Remove obsolete debconf.org CA. Debconf now uses an SPI signed intermediary for its certificates. (Closes: #693405)

6 files changed, 3 insertions, 124 deletions

diff --git a/Makefile b/Makefile
index cc8444d..c635403 100644
--- a/Makefile
+++ b/Makefile
@@ -3,7 +3,7 @@
 #
 
 CERTSDIR = /usr/share/ca-certificates
-SUBDIRS = mozilla cacert.org debconf.org spi-inc.org
+SUBDIRS = mozilla cacert.org spi-inc.org
 
 all:
 	for dir in $(SUBDIRS); do \
diff --git a/debconf.org/Bug#342088.eml b/debconf.org/Bug#342088.eml
deleted file mode 100644
index d7b9326..0000000
--- a/debconf.org/Bug#342088.eml
+++ /dev/null
@@ -1,86 +0,0 @@
-Return-Path: <ukai@lists.debian.or.jp>
-X-Original-To: ukai@ukai.jp
-Delivered-To: ukai@ukai.jp
-Received: from lavender.ukai.org (ns.ukai.debian.gr.jp [210.157.158.39])
-	by mint.ukai.jp (Postfix) with ESMTP id DD181D41E6
-	for <ukai@ukai.jp>; Sat,  8 Apr 2006 03:55:45 +0900 (JST)
-Received: by lavender.ukai.org (Postfix)
-	id 2AE4D5285D; Sat,  8 Apr 2006 03:55:45 +0900 (JST)
-Delivered-To: ukai@ukai.org
-Received: from osdn.debian.or.jp (osdn.debian.or.jp [61.215.208.41])
-	by lavender.ukai.org (Postfix) with ESMTP id 2421952803
-	for <ukai@ukai.org>; Sat,  8 Apr 2006 03:55:44 +0900 (JST)
-Received: by osdn.debian.or.jp (Postfix, from userid 1001)
-	id AEF55C30B9; Sat,  8 Apr 2006 03:55:50 +0900 (JST)
-X-Return-Path: <joerg@debian.org>
-X-Original-To: ukai@debian.or.jp
-Delivered-To: ukai@debian.or.jp
-Received: from ganneff.de (mail.ganneff.de [213.146.108.162])
-	by osdn.debian.or.jp (Postfix) with ESMTP id DB696C2FE8
-	for <ukai@debian.or.jp>; Sat,  8 Apr 2006 03:55:49 +0900 (JST)
-Received: from localhost (localhost [127.0.0.1])
-	by ganneff.de (Postfix) with ESMTP id AE4D1E009A;
-	Fri,  7 Apr 2006 20:55:41 +0200 (CEST)
-Received: from ganneff.de ([127.0.0.1])
-	by localhost (goliath2 [127.0.0.1]) (amavisd-new, port 10024)
-	with LMTP id 02381-02-5; Fri, 7 Apr 2006 20:55:40 +0200 (CEST)
-Received: from vorlon.ganneff.de (vorlon [213.146.108.163])
-	by ganneff.de (Postfix) with ESMTP id 6B20DE0098;
-	Fri,  7 Apr 2006 20:55:40 +0200 (CEST)
-From: Joerg Jaspert <joerg@ganneff.de>
-To: 342088@bugs.debian.org
-Cc: Fumitoshi UKAI <ukai@debian.or.jp>, control@bugs.debian.org
-Subject: debconf.org ca certificate
-Organization: Goliath-BBS
-X-GPG-ID: 0x7E7B8AC9
-X-GPG-FP: DF7D EB2F DB28 FD2B A9FB  FA6D 715E D6A0 7E7B 8AC9
-X-message-flag: Formating hard disk. please wait...   10%...   20%...
-Date: Fri, 07 Apr 2006 20:55:40 +0200
-Message-ID: <87zmix43mb.fsf@vorlon.ganneff.de>
-User-Agent: Gnus/5.110004 (No Gnus v0.4) Emacs/22.0.50 (gnu/linux)
-MIME-Version: 1.0
-Content-Type: multipart/signed; boundary="=-=-=";
-	micalg=pgp-sha1; protocol="application/pgp-signature"
-X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at ganneff.de
-X-Bogosity: Ham, tests=bogofilter, spamicity=0.002385, version=0.94.4
-
---=-=-=
-Content-Transfer-Encoding: quoted-printable
-
-severity 342088 normal
-thanks
-
-Hi
-
-Lets sign (and resend) the request to include the debconf.org ca
-certificate. Severity raised to normal, as you request in your
-Readme.Debian (which I should have read earlier, doh)
-
-Description: DebConf.org CA, used for all SSL based signing stuff for
-             debconf.org machines.
-
-Get it: http://media.debconf.org/ - there it is, together with a
-        detached gpg signature from me.
-
-license: as free as a ca can be, certainly enough to get it included
-
-SHA1 Fingerprint=3D3F:63:0A:F2:17:12:C4:68:96:0C:01:35:99:5B:20:F1:A8:C2:C7=
-:8D
-
-=2D-=20
-bye Joerg
-<lamont> is there a tag for "won't be fixed until sarge+1"?
-<sam> depends whether the BTS is year 2037 compliant
-
---=-=-=
-Content-Type: application/pgp-signature
-
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1.4.2.2 (GNU/Linux)
-Comment: Joerg Jaspert <joerg@debian.org> -- Debian Developer
-
-iD8DBQFENrWscV7WoH57iskRAlX5AJ4qPwp9nGX6NO5rdv4UsXEsMXGyVgCeI1mU
-tKyGQ9MXGlD/EFkbO+5DgjQ=
-=I+TX
------END PGP SIGNATURE-----
---=-=-=--
diff --git a/debconf.org/Makefile b/debconf.org/Makefile
deleted file mode 100644
index 7c1b893..0000000
--- a/debconf.org/Makefile
+++ /dev/null
@@ -1,12 +0,0 @@
-#
-# Makefile
-#
-
-all:
-
-clean:
-
-install:
-	for p in *.crt; do \
-	 install -m 644 $$p $(CERTSDIR)/$$p ; \
-	done
diff --git a/debconf.org/ca.crt b/debconf.org/ca.crt
deleted file mode 100644
index 75708ec..0000000
--- a/debconf.org/ca.crt
+++ /dev/null
@@ -1,25 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIESzCCAzOgAwIBAgIJAJigUTEEXRQpMA0GCSqGSIb3DQEBBQUAMHYxCzAJBgNV
-BAYTAkRFMQ8wDQYDVQQIEwZIZXNzZW4xDjAMBgNVBAcTBUZ1bGRhMRAwDgYDVQQK
-EwdEZWJjb25mMRMwEQYDVQQDEwpEZWJjb25mIENBMR8wHQYJKoZIhvcNAQkBFhBq
-b2VyZ0BkZWJpYW4ub3JnMB4XDTA1MTEwNTE3NTUxNFoXDTE1MTEwMzE3NTUxNFow
-djELMAkGA1UEBhMCREUxDzANBgNVBAgTBkhlc3NlbjEOMAwGA1UEBxMFRnVsZGEx
-EDAOBgNVBAoTB0RlYmNvbmYxEzARBgNVBAMTCkRlYmNvbmYgQ0ExHzAdBgkqhkiG
-9w0BCQEWEGpvZXJnQGRlYmlhbi5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
-ggEKAoIBAQCvbOo0SrIwI5IMlsshH8WF3dHB9r9JlSKhMPaybawa1EyvZspMQ3wa
-F5qxNf3Sj+NElEmjseEqvCZiIIzqwerHu0Qw62cDYCdCd2+Wb5m0bPYB5CGHiyU1
-eNP0je42O0YeXG2BvUujN8AviocVo39X2YwNQ0ryy4OaqYgm2pRlbtT2ESbF+SfV
-Y2iqQj/f8ymF+lHo/pz8tbAqxWcqaSiHFAVQJrdqtFhtoodoNiE3q76zJoUkZTXB
-k60Yc3MJSnatZCpnsSBr/D7zpntl0THrUjjtdRWCjQVhqfhM1yZJV+ApbLdheFh0
-ZWlSxdnp25p0q0XYw/7G92ELyFDfBUUNAgMBAAGjgdswgdgwHQYDVR0OBBYEFMuV
-dFNb4mCWUFbcP5LOtxFLrEVTMIGoBgNVHSMEgaAwgZ2AFMuVdFNb4mCWUFbcP5LO
-txFLrEVToXqkeDB2MQswCQYDVQQGEwJERTEPMA0GA1UECBMGSGVzc2VuMQ4wDAYD
-VQQHEwVGdWxkYTEQMA4GA1UEChMHRGViY29uZjETMBEGA1UEAxMKRGViY29uZiBD
-QTEfMB0GCSqGSIb3DQEJARYQam9lcmdAZGViaWFuLm9yZ4IJAJigUTEEXRQpMAwG
-A1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQADggEBAGZXxHg4mnkvilRIM1EQfGdY
-S5b/WcyF2MYSTeTvK4aIB6VHwpZoZCnDGj2m2D3CkHT0upAD9o0zM1tdsfncLzV+
-mDT/jNmBtYo4QXx5vEPwvEIcgrWjwk7SyaEUhZjtolTkHB7ACl0oD0r71St4iEPR
-qTUCEXk2E47bg1Fz58wNt/yo2+4iqiRjg1XCH4evkQuhpW+dTZnDyFNqwSYZapOE
-TBA+9zBb6xD1KM2DdY7r4GiyYItN0BKLfuWbh9LXGbl1C+f4P11g+m2MPiavIeCe
-1iazG5pcS3KoTLACsYlEX24TINtg4kcuS81XdllcnsV3Kdts0nIqPj6uhTTZD0k=
------END CERTIFICATE-----
diff --git a/debconf.org/ca.crt.sig b/debconf.org/ca.crt.sig
deleted file mode 100644
index 4975cb1..0000000
--- a/debconf.org/ca.crt.sig
+++ /dev/null
diff --git a/debian/changelog b/debian/changelog
index 9d977a5..69aaabd 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,6 +1,8 @@
 ca-certificates (20130120) UNRELEASED; urgency=low
 
   * Checked for policy 3.9.4, no changes needed.
+  * Remove obsolete debconf.org CA. Debconf now uses an SPI signed
+    intermediary for its certificates. (Closes: #693405)
 
  -- Thijs Kinkhorst <thijs@debian.org>  Wed, 08 May 2013 15:24:16 +0200