mirror of
https://github.com/roytam1/palemoon27.git
synced 2026-06-01 08:31:45 +00:00
30 lines
1.0 KiB
Diff
30 lines
1.0 KiB
Diff
From 71d72019332ace0db06214b1d564af27b7431023 Mon Sep 17 00:00:00 2001
|
|
From: Pale Moon <git-repo@palemoon.org>
|
|
Date: Fri, 3 Apr 2015 13:17:15 +0200
|
|
Subject: [PATCH] Distrust CNNIC root certificate.
|
|
|
|
---
|
|
security/nss/lib/ckfw/builtins/certdata.txt | 6 +++---
|
|
1 file changed, 3 insertions(+), 3 deletions(-)
|
|
|
|
diff --git a/security/nss/lib/ckfw/builtins/certdata.txt b/security/nss/lib/ckfw/builtins/certdata.txt
|
|
index eaf40f1..4d66d85 100644
|
|
--- a/security/nss/lib/ckfw/builtins/certdata.txt
|
|
+++ b/security/nss/lib/ckfw/builtins/certdata.txt
|
|
@@ -14885,9 +14885,9 @@ END
|
|
CKA_SERIAL_NUMBER MULTILINE_OCTAL
|
|
\002\004\111\063\000\001
|
|
END
|
|
-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
|
|
-CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
|
|
-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
|
|
+CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_NOT_TRUSTED
|
|
+CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_NOT_TRUSTED
|
|
+CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_NOT_TRUSTED
|
|
CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
|
|
|
|
#
|
|
--
|
|
1.8.3.msysgit.0
|
|
|