git: 5cc3aca352c0 - releng/15.1 - ObsoleteFiles.inc: Add dropped certificates

Go to: [ bottom of page ] [ top of archives ] [ this month ]

From: Mark Johnston <markj_at_FreeBSD.org>
Date: Wed, 21 Oct 2026 04:44:34 UTC

The branch releng/15.1 has been updated by markj:

URL: https://cgit.FreeBSD.org/src/commit/?id=5cc3aca352c0524446612a7e7103a54cf103619e

commit 5cc3aca352c0524446612a7e7103a54cf103619e
Author:     Dag-Erling Smørgrav <des@FreeBSD.org>
AuthorDate: 2026-10-20 19:38:42 +0000
Commit:     Mark Johnston <markj@FreeBSD.org>
CommitDate: 2026-10-20 20:55:13 +0000

    ObsoleteFiles.inc: Add dropped certificates
    
    Approved by:    so
    Security:       FreeBSD-SA-26:73.caroot
    Reported by:    michaelo@
    Fixes:          82af7f44ebef ("caroot: Regenerate")
    
    (cherry picked from commit 21ac4761428c60c48bb5c3a0367a04dae164c414)
---
 ObsoleteFiles.inc | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/ObsoleteFiles.inc b/ObsoleteFiles.inc
index c97115393e5d..38ffd7a56e34 100644
--- a/ObsoleteFiles.inc
+++ b/ObsoleteFiles.inc
@@ -51,6 +51,13 @@
 #   xargs -n1 | sort | uniq -d;
 # done
 
+# 20261020: Regenerate trust store
+OLD_FILES+=usr/share/certs/trusted/SecureSign_Root_CA12.pem
+OLD_FILES+=usr/share/certs/trusted/ePKI_Root_Certification_Authority.pem
+OLD_FILES+=usr/share/certs/trusted/emSign_ECC_Root_CA_-_C3.pem
+OLD_FILES+=usr/share/certs/trusted/emSign_Root_CA_-_C1.pem
+OLD_FILES+=usr/share/certs/untrusted/Entrust_Root_Certification_Authority.pem
+
 # 20260503: Kill off MANSUBDIRs
 OLD_DIRS+=usr/share/man/man4/amd64
 OLD_FILES+=usr/share/man/man8/amd64/apm.8.gz