Add d/{changelog,NEWS} entries for 20090814+squeeze1 releasedebian-squeeze

2 files changed, 250 insertions, 125 deletions

diff --git a/debian/NEWS b/debian/NEWS
index 6a0b57a..495f9ae 100644
--- a/debian/NEWS
+++ b/debian/NEWS
@@ -1,3 +1,130 @@
+ca-certificates (20090814+squeeze1) oldstable; urgency=low
+
+  Update mozilla/certdata.txt to version 1.97.
+    Certificates added (+), removed (-):
+    + "ACCVRAIZ1"
+    + "ACEDICOM Root"
+    + "AC Raíz Certicámara S.A."
+    + "Actalis Authentication Root CA"
+    + "AffirmTrust Commercial"
+    + "AffirmTrust Networking"
+    + "AffirmTrust Premium"
+    + "AffirmTrust Premium ECC"
+    + "ApplicationCA - Japanese Government"
+    + "Atos TrustedRoot 2011"
+    + "A-Trust-nQual-03"
+    + "Autoridad de Certificacion Firmaprofesional CIF A62634068"
+    + "Buypass Class 2 CA 1"
+    + "Buypass Class 2 Root CA"
+    + "Buypass Class 3 CA 1"
+    + "Buypass Class 3 Root CA"
+    + "CA Disig"
+    + "CA Disig Root R1"
+    + "CA Disig Root R2"
+    + "Certigna"
+    + "Certinomis - Autorité Racine"
+    + "certSIGN ROOT CA"
+    + "Certum Trusted Network CA"
+    + "Chambers of Commerce Root - 2008"
+    + "China Internet Network Information Center EV Certificates Root"
+    + "CNNIC ROOT"
+    + "ComSign CA"
+    + "ComSign Secured CA"
+    + "Cybertrust Global Root"
+    + "Deutsche Telekom Root CA 2"
+    + "D-TRUST Root Class 3 CA 2 2009"
+    + "D-TRUST Root Class 3 CA 2 EV 2009"
+    + "EBG Elektronik Sertifika Hizmet Sağlayıcısı"
+    + "EC-ACC"
+    + "EE Certification Centre Root CA"
+    + "E-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
+    + "ePKI Root Certification Authority"
+    + "E-Tugra Certification Authority"
+    + "GeoTrust Primary Certification Authority - G2"
+    + "GeoTrust Primary Certification Authority - G3"
+    + "Global Chambersign Root - 2008"
+    + "GlobalSign Root CA - R3"
+    + "Go Daddy Root Certificate Authority - G2"
+    + "Hellenic Academic and Research Institutions RootCA 2011"
+    + "Hongkong Post Root CA 1"
+    + "IGC/A"
+    + "Izenpe.com"
+    + "Juur-SK"
+    + "Microsec e-Szigno Root CA"
+    + "Microsec e-Szigno Root CA 2009"
+    + "NetLock Arany (Class Gold) Főtanúsítvány"
+    + "OISTE WISeKey Global Root GA CA"
+    + "PSCProcert"
+    + "Root CA Generalitat Valenciana"
+    + "SecureSign RootCA11"
+    + "Security Communication EV RootCA1"
+    + "Security Communication RootCA2"
+    + "SG TRUST SERVICES RACINE"
+    + "Staat der Nederlanden Root CA - G2"
+    + "Starfield Root Certificate Authority - G2"
+    + "Starfield Services Root Certificate Authority - G2"
+    + "StartCom Certification Authority"_2
+    + "StartCom Certification Authority G2"
+    + "S-TRUST Authentication and Encryption Root CA 2005 PN"
+    + "Swisscom Root CA 2"
+    + "Swisscom Root EV CA 2"
+    + "TC TrustCenter Class 2 CA II"
+    + "TC TrustCenter Class 3 CA II"
+    + "TC TrustCenter Universal CA I"
+    + "TeliaSonera Root CA v1"
+    + "thawte Primary Root CA - G2"
+    + "thawte Primary Root CA - G3"
+    + "Trustis FPS Root CA"
+    + "T-TeleSec GlobalRoot Class 2"
+    + "T-TeleSec GlobalRoot Class 3"
+    + "TURKTRUST Certificate Services Provider Root 2007"
+    + "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
+    + "TWCA Global Root CA"
+    + "TWCA Root Certification Authority"
+    + "VeriSign Class 3 Public Primary Certification Authority"_2
+    + "VeriSign Class 3 Public Primary Certification Authority - G4"
+    + "VeriSign Universal Root Certification Authority"
+    - "ABAecom (sub., Am. Bankers Assn.) Root CA"
+    - "AOL Time Warner Root Certification Authority 1"
+    - "AOL Time Warner Root Certification Authority 2"
+    - "beTRUSTed Root CA"
+    - "beTRUSTed Root CA-Baltimore Implementation"
+    - "beTRUSTed Root CA - Entrust Implementation"
+    - "beTRUSTed Root CA - RSA Implementation"
+    - "Digital Signature Trust Co. Global CA 2"
+    - "Digital Signature Trust Co. Global CA 4"
+    - "Entrust.net Global Secure Personal CA"
+    - "Entrust.net Global Secure Server CA"
+    - "Entrust.net Secure Personal CA"
+    - "Equifax Secure eBusiness CA 2"
+    - "Firmaprofesional Root CA"
+    - "GTE CyberTrust Root CA"
+    - "IPS Chained CAs root"
+    - "IPS CLASE1 root"
+    - "IPS CLASE3 root"
+    - "IPS CLASEA1 root"
+    - "IPS CLASEA3 root"
+    - "IPS Servidores root"
+    - "IPS Timestamping root"
+    - "RSA Security 1024 v3"
+    - "StartCom Ltd."
+    - "TC TrustCenter, Germany, Class 2 CA"
+    - "TC TrustCenter, Germany, Class 3 CA"
+    - "TDC OCES Root CA"
+    - "Thawte Personal Basic CA"
+    - "Thawte Personal Freemail CA"
+    - "Thawte Personal Premium CA"
+    - "Thawte Time Stamping CA"
+    - "UTN-USER First-Network Applications"
+    - "Verisign Class 2 Public Primary Certification Authority"
+    - "Verisign Class 4 Public Primary Certification Authority - G2"
+    - "Verisign/RSA Secure Server CA"
+    - "Verisign Time Stamping Authority CA"
+    - "Visa International Global Root 2"
+    - "Wells Fargo Root CA"
+
+ -- Michael Shuler <michael@pbandjelly.org>  Sun, 30 Mar 2014 22:06:04 -0500
+
 ca-certificates (20090708) unstable; urgency=low
 
   * Removed CA files:
diff --git a/debian/changelog b/debian/changelog
index 858f9d4..14d9924 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,135 +1,133 @@
 ca-certificates (20090814+squeeze1) oldstable; urgency=low
 
-  * Oldstable update including one patch and current mozilla/certdata.txt.
-    Closes: #501123
+  * Oldstable update including current mozilla/certdata.txt and backported
+    fixes to parse the file.  Closes: #501123
   * Update Maintainer and Uploaders in d/control.
   * Fix certdata2pem.py for multiple CAs using the same CKA_LABEL.  Thanks
     to Marc Deslauriers for the patch.  Closes: #683403, LP: #1031333
   * Fix certdata2pem.py to parse newer NSS trust bits in certdata.txt.
   * Update mozilla/certdata.txt to version 1.97 (version now in nssckbi.h).
-    Certificates added (+), removed (-), and renamed (~):
-TODO: clean these up to their respective CKA_LABEL names
-TODO: NEWS entry
-    + A-Trust-nQual-03.crt
-    + ACCVRAIZ1.crt
-    + ACEDICOM_Root.crt
-    + AC_Ra\303\255z_Certic\303\241mara_S.A..crt
-    + Actalis_Authentication_Root_CA.crt
-    + AffirmTrust_Commercial.crt
-    + AffirmTrust_Networking.crt
-    + AffirmTrust_Premium.crt
-    + AffirmTrust_Premium_ECC.crt
-    + ApplicationCA_-_Japanese_Government.crt
-    + Atos_TrustedRoot_2011.crt
-    + Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt
-    + Buypass_Class_2_CA_1.crt
-    + Buypass_Class_2_Root_CA.crt
-    + Buypass_Class_3_CA_1.crt
-    + Buypass_Class_3_Root_CA.crt
-    + CA_Disig.crt
-    + CA_Disig_Root_R1.crt
-    + CA_Disig_Root_R2.crt
-    + CNNIC_ROOT.crt
-    + Certigna.crt
-    + Certinomis_-_Autorit\303\251_Racine.crt
-    + Certum_Trusted_Network_CA.crt
-    + Chambers_of_Commerce_Root_-_2008.crt
-    + China_Internet_Network_Information_Center_EV_Certificates_Root.crt
-    + ComSign_CA.crt
-    + ComSign_Secured_CA.crt
-    + Cybertrust_Global_Root.crt
-    + D-TRUST_Root_Class_3_CA_2_2009.crt
-    + D-TRUST_Root_Class_3_CA_2_EV_2009.crt
-    + Deutsche_Telekom_Root_CA_2.crt
-    + E-Guven_Kok_Elektronik_Sertifika_Hizmet_Saglayicisi.crt
-    + E-Tugra_Certification_Authority.crt
-    + EBG_Elektronik_Sertifika_Hizmet_Sa\304\237lay\304\261c\304\261s\304\261.crt
-    + EC-ACC.crt
-    + EE_Certification_Centre_Root_CA.crt
-    + GeoTrust_Primary_Certification_Authority_-_G2.crt
-    + GeoTrust_Primary_Certification_Authority_-_G3.crt
-    + GlobalSign_Root_CA_-_R3.crt
-    + Global_Chambersign_Root_-_2008.crt
-    + Go_Daddy_Root_Certificate_Authority_-_G2.crt
-    + Hellenic_Academic_and_Research_Institutions_RootCA_2011.crt
-    + Hongkong_Post_Root_CA_1.crt
-    + IGC_A.crt
-    + Izenpe.com.crt
-    + Juur-SK.crt
-    + Microsec_e-Szigno_Root_CA.crt
-    + Microsec_e-Szigno_Root_CA_2009.crt
-    + NetLock_Arany_=Class_Gold=_F\305\221tan\303\272s\303\255tv\303\241ny.crt
-    + OISTE_WISeKey_Global_Root_GA_CA.crt
-    + PSCProcert.crt
-    + Root_CA_Generalitat_Valenciana.crt
-    + S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN.crt
-    + SG_TRUST_SERVICES_RACINE.crt
-    + SecureSign_RootCA11.crt
-    + Security_Communication_EV_RootCA1.crt
-    + Security_Communication_RootCA2.crt
-    + Staat_der_Nederlanden_Root_CA_-_G2.crt
-    + Starfield_Root_Certificate_Authority_-_G2.crt
-    + Starfield_Services_Root_Certificate_Authority_-_G2.crt
-    + StartCom_Certification_Authority_2.crt
-    + StartCom_Certification_Authority_G2.crt
-    + Swisscom_Root_CA_2.crt
-    + Swisscom_Root_EV_CA_2.crt
-    + T-TeleSec_GlobalRoot_Class_2.crt
-    + T-TeleSec_GlobalRoot_Class_3.crt
-    + TC_TrustCenter_Class_2_CA_II.crt
-    + TC_TrustCenter_Class_3_CA_II.crt
-    + TC_TrustCenter_Universal_CA_I.crt
-    + TURKTRUST_Certificate_Services_Provider_Root_2007.crt
-    + TWCA_Global_Root_CA.crt
-    + TWCA_Root_Certification_Authority.crt
-    + T\303\234B\304\260TAK_UEKAE_K\303\266k_Sertifika_Hizmet_Sa\304\237lay\304\261c\304\261s\304\261_-_S\303\274r\303\274m_3.crt
-    + TeliaSonera_Root_CA_v1.crt
-    + Trustis_FPS_Root_CA.crt
-    + VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.crt
-    + VeriSign_Universal_Root_Certification_Authority.crt
-    + Verisign_Class_3_Public_Primary_Certification_Authority_2.crt
-    + certSIGN_ROOT_CA.crt
-    + ePKI_Root_Certification_Authority.crt
-    + thawte_Primary_Root_CA_-_G2.crt
-    + thawte_Primary_Root_CA_-_G3.crt
-    - ABAecom_=sub.__Am._Bankers_Assn.=_Root_CA.crt
-    - AOL_Time_Warner_Root_Certification_Authority_1.crt
-    - AOL_Time_Warner_Root_Certification_Authority_2.crt
-    - Digital_Signature_Trust_Co._Global_CA_2.crt
-    - Digital_Signature_Trust_Co._Global_CA_4.crt
-    - Entrust.net_Global_Secure_Personal_CA.crt
-    - Entrust.net_Global_Secure_Server_CA.crt
-    - Entrust.net_Secure_Personal_CA.crt
-    - Equifax_Secure_eBusiness_CA_2.crt
-    - Firmaprofesional_Root_CA.crt
-    - GTE_CyberTrust_Root_CA.crt
-    - IPS_CLASE1_root.crt
-    - IPS_CLASE3_root.crt
-    - IPS_CLASEA1_root.crt
-    - IPS_CLASEA3_root.crt
-    - IPS_Chained_CAs_root.crt
-    - IPS_Servidores_root.crt
-    - IPS_Timestamping_root.crt
-    - RSA_Security_1024_v3.crt
-    - StartCom_Ltd..crt
-    - TC_TrustCenter__Germany__Class_2_CA.crt
-    - TC_TrustCenter__Germany__Class_3_CA.crt
-    - TDC_OCES_Root_CA.crt
-    - Thawte_Personal_Basic_CA.crt
-    - Thawte_Personal_Freemail_CA.crt
-    - Thawte_Personal_Premium_CA.crt
-    - Thawte_Time_Stamping_CA.crt
-    - UTN-USER_First-Network_Applications.crt
-    - Verisign_Class_2_Public_Primary_Certification_Authority.crt
-    - Verisign_Class_4_Public_Primary_Certification_Authority_-_G2.crt
-    - Verisign_RSA_Secure_Server_CA.crt
-    - Verisign_Time_Stamping_Authority_CA.crt
-    - Visa_International_Global_Root_2.crt
-    - Wells_Fargo_Root_CA.crt
-    - beTRUSTed_Root_CA-Baltimore_Implementation.crt
-    - beTRUSTed_Root_CA.crt
-    - beTRUSTed_Root_CA_-_Entrust_Implementation.crt
-    - beTRUSTed_Root_CA_-_RSA_Implementation.crt
+    Certificates added (+), removed (-):
+    + "ACCVRAIZ1"
+    + "ACEDICOM Root"
+    + "AC Raíz Certicámara S.A."
+    + "Actalis Authentication Root CA"
+    + "AffirmTrust Commercial"
+    + "AffirmTrust Networking"
+    + "AffirmTrust Premium"
+    + "AffirmTrust Premium ECC"
+    + "ApplicationCA - Japanese Government"
+    + "Atos TrustedRoot 2011"
+    + "A-Trust-nQual-03"
+    + "Autoridad de Certificacion Firmaprofesional CIF A62634068"
+    + "Buypass Class 2 CA 1"
+    + "Buypass Class 2 Root CA"
+    + "Buypass Class 3 CA 1"
+    + "Buypass Class 3 Root CA"
+    + "CA Disig"
+    + "CA Disig Root R1"
+    + "CA Disig Root R2"
+    + "Certigna"
+    + "Certinomis - Autorité Racine"
+    + "certSIGN ROOT CA"
+    + "Certum Trusted Network CA"
+    + "Chambers of Commerce Root - 2008"
+    + "China Internet Network Information Center EV Certificates Root"
+    + "CNNIC ROOT"
+    + "ComSign CA"
+    + "ComSign Secured CA"
+    + "Cybertrust Global Root"
+    + "Deutsche Telekom Root CA 2"
+    + "D-TRUST Root Class 3 CA 2 2009"
+    + "D-TRUST Root Class 3 CA 2 EV 2009"
+    + "EBG Elektronik Sertifika Hizmet Sağlayıcısı"
+    + "EC-ACC"
+    + "EE Certification Centre Root CA"
+    + "E-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
+    + "ePKI Root Certification Authority"
+    + "E-Tugra Certification Authority"
+    + "GeoTrust Primary Certification Authority - G2"
+    + "GeoTrust Primary Certification Authority - G3"
+    + "Global Chambersign Root - 2008"
+    + "GlobalSign Root CA - R3"
+    + "Go Daddy Root Certificate Authority - G2"
+    + "Hellenic Academic and Research Institutions RootCA 2011"
+    + "Hongkong Post Root CA 1"
+    + "IGC/A"
+    + "Izenpe.com"
+    + "Juur-SK"
+    + "Microsec e-Szigno Root CA"
+    + "Microsec e-Szigno Root CA 2009"
+    + "NetLock Arany (Class Gold) Főtanúsítvány"
+    + "OISTE WISeKey Global Root GA CA"
+    + "PSCProcert"
+    + "Root CA Generalitat Valenciana"
+    + "SecureSign RootCA11"
+    + "Security Communication EV RootCA1"
+    + "Security Communication RootCA2"
+    + "SG TRUST SERVICES RACINE"
+    + "Staat der Nederlanden Root CA - G2"
+    + "Starfield Root Certificate Authority - G2"
+    + "Starfield Services Root Certificate Authority - G2"
+    + "StartCom Certification Authority"_2
+    + "StartCom Certification Authority G2"
+    + "S-TRUST Authentication and Encryption Root CA 2005 PN"
+    + "Swisscom Root CA 2"
+    + "Swisscom Root EV CA 2"
+    + "TC TrustCenter Class 2 CA II"
+    + "TC TrustCenter Class 3 CA II"
+    + "TC TrustCenter Universal CA I"
+    + "TeliaSonera Root CA v1"
+    + "thawte Primary Root CA - G2"
+    + "thawte Primary Root CA - G3"
+    + "Trustis FPS Root CA"
+    + "T-TeleSec GlobalRoot Class 2"
+    + "T-TeleSec GlobalRoot Class 3"
+    + "TURKTRUST Certificate Services Provider Root 2007"
+    + "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
+    + "TWCA Global Root CA"
+    + "TWCA Root Certification Authority"
+    + "VeriSign Class 3 Public Primary Certification Authority"_2
+    + "VeriSign Class 3 Public Primary Certification Authority - G4"
+    + "VeriSign Universal Root Certification Authority"
+    - "ABAecom (sub., Am. Bankers Assn.) Root CA"
+    - "AOL Time Warner Root Certification Authority 1"
+    - "AOL Time Warner Root Certification Authority 2"
+    - "beTRUSTed Root CA"
+    - "beTRUSTed Root CA-Baltimore Implementation"
+    - "beTRUSTed Root CA - Entrust Implementation"
+    - "beTRUSTed Root CA - RSA Implementation"
+    - "Digital Signature Trust Co. Global CA 2"
+    - "Digital Signature Trust Co. Global CA 4"
+    - "Entrust.net Global Secure Personal CA"
+    - "Entrust.net Global Secure Server CA"
+    - "Entrust.net Secure Personal CA"
+    - "Equifax Secure eBusiness CA 2"
+    - "Firmaprofesional Root CA"
+    - "GTE CyberTrust Root CA"
+    - "IPS Chained CAs root"
+    - "IPS CLASE1 root"
+    - "IPS CLASE3 root"
+    - "IPS CLASEA1 root"
+    - "IPS CLASEA3 root"
+    - "IPS Servidores root"
+    - "IPS Timestamping root"
+    - "RSA Security 1024 v3"
+    - "StartCom Ltd."
+    - "TC TrustCenter, Germany, Class 2 CA"
+    - "TC TrustCenter, Germany, Class 3 CA"
+    - "TDC OCES Root CA"
+    - "Thawte Personal Basic CA"
+    - "Thawte Personal Freemail CA"
+    - "Thawte Personal Premium CA"
+    - "Thawte Time Stamping CA"
+    - "UTN-USER First-Network Applications"
+    - "Verisign Class 2 Public Primary Certification Authority"
+    - "Verisign Class 4 Public Primary Certification Authority - G2"
+    - "Verisign/RSA Secure Server CA"
+    - "Verisign Time Stamping Authority CA"
+    - "Visa International Global Root 2"
+    - "Wells Fargo Root CA"
 
  -- Michael Shuler <michael@pbandjelly.org>  Sun, 30 Mar 2014 22:06:04 -0500