modules/ssl/files/ca-certificates-global.conf

   1 # This file is under puppet control
   2 # All CAs are trusted, see /etc/ssl/README
   3
   4 # blacklist SPI's old CA
   5 !spi-inc.org/spi-cacert-2008.crt
   6
   7 # blacklist StartCom/WoSign
   8 # https://wiki.mozilla.org/CA:WoSign_Issues
   9 !mozilla/StartCom_Certification_Authority_2.crt
  10 !mozilla/StartCom_Certification_Authority_G2.crt
  11 !mozilla/StartCom_Certification_Authority.crt
  12 !mozilla/WoSign_China.crt
  13 !mozilla/WoSign.crt
  14 !mozilla/CA_WoSign_ECC_Root.crt
  15 !mozilla/Certification_Authority_of_WoSign_G2.crt
  16
  17 # removed in ca-certificates 20170717 (nss builtins version 2.14)
  18 !mozilla/AC_Raíz_Certicámara_S.A..crt
  19 !mozilla/ApplicationCA_-_Japanese_Government.crt
  20 !mozilla/Buypass_Class_2_CA_1.crt
  21 !mozilla/ComSign_CA.crt
  22 !mozilla/EBG_Elektronik_Sertifika_Hizmet_Sağlayıcısı.crt
  23 !mozilla/Equifax_Secure_CA.crt
  24 !mozilla/Equifax_Secure_eBusiness_CA_1.crt
  25 !mozilla/Equifax_Secure_Global_eBusiness_CA.crt
  26 !mozilla/IGC_A.crt
  27 !mozilla/Juur-SK.crt
  28 !mozilla/Microsec_e-Szigno_Root_CA.crt
  29 !mozilla/Root_CA_Generalitat_Valenciana.crt
  30 !mozilla/RSA_Security_2048_v3.crt
  31 !mozilla/S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN.crt
  32 !mozilla/S-TRUST_Universal_Root_CA.crt
  33 !mozilla/SwissSign_Platinum_CA_-_G2.crt
  34 !mozilla/TC_TrustCenter_Class_3_CA_II.crt
  35 !mozilla/TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sağlayıcısı_H6.crt
  36 !mozilla/UTN_USERFirst_Email_Root_CA.crt
  37 !mozilla/Verisign_Class_1_Public_Primary_Certification_Authority.crt
  38 !mozilla/Verisign_Class_1_Public_Primary_Certification_Authority_-_G3.crt
  39 !mozilla/Verisign_Class_2_Public_Primary_Certification_Authority_-_G2.crt
  40 !mozilla/Verisign_Class_2_Public_Primary_Certification_Authority_-_G3.crt
  41 !mozilla/Verisign_Class_3_Public_Primary_Certification_Authority.crt
  42 !mozilla/WellsSecure_Public_Root_Certificate_Authority.crt
  43
  44 # removed in nss builtins version 2.16
  45 # https://bugzilla.mozilla.org/show_bug.cgi?id=1380868
  46 !mozilla/CNNIC_ROOT.crt
  47 !mozilla/China_Internet_Network_Information_Center_EV_Certificates_Root.crt
  48 # https://bugzilla.mozilla.org/show_bug.cgi?id=1359515
  49 !mozilla/Swisscom_Root_CA_2.crt
  50 !mozilla/Swisscom_Root_CA_1.crt
  51 !mozilla/Swisscom_Root_EV_CA_2.crt
  52 # https://bugzilla.mozilla.org/show_bug.cgi?id=1366114
  53 !mozilla/GeoTrust_Global_CA_2.crt
  54 # https://bugzilla.mozilla.org/show_bug.cgi?id=1366403
  55 !mozilla/AddTrust_Low-Value_Services_Root.crt
  56 !mozilla/AddTrust_Public_Services_Root.crt
  57 !mozilla/AddTrust_Qualified_Certificates_Root.crt
  58 !mozilla/Comodo_Secure_Services_root.crt
  59 !mozilla/Comodo_Trusted_Services_root.crt
  60 !mozilla/UTN_USERFirst_Hardware_Root_CA.crt