Files
palemoon27/security/patches/Distrust-CNNIC-patch.diff
T
2018-07-24 23:11:53 +08:00

30 lines
1.0 KiB
Diff

From 71d72019332ace0db06214b1d564af27b7431023 Mon Sep 17 00:00:00 2001
From: Pale Moon <git-repo@palemoon.org>
Date: Fri, 3 Apr 2015 13:17:15 +0200
Subject: [PATCH] Distrust CNNIC root certificate.
---
security/nss/lib/ckfw/builtins/certdata.txt | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/security/nss/lib/ckfw/builtins/certdata.txt b/security/nss/lib/ckfw/builtins/certdata.txt
index eaf40f1..4d66d85 100644
--- a/security/nss/lib/ckfw/builtins/certdata.txt
+++ b/security/nss/lib/ckfw/builtins/certdata.txt
@@ -14885,9 +14885,9 @@ END
CKA_SERIAL_NUMBER MULTILINE_OCTAL
\002\004\111\063\000\001
END
-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
-CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
+CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_NOT_TRUSTED
+CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_NOT_TRUSTED
+CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_NOT_TRUSTED
CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
#
--
1.8.3.msysgit.0