diff --git a/SOURCES/trust-fixes b/SOURCES/trust-fixes index e675062..98b7767 100644 --- a/SOURCES/trust-fixes +++ b/SOURCES/trust-fixes @@ -1,8 +1 @@ -[p11-kit-object-v1] -label: "Add missing BasicConstraints for Entrust root" -id: "%55%e4%81%d1%11%80%be%d8%89%b9%08%a3%31%f9%a1%24%09%16%b9%70" -class: x-certificate-extension -object-id: 2.5.29.19 -x-critical: true -value: "%30%03%01%01%FF" - +# Nothing in here at the present time diff --git a/SPECS/ca-certificates.spec b/SPECS/ca-certificates.spec index 10dc156..6d2bd50 100644 --- a/SPECS/ca-certificates.spec +++ b/SPECS/ca-certificates.spec @@ -30,7 +30,7 @@ Version: 2014.1.98 # On RHEL 7.x, please keep the release version >= 70 # When rebasing on Y-Stream (7.y), use 71, 72, 73, ... # When rebasing on Z-Stream (7.y.z), use 70.0, 70.1, 70.2, ... -Release: 70.0%{?dist} +Release: 72%{?dist} License: Public Domain Group: System Environment/Base @@ -297,8 +297,12 @@ fi %changelog -* Thu Sep 11 2014 Kai Engert - 2014.1.98-70.0 -- update to CKBI 1.98 from NSS 3.16.1 +* Wed Sep 17 2014 Stef Walter - 2014.1.98-72 +- The BasicConstraints fix for Entrust Root is no longer necessary. + In addition it was invalid for p11-kit 0.20.x. rhbz#1130485 + +* Wed Sep 03 2014 Kai Engert - 2014.1.98-71 +- Update to CKBI 1.98 from NSS 3.16.1 - building on RHEL 7 no longer requires java-openjdk - added more detailed instructions for release numbers on RHEL branches, to avoid problems when rebasing on both z- and y-stream branches.