Add update script for CS.txt now that MS has update CCADB. 2021-09-16 18:56:30 -05:00
DJ Lucas 1ff5a0a672 make-ca: Update help text for -i/--mscodesign switch. 2021-09-13 22:05:16 -05:00
DJ Lucas 4ee256bfb9 README,Makefile: move distfiles to /etc/make-ca. 
Closes #16.
 2021-09-13 22:01:58 -05:00
DJ Lucas c3620b3636 make-ca: guard overrides on first run. 
Closes #17.
 2021-09-13 21:50:21 -05:00
DJ Lucas c22c228e3e
Update README 2021-09-13 21:16:41 -05:00
DJ Lucas aacfcb6b69 make-ca,CHANGELOG: Post-release version bump. 2021-08-29 23:46:04 -05:00
DJ Lucas 1ba7f4319b make-ca: bump version. 2021-08-29 23:33:15 -05:00
DJ Lucas 79082f4814 Changelog 2021-08-29 23:32:18 -05:00
DJ Lucas 3eca3a7dba make-ca: set default for code signing to 0. 2021-08-29 23:31:20 -05:00
DJ Lucas 4bbde9a90b make-ca: Remove unneeded variable (leftover from testing). 2021-08-09 22:17:29 -05:00
DJ Lucas b138f67112 make-ca: Backup and restore anchors with PKIX extensions. 2021-08-09 22:14:46 -05:00
DJ Lucas c2a3d1d837 make-ca: Fix typo. 2021-08-08 22:32:37 -05:00
DJ Lucas c41b7f3d4b Makefile,make-ca: Use Microsoft's trust for code signing with -i | --mscodesign. 2021-08-08 11:03:12 -05:00
DJ Lucas 53ac95f8fd make-ca: remove workarounds and use certdata.txt values first, remove trailing spaces from x509 Subject derived p11label. 2021-08-08 00:26:59 -05:00
DJ Lucas 2c1da33970 make-ca: Special case for poorly named 'NetLock Arany' certs. 2021-08-07 20:16:17 -05:00
DJ Lucas 6e7e5a391c CHANGELOG: yet another typo. 2021-08-07 20:01:19 -05:00
DJ Lucas 5d764d2756 CHANGELOG: typo 2021-08-07 19:59:16 -05:00
DJ Lucas 3fc0a03bb5 :-) Properly thank miijoost for forcing me to fix all of the issues in get_p11_label(). 2021-08-07 19:58:24 -05:00
DJ Lucas 47d1fea7c4 CHANGELOG: clarify changes. 2021-08-07 19:53:35 -05:00
DJ Lucas 94c44961b8 make-ca: Revert change to use p11label for naming anchors. 2021-08-07 19:37:23 -05:00
DJ Lucas 0ea74dd846 make-ca: Additional normalizaton of p11label and fix a few corner cases. Thank you to Michael Joost for brining the issue to my attention. 2021-08-07 19:34:33 -05:00
DJ Lucas e02c930e6c make-ca: Fix DESTDIR if using a relative path. 2021-08-07 19:32:18 -05:00
DJ Lucas 51ffa79fa4 Fix help output for -a/--anchordir. 2021-08-07 01:48:22 -05:00
DJ Lucas c79ee2ff79 make-ca: Handle getopt style short options in get_args(). 2021-08-07 00:40:39 -05:00
DJ Lucas de5bf4a332
CS.txt: Updated code signing list 2021-08-06 23:31:39 -05:00
DJ Lucas f3913cb756 make-ca: minor text fixups to assiste with man-page output. 2021-08-05 23:56:09 -05:00
DJ Lucas 6938b0f70e README: change comment. 2021-08-05 23:34:27 -05:00
DJ Lucas 16c01c3249 make-ca: don't copy use -v when instaling cacerts.p12. 2021-08-05 23:28:54 -05:00
DJ Lucas f7a8c9f2f3 README,include.h2m: Sync documentation and fix typos. 2021-08-05 22:43:41 -05:00