From d29003c2d1cf4fc3508a9634f37f598b9ab7c7e0 Mon Sep 17 00:00:00 2001 From: Julien Cristau Date: Sun, 3 Sep 2017 14:46:18 +0200 Subject: [PATCH] ssl/ca-global: add ANSSI and CNNIC to the blacklist --- modules/ssl/files/ca-certificates-global.conf | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/modules/ssl/files/ca-certificates-global.conf b/modules/ssl/files/ca-certificates-global.conf index e6dece845..c97220f29 100644 --- a/modules/ssl/files/ca-certificates-global.conf +++ b/modules/ssl/files/ca-certificates-global.conf @@ -13,3 +13,10 @@ !mozilla/WoSign.crt !mozilla/CA_WoSign_ECC_Root.crt !mozilla/Certification_Authority_of_WoSign_G2.crt + +# https://wiki.mozilla.org/CA/Additional_Trust_Changes#CNNIC +!mozilla/CNNIC_ROOT.crt +!mozilla/China_Internet_Network_Information_Center_EV_Certificates_Root.crt + +# https://wiki.mozilla.org/CA/Additional_Trust_Changes#ANSSI +!mozilla/IGC_A.crt -- 2.20.1