Add list of CAs added/removed, NEWS, and release 20140927debian/20140927

3 files changed, 51 insertions, 10 deletions

diff --git a/debian/NEWS b/debian/NEWS
index ae5351c..9d837da 100644
--- a/debian/NEWS
+++ b/debian/NEWS
@@ -1,3 +1,26 @@
+ca-certificates (20140927) unstable; urgency=medium
+
+  Update Mozilla Certificate Authority bundle to version 2.1.
+    The following Certificate Authorities were added (+):
+    + "DigiCert Assured ID Root G2"
+    + "DigiCert Assured ID Root G3"
+    + "DigiCert Global Root G2"
+    + "DigiCert Global Root G3"
+    + "DigiCert Trusted Root G4"
+    + "QuoVadis Root CA 1 G3"
+    + "QuoVadis Root CA 2 G3"
+    + "QuoVadis Root CA 3 G3"
+    + "WoSign"
+    + "WoSign China"
+    The following Certificate Authorities were removed (-):
+    - "Entrust.net Secure Server CA"
+    - "RSA Root Certificate 1"
+    - "TDC Internet Root CA"
+    - "ValiCert Class 1 VA"
+    - "ValiCert Class 2 VA"
+
+ -- Michael Shuler <michael@pbandjelly.org>  Sat, 27 Sep 2014 15:16:51 -0500
+
 ca-certificates (20140325) unstable; urgency=medium
 
   Update mozilla/certdata.txt to version 1.97+revert_of_936304
diff --git a/debian/README.Debian b/debian/README.Debian
index 8b00ff3..db15552 100644
--- a/debian/README.Debian
+++ b/debian/README.Debian
@@ -15,7 +15,9 @@ The CA certificates contained in this package are installed into
 
 The configuration file /etc/ca-certificates.conf is seeded with
 trust information through Debconf.  Just call 'dpkg-reconfigure
-ca-certificates' to adjust the settings.
+ca-certificates' to adjust the settings to trust or disable the installed
+certificate authorities.  By default, all installed certificate authorities
+are configured to be trusted.
 
 'update-ca-certificates' will then update /etc/ssl/certs/ which may be
 used by various software in Debian.  It will also generate the hash
diff --git a/debian/changelog b/debian/changelog
index e3393ec..cb26e16 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,14 +1,30 @@
-ca-certificates (20140807) UNRELEASED; urgency=medium
-
-  * Update mozilla/certdata.txt to version 2.1
-    Certificates added (+) and removed (-):
-    + ...
-    - ...
-  * Remove debian/config in debian/rules clean target
+ca-certificates (20140927) unstable; urgency=medium
+
+  * Update Mozilla certificate authority bundle to version 2.1.
+    The following certificate authorities were added (+):
+    + "DigiCert Assured ID Root G2"
+    + "DigiCert Assured ID Root G3"
+    + "DigiCert Global Root G2"
+    + "DigiCert Global Root G3"
+    + "DigiCert Trusted Root G4"
+    + "QuoVadis Root CA 1 G3"
+    + "QuoVadis Root CA 2 G3"
+    + "QuoVadis Root CA 3 G3"
+    + "WoSign"
+    + "WoSign China"
+    The following certificate authorities were removed (-):
+    - "Entrust.net Secure Server CA"
+    - "RSA Root Certificate 1"
+    - "TDC Internet Root CA"
+    - "ValiCert Class 1 VA"
+    - "ValiCert Class 2 VA"
+  * Include clear list of CAs added/removed, as above, and include better note
+    in README.Debian for trust reconfiguration.  Closes: #743365
+  * Remove debian/config in debian/rules clean target.
   * Include d/{changelog,NEWS} entries in 20140223 for duplicate CKA_LABEL
-    rename of "StartCom Certification Authority"_2
+    rename of "StartCom Certification Authority"_2.
 
- -- Michael Shuler <michael@pbandjelly.org>  Thu, 07 Aug 2014 23:04:11 -0500
+ -- Michael Shuler <michael@pbandjelly.org>  Sat, 27 Sep 2014 15:14:00 -0500
 
 ca-certificates (20140325) unstable; urgency=medium