1 # This file is under puppet control
2 # All CAs are trusted, see /etc/ssl/ca-global/README
4 # blacklist SPI's old CA
5 !spi-inc.org/spi-cacert-2008.crt
7 # blacklist StartCom/WoSign
8 # https://wiki.mozilla.org/CA:WoSign_Issues
9 !mozilla/StartCom_Certification_Authority_2.crt
10 !mozilla/StartCom_Certification_Authority_G2.crt
11 !mozilla/StartCom_Certification_Authority.crt
12 !mozilla/WoSign_China.crt
14 !mozilla/CA_WoSign_ECC_Root.crt
15 !mozilla/Certification_Authority_of_WoSign_G2.crt