diff options
author | deraadt <> | 2021-09-30 18:28:12 +0000 |
---|---|---|
committer | deraadt <> | 2021-09-30 18:28:12 +0000 |
commit | 7258f8b54339c54b8fb144103bf3ed403b7d00f4 (patch) | |
tree | 9f04ad42eb2fbafc52451bd3a5791cc267ca270a | |
parent | f525bc4ca5d1ba59eeee4beb070687c8a7d0c0bb (diff) | |
download | openbsd-OPENBSD_6_8.tar.gz openbsd-OPENBSD_6_8.tar.bz2 openbsd-OPENBSD_6_8.zip |
delete expired DST Root CA X3 to work around bugs various librarieslibressl-v3.2.7OPENBSD_6_8
ok sthen, beck, jsing, tb, etc etc
This cannot be issued as an errata/syspatch, because syspatch cannot
handle "etc set" changes, but is still worth putting into -stable
-rw-r--r-- | src/lib/libcrypto/cert.pem | 45 |
1 files changed, 1 insertions, 44 deletions
diff --git a/src/lib/libcrypto/cert.pem b/src/lib/libcrypto/cert.pem index de7633ce1c..f53bfffe73 100644 --- a/src/lib/libcrypto/cert.pem +++ b/src/lib/libcrypto/cert.pem | |||
@@ -1,4 +1,4 @@ | |||
1 | # $OpenBSD: cert.pem,v 1.21 2020/06/01 18:53:53 sthen Exp $ | 1 | # $OpenBSD: cert.pem,v 1.21.4.1 2021/09/30 18:28:12 deraadt Exp $ |
2 | ### /C=ES/CN=Autoridad de Certificacion Firmaprofesional CIF A62634068 | 2 | ### /C=ES/CN=Autoridad de Certificacion Firmaprofesional CIF A62634068 |
3 | 3 | ||
4 | === /C=ES/CN=Autoridad de Certificacion Firmaprofesional CIF A62634068 | 4 | === /C=ES/CN=Autoridad de Certificacion Firmaprofesional CIF A62634068 |
@@ -1911,49 +1911,6 @@ r/OSmbaz5mEP0oUA51Aa5BuVnRmhuZyxm7EAHu/QD09CbMkKvO5D+jpxpchNJqU1 | |||
1911 | gKDWHrO8Dw9TdSmq6hN35N6MgSGtBxBHEa2HPQfRdbzP82Z+ | 1911 | gKDWHrO8Dw9TdSmq6hN35N6MgSGtBxBHEa2HPQfRdbzP82Z+ |
1912 | -----END CERTIFICATE----- | 1912 | -----END CERTIFICATE----- |
1913 | 1913 | ||
1914 | ### Digital Signature Trust Co. | ||
1915 | |||
1916 | === /O=Digital Signature Trust Co./CN=DST Root CA X3 | ||
1917 | Certificate: | ||
1918 | Data: | ||
1919 | Version: 3 (0x2) | ||
1920 | Serial Number: | ||
1921 | 44:af:b0:80:d6:a3:27:ba:89:30:39:86:2e:f8:40:6b | ||
1922 | Signature Algorithm: sha1WithRSAEncryption | ||
1923 | Validity | ||
1924 | Not Before: Sep 30 21:12:19 2000 GMT | ||
1925 | Not After : Sep 30 14:01:15 2021 GMT | ||
1926 | Subject: O=Digital Signature Trust Co., CN=DST Root CA X3 | ||
1927 | X509v3 extensions: | ||
1928 | X509v3 Basic Constraints: critical | ||
1929 | CA:TRUE | ||
1930 | X509v3 Key Usage: critical | ||
1931 | Certificate Sign, CRL Sign | ||
1932 | X509v3 Subject Key Identifier: | ||
1933 | C4:A7:B1:A4:7B:2C:71:FA:DB:E1:4B:90:75:FF:C4:15:60:85:89:10 | ||
1934 | SHA1 Fingerprint=DA:C9:02:4F:54:D8:F6:DF:94:93:5F:B1:73:26:38:CA:6A:D7:7C:13 | ||
1935 | SHA256 Fingerprint=06:87:26:03:31:A7:24:03:D9:09:F1:05:E6:9B:CF:0D:32:E1:BD:24:93:FF:C6:D9:20:6D:11:BC:D6:77:07:39 | ||
1936 | -----BEGIN CERTIFICATE----- | ||
1937 | MIIDSjCCAjKgAwIBAgIQRK+wgNajJ7qJMDmGLvhAazANBgkqhkiG9w0BAQUFADA/ | ||
1938 | MSQwIgYDVQQKExtEaWdpdGFsIFNpZ25hdHVyZSBUcnVzdCBDby4xFzAVBgNVBAMT | ||
1939 | DkRTVCBSb290IENBIFgzMB4XDTAwMDkzMDIxMTIxOVoXDTIxMDkzMDE0MDExNVow | ||
1940 | PzEkMCIGA1UEChMbRGlnaXRhbCBTaWduYXR1cmUgVHJ1c3QgQ28uMRcwFQYDVQQD | ||
1941 | Ew5EU1QgUm9vdCBDQSBYMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB | ||
1942 | AN+v6ZdQCINXtMxiZfaQguzH0yxrMMpb7NnDfcdAwRgUi+DoM3ZJKuM/IUmTrE4O | ||
1943 | rz5Iy2Xu/NMhD2XSKtkyj4zl93ewEnu1lcCJo6m67XMuegwGMoOifooUMM0RoOEq | ||
1944 | OLl5CjH9UL2AZd+3UWODyOKIYepLYYHsUmu5ouJLGiifSKOeDNoJjj4XLh7dIN9b | ||
1945 | xiqKqy69cK3FCxolkHRyxXtqqzTWMIn/5WgTe1QLyNau7Fqckh49ZLOMxt+/yUFw | ||
1946 | 7BZy1SbsOFU5Q9D8/RhcQPGX69Wam40dutolucbY38EVAjqr2m7xPi71XAicPNaD | ||
1947 | aeQQmxkqtilX4+U9m5/wAl0CAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNV | ||
1948 | HQ8BAf8EBAMCAQYwHQYDVR0OBBYEFMSnsaR7LHH62+FLkHX/xBVghYkQMA0GCSqG | ||
1949 | SIb3DQEBBQUAA4IBAQCjGiybFwBcqR7uKGY3Or+Dxz9LwwmglSBd49lZRNI+DT69 | ||
1950 | ikugdB/OEIKcdBodfpga3csTS7MgROSR6cz8faXbauX+5v3gTt23ADq1cEmv8uXr | ||
1951 | AvHRAosZy5Q6XkjEGB5YGV8eAlrwDPGxrancWYaLbumR9YbK+rlmM6pZW87ipxZz | ||
1952 | R8srzJmwN0jP41ZL9c8PDHIyh8bwRLtTcm1D9SZImlJnt1ir/md2cXjbDaJWFBM5 | ||
1953 | JDGFoqgCWjBH4d1QB7wCCZAA62RjYJsWvIjJEubSfZGL+T0yjWW06XyxV3bqxbYo | ||
1954 | Ob8VZRzI9neWagqNdwvYkQsEjgfbKbYK7p2CNTUQ | ||
1955 | -----END CERTIFICATE----- | ||
1956 | |||
1957 | ### Disig a.s. | 1914 | ### Disig a.s. |
1958 | 1915 | ||
1959 | === /C=SK/L=Bratislava/O=Disig a.s./CN=CA Disig Root R2 | 1916 | === /C=SK/L=Bratislava/O=Disig a.s./CN=CA Disig Root R2 |