From: Julien Cristau Date: Sun, 3 Sep 2017 12:46:18 +0000 (+0200) Subject: ssl/ca-global: add ANSSI and CNNIC to the blacklist X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=d29003c2d1cf4fc3508a9634f37f598b9ab7c7e0;p=mirror%2Fdsa-puppet.git ssl/ca-global: add ANSSI and CNNIC to the blacklist --- diff --git a/modules/ssl/files/ca-certificates-global.conf b/modules/ssl/files/ca-certificates-global.conf index e6dece845..c97220f29 100644 --- a/modules/ssl/files/ca-certificates-global.conf +++ b/modules/ssl/files/ca-certificates-global.conf @@ -13,3 +13,10 @@ !mozilla/WoSign.crt !mozilla/CA_WoSign_ECC_Root.crt !mozilla/Certification_Authority_of_WoSign_G2.crt + +# https://wiki.mozilla.org/CA/Additional_Trust_Changes#CNNIC +!mozilla/CNNIC_ROOT.crt +!mozilla/China_Internet_Network_Information_Center_EV_Certificates_Root.crt + +# https://wiki.mozilla.org/CA/Additional_Trust_Changes#ANSSI +!mozilla/IGC_A.crt