From 237021acb076abf3bbe2416ecd3c2f33e4fd4aee Mon Sep 17 00:00:00 2001
From: CentOS Sources <bugs@centos.org>
Date: Mar 05 2015 13:23:40 +0000
Subject: import ca-certificates-2014.1.98-72.el7


---

diff --git a/SOURCES/trust-fixes b/SOURCES/trust-fixes
index e675062..98b7767 100644
--- a/SOURCES/trust-fixes
+++ b/SOURCES/trust-fixes
@@ -1,8 +1 @@
-[p11-kit-object-v1]
-label: "Add missing BasicConstraints for Entrust root"
-id: "%55%e4%81%d1%11%80%be%d8%89%b9%08%a3%31%f9%a1%24%09%16%b9%70"
-class: x-certificate-extension
-object-id: 2.5.29.19
-x-critical: true
-value: "%30%03%01%01%FF"
-
+# Nothing in here at the present time
diff --git a/SPECS/ca-certificates.spec b/SPECS/ca-certificates.spec
index 10dc156..6d2bd50 100644
--- a/SPECS/ca-certificates.spec
+++ b/SPECS/ca-certificates.spec
@@ -30,7 +30,7 @@ Version: 2014.1.98
 # On RHEL 7.x, please keep the release version >= 70
 # When rebasing on Y-Stream (7.y), use 71, 72, 73, ...
 # When rebasing on Z-Stream (7.y.z), use 70.0, 70.1, 70.2, ...
-Release: 70.0%{?dist}
+Release: 72%{?dist}
 License: Public Domain
 
 Group: System Environment/Base
@@ -297,8 +297,12 @@ fi
 
 
 %changelog
-* Thu Sep 11 2014 Kai Engert <kaie@redhat.com> - 2014.1.98-70.0
-- update to CKBI 1.98 from NSS 3.16.1
+* Wed Sep 17 2014 Stef Walter <stefw@redhat.com> - 2014.1.98-72
+- The BasicConstraints fix for Entrust Root is no longer necessary.
+  In addition it was invalid for p11-kit 0.20.x. rhbz#1130485
+
+* Wed Sep 03 2014 Kai Engert <kaie@redhat.com> - 2014.1.98-71
+- Update to CKBI 1.98 from NSS 3.16.1
 - building on RHEL 7 no longer requires java-openjdk
 - added more detailed instructions for release numbers on RHEL branches,
   to avoid problems when rebasing on both z- and y-stream branches.