mirror of
https://github.com/roytam1/mozilla45esr.git
synced 2026-05-26 15:39:48 +00:00
partly import changes from tenfourfox:
- 102ESR: rev EV roots, TLS roots, TLDs, tzdata, HSTS, pins (c47bef11f)
This commit is contained in:
@@ -870,6 +870,7 @@ metaZones:table(nofallback){
|
||||
wall{"Wallis"}
|
||||
yaku{"Yakutsk"}
|
||||
yeka{"Yekaterinburg"}
|
||||
yuko{"Yukon"}
|
||||
}
|
||||
metazoneInfo{
|
||||
"Africa:Abidjan"{
|
||||
|
||||
@@ -87,6 +87,7 @@ timezoneTypes:table(nofallback){
|
||||
"Etc:Universal"{"Etc/UTC"}
|
||||
"Etc:Zulu"{"Etc/UTC"}
|
||||
"Europe:Belfast"{"Europe/London"}
|
||||
"Europe:Kyiv"{"Europe/Kiev"}
|
||||
"Europe:Nicosia"{"Asia/Nicosia"}
|
||||
"Europe:Tiraspol"{"Europe/Chisinau"}
|
||||
"Mexico:BajaNorte"{"America/Tijuana"}
|
||||
|
||||
File diff suppressed because it is too large
Load Diff
@@ -1315,7 +1315,9 @@ web.id
|
||||
ie
|
||||
gov.ie
|
||||
|
||||
// il : http://www.isoc.org.il/domains/
|
||||
// il : http://www.isoc.org.il/domains/
|
||||
// see also: https://en.isoc.org.il/il-cctld/registration-rules
|
||||
// ISOC-IL (operated by .il Registry)
|
||||
il
|
||||
ac.il
|
||||
co.il
|
||||
@@ -1325,6 +1327,16 @@ k12.il
|
||||
muni.il
|
||||
net.il
|
||||
org.il
|
||||
// xn--4dbrk0ce ("Israel", Hebrew) : IL
|
||||
ישראל
|
||||
// xn--4dbgdty6c.xn--4dbrk0ce.
|
||||
אקדמיה.ישראל
|
||||
// xn--5dbhl8d.xn--4dbrk0ce.
|
||||
ישוב.ישראל
|
||||
// xn--8dbq2a.xn--4dbrk0ce.
|
||||
צהל.ישראל
|
||||
// xn--hebda8b.xn--4dbrk0ce.
|
||||
ממשל.ישראל
|
||||
|
||||
// im : https://www.nic.im/
|
||||
// Submitted by registry <info@nic.im>
|
||||
@@ -1340,22 +1352,51 @@ tt.im
|
||||
tv.im
|
||||
|
||||
// in : https://en.wikipedia.org/wiki/.in
|
||||
// see also: https://registry.in/Policies
|
||||
// see also: https://registry.in/policies
|
||||
// Please note, that nic.in is not an official eTLD, but used by most
|
||||
// government institutions.
|
||||
in
|
||||
co.in
|
||||
firm.in
|
||||
net.in
|
||||
org.in
|
||||
gen.in
|
||||
ind.in
|
||||
nic.in
|
||||
5g.in
|
||||
6g.in
|
||||
ac.in
|
||||
ai.in
|
||||
am.in
|
||||
bihar.in
|
||||
biz.in
|
||||
business.in
|
||||
ca.in
|
||||
cn.in
|
||||
co.in
|
||||
com.in
|
||||
coop.in
|
||||
cs.in
|
||||
delhi.in
|
||||
dr.in
|
||||
edu.in
|
||||
res.in
|
||||
er.in
|
||||
firm.in
|
||||
gen.in
|
||||
gov.in
|
||||
gujarat.in
|
||||
ind.in
|
||||
info.in
|
||||
int.in
|
||||
internet.in
|
||||
io.in
|
||||
me.in
|
||||
mil.in
|
||||
net.in
|
||||
nic.in
|
||||
org.in
|
||||
pg.in
|
||||
post.in
|
||||
pro.in
|
||||
res.in
|
||||
travel.in
|
||||
tv.in
|
||||
uk.in
|
||||
up.in
|
||||
us.in
|
||||
|
||||
// info : https://en.wikipedia.org/wiki/.info
|
||||
info
|
||||
@@ -7130,7 +7171,7 @@ org.zw
|
||||
|
||||
// newGTLDs
|
||||
|
||||
// List of new gTLDs imported from https://www.icann.org/resources/registries/gtlds/v2/gtlds.json on 2022-04-14T15:15:34Z
|
||||
// List of new gTLDs imported from https://www.icann.org/resources/registries/gtlds/v2/gtlds.json on 2022-07-28T15:14:54Z
|
||||
// This list is auto-generated, don't edit it manually.
|
||||
// aaa : 2015-02-26 American Automobile Association, Inc.
|
||||
aaa
|
||||
@@ -7687,7 +7728,7 @@ chanel
|
||||
// channel : 2014-05-08 Charleston Road Registry Inc.
|
||||
channel
|
||||
|
||||
// charity : 2018-04-11 Binky Moon, LLC
|
||||
// charity : 2018-04-11 Public Interest Registry
|
||||
charity
|
||||
|
||||
// chase : 2015-04-30 JPMorgan Chase Bank, National Association
|
||||
@@ -7834,7 +7875,7 @@ coupon
|
||||
// coupons : 2015-03-26 Binky Moon, LLC
|
||||
coupons
|
||||
|
||||
// courses : 2014-12-04 OPEN UNIVERSITIES AUSTRALIA PTY LTD
|
||||
// courses : 2014-12-04 Registry Services, LLC
|
||||
courses
|
||||
|
||||
// cpa : 2019-06-10 American Institute of Certified Public Accountants
|
||||
@@ -8020,7 +8061,7 @@ dvag
|
||||
// dvr : 2016-05-26 DISH Technologies L.L.C.
|
||||
dvr
|
||||
|
||||
// earth : 2014-12-04 Interlink Co., Ltd.
|
||||
// earth : 2014-12-04 Interlink Systems Innovation Institute K.K.
|
||||
earth
|
||||
|
||||
// eat : 2014-01-23 Charleston Road Registry Inc.
|
||||
@@ -8227,7 +8268,7 @@ forsale
|
||||
// forum : 2015-04-02 Fegistry, LLC
|
||||
forum
|
||||
|
||||
// foundation : 2013-12-05 Binky Moon, LLC
|
||||
// foundation : 2013-12-05 Public Interest Registry
|
||||
foundation
|
||||
|
||||
// fox : 2015-09-11 FOX Registry, LLC
|
||||
@@ -8326,7 +8367,7 @@ gift
|
||||
// gifts : 2014-07-03 Binky Moon, LLC
|
||||
gifts
|
||||
|
||||
// gives : 2014-03-06 Dog Beach, LLC
|
||||
// gives : 2014-03-06 Public Interest Registry
|
||||
gives
|
||||
|
||||
// giving : 2014-11-13 Giving Limited
|
||||
@@ -8452,7 +8493,7 @@ health
|
||||
// healthcare : 2014-06-12 Binky Moon, LLC
|
||||
healthcare
|
||||
|
||||
// help : 2014-06-26 UNR Corp.
|
||||
// help : 2014-06-26 Innovation service Limited
|
||||
help
|
||||
|
||||
// helsinki : 2015-02-05 City of Helsinki
|
||||
@@ -8779,7 +8820,7 @@ lanxess
|
||||
// lasalle : 2015-04-02 Jones Lang LaSalle Incorporated
|
||||
lasalle
|
||||
|
||||
// lat : 2014-10-16 ECOM-LAC Federaciòn de Latinoamèrica y el Caribe para Internet y el Comercio Electrònico
|
||||
// lat : 2014-10-16 XYZ.COM LLC
|
||||
lat
|
||||
|
||||
// latino : 2015-07-30 Dish DBS Corporation
|
||||
@@ -8851,7 +8892,7 @@ lincoln
|
||||
// linde : 2014-12-04 Linde Aktiengesellschaft
|
||||
linde
|
||||
|
||||
// link : 2013-11-14 UNR Corp.
|
||||
// link : 2013-11-14 Nova Registry Ltd
|
||||
link
|
||||
|
||||
// lipsy : 2015-06-25 Lipsy Ltd
|
||||
@@ -8866,7 +8907,7 @@ living
|
||||
// llc : 2017-12-14 Afilias Limited
|
||||
llc
|
||||
|
||||
// llp : 2019-08-26 UNR Corp.
|
||||
// llp : 2019-08-26 Intercap Registry Inc.
|
||||
llp
|
||||
|
||||
// loan : 2014-11-20 dot Loan Limited
|
||||
@@ -9034,7 +9075,7 @@ mobile
|
||||
// moda : 2013-11-07 Dog Beach, LLC
|
||||
moda
|
||||
|
||||
// moe : 2013-11-13 Interlink Co., Ltd.
|
||||
// moe : 2013-11-13 Interlink Systems Innovation Institute K.K.
|
||||
moe
|
||||
|
||||
// moi : 2014-12-18 Amazon Registry Services, Inc.
|
||||
@@ -9841,7 +9882,7 @@ stream
|
||||
// studio : 2015-02-11 Dog Beach, LLC
|
||||
studio
|
||||
|
||||
// study : 2014-12-11 OPEN UNIVERSITIES AUSTRALIA PTY LTD
|
||||
// study : 2014-12-11 Registry Services, LLC
|
||||
study
|
||||
|
||||
// style : 2014-12-04 Binky Moon, LLC
|
||||
@@ -9901,7 +9942,7 @@ tatamotors
|
||||
// tatar : 2014-04-24 Limited Liability Company "Coordination Center of Regional Domain of Tatarstan Republic"
|
||||
tatar
|
||||
|
||||
// tattoo : 2013-08-30 UNR Corp.
|
||||
// tattoo : 2013-08-30 Top Level Design, LLC
|
||||
tattoo
|
||||
|
||||
// tax : 2014-03-20 Binky Moon, LLC
|
||||
@@ -11943,6 +11984,10 @@ id.forgerock.io
|
||||
// Submitted by Koen Rouwhorst <koenrh@framer.com>
|
||||
framer.app
|
||||
framercanvas.com
|
||||
framer.media
|
||||
framer.photos
|
||||
framer.website
|
||||
framer.wiki
|
||||
|
||||
// Frusky MEDIA&PR : https://www.frusky.de
|
||||
// Submitted by Victor Pupynin <hallo@frusky.de>
|
||||
@@ -12111,6 +12156,7 @@ kill.jp
|
||||
kilo.jp
|
||||
kuron.jp
|
||||
littlestar.jp
|
||||
lolipopmc.jp
|
||||
lolitapunk.jp
|
||||
lomo.jp
|
||||
lovepop.jp
|
||||
@@ -12281,6 +12327,10 @@ blogspot.vn
|
||||
// Submitted by Niels Martignene <hello@goupile.fr>
|
||||
goupile.fr
|
||||
|
||||
// Government of the Netherlands: https://www.government.nl
|
||||
// Submitted by <domeinnaam@minaz.nl>
|
||||
gov.nl
|
||||
|
||||
// Group 53, LLC : https://www.group53.com
|
||||
// Submitted by Tyler Todd <noc@nova53.net>
|
||||
awsmppl.com
|
||||
@@ -12357,7 +12407,6 @@ ltd.ng
|
||||
ngo.ng
|
||||
edu.scot
|
||||
sch.so
|
||||
org.yt
|
||||
|
||||
// HostyHosting (hostyhosting.com)
|
||||
hostyhosting.io
|
||||
@@ -12375,6 +12424,11 @@ moonscale.net
|
||||
// Submitted by Hannu Aronsson <haa@iki.fi>
|
||||
iki.fi
|
||||
|
||||
// iliad italia: https://www.iliad.it
|
||||
// Submitted by Marios Makassikis <mmakassikis@freebox.fr>
|
||||
ibxos.it
|
||||
iliadboxos.it
|
||||
|
||||
// Impertrix Solutions : <https://impertrixcdn.com>
|
||||
// Submitted by Zhixiang Zhao <csuite@impertrix.com>
|
||||
impertrixcdn.com
|
||||
@@ -12455,9 +12509,11 @@ iopsys.se
|
||||
// Submitted by Matthew Hardeman <mhardeman@ipifony.com>
|
||||
ipifony.net
|
||||
|
||||
// IServ GmbH : https://iserv.eu
|
||||
// Submitted by Kim-Alexander Brodowski <info@iserv.eu>
|
||||
// IServ GmbH : https://iserv.de
|
||||
// Submitted by Mario Hoberg <info@iserv.de>
|
||||
iservschule.de
|
||||
mein-iserv.de
|
||||
schulplattform.de
|
||||
schulserver.de
|
||||
test-iserv.de
|
||||
iserv.dev
|
||||
@@ -12779,6 +12835,10 @@ hra.health
|
||||
miniserver.com
|
||||
memset.net
|
||||
|
||||
// Messerli Informatik AG : https://www.messerli.ch/
|
||||
// Submitted by Ruben Schmidmeister <psl-maintainers@messerli.ch>
|
||||
messerli.app
|
||||
|
||||
// MetaCentrum, CESNET z.s.p.o. : https://www.metacentrum.cz/en/
|
||||
// Submitted by Zdeněk Šustr <zdenek.sustr@cesnet.cz>
|
||||
*.cloud.metacentrum.cz
|
||||
@@ -13389,6 +13449,12 @@ rocky.page
|
||||
спб.рус
|
||||
я.рус
|
||||
|
||||
// Salesforce.com, Inc. https://salesforce.com/
|
||||
// Submitted by Michael Biven <mbiven@salesforce.com>
|
||||
*.builder.code.com
|
||||
*.dev-builder.code.com
|
||||
*.stg-builder.code.com
|
||||
|
||||
// Sandstorm Development Group, Inc. : https://sandcats.io/
|
||||
// Submitted by Asheesh Laroia <asheesh@sandstorm.io>
|
||||
sandcats.io
|
||||
@@ -13812,6 +13878,15 @@ hk.org
|
||||
ltd.hk
|
||||
inc.hk
|
||||
|
||||
// UNIVERSAL DOMAIN REGISTRY : https://www.udr.org.yt/
|
||||
// see also: whois -h whois.udr.org.yt help
|
||||
// Submitted by Atanunu Igbunuroghene <publicsuffixlist@udr.org.yt>
|
||||
name.pm
|
||||
sch.tf
|
||||
biz.wf
|
||||
sch.wf
|
||||
org.yt
|
||||
|
||||
// United Gameserver GmbH : https://united-gameserver.de
|
||||
// Submitted by Stefan Schwarz <sysadm@united-gameserver.de>
|
||||
virtualuser.de
|
||||
|
||||
@@ -152,17 +152,6 @@ static struct nsMyTrustedEVInfo myTrustedEVInfos[] = {
|
||||
//
|
||||
// Paste new EV roots here.
|
||||
//
|
||||
{
|
||||
// CN=Cybertrust Global Root,O=Cybertrust, Inc
|
||||
"1.3.6.1.4.1.6334.1.100.1",
|
||||
"Cybertrust EV OID",
|
||||
{ 0x96, 0x0A, 0xDF, 0x00, 0x63, 0xE9, 0x63, 0x56, 0x75, 0x0C, 0x29,
|
||||
0x65, 0xDD, 0x0A, 0x08, 0x67, 0xDA, 0x0B, 0x9C, 0xBD, 0x6E, 0x77,
|
||||
0x71, 0x4A, 0xEA, 0xFB, 0x23, 0x49, 0xAB, 0x39, 0x3D, 0xA3 },
|
||||
"MDsxGDAWBgNVBAoTD0N5YmVydHJ1c3QsIEluYzEfMB0GA1UEAxMWQ3liZXJ0cnVz"
|
||||
"dCBHbG9iYWwgUm9vdA==",
|
||||
"BAAAAAABD4WqLUg=",
|
||||
},
|
||||
{
|
||||
// CN=SwissSign Gold CA - G2,O=SwissSign AG,C=CH
|
||||
"2.16.756.1.89.1.2.1.1",
|
||||
@@ -1046,6 +1035,124 @@ static struct nsMyTrustedEVInfo myTrustedEVInfos[] = {
|
||||
"YWl6MSIwIAYDVQQDExlBTkYgU2VjdXJlIFNlcnZlciBSb290IENB",
|
||||
"DdPjvGz5a7E=",
|
||||
},
|
||||
{
|
||||
// CN=Hellenic Academic and Research Institutions ECC RootCA 2015,O=Hellenic Academic and Research Institutions Cert. Authority,L=Athens,C=GR
|
||||
"2.23.140.1.1",
|
||||
"CA/Browser Forum EV OID",
|
||||
{ 0x44, 0xB5, 0x45, 0xAA, 0x8A, 0x25, 0xE6, 0x5A, 0x73, 0xCA, 0x15,
|
||||
0xDC, 0x27, 0xFC, 0x36, 0xD2, 0x4C, 0x1C, 0xB9, 0x95, 0x3A, 0x06,
|
||||
0x65, 0x39, 0xB1, 0x15, 0x82, 0xDC, 0x48, 0x7B, 0x48, 0x33 },
|
||||
"MIGqMQswCQYDVQQGEwJHUjEPMA0GA1UEBxMGQXRoZW5zMUQwQgYDVQQKEztIZWxs"
|
||||
"ZW5pYyBBY2FkZW1pYyBhbmQgUmVzZWFyY2ggSW5zdGl0dXRpb25zIENlcnQuIEF1"
|
||||
"dGhvcml0eTFEMEIGA1UEAxM7SGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJlc2VhcmNo"
|
||||
"IEluc3RpdHV0aW9ucyBFQ0MgUm9vdENBIDIwMTU=",
|
||||
"AA==",
|
||||
},
|
||||
{
|
||||
// CN=Hellenic Academic and Research Institutions RootCA 2015,O=Hellenic Academic and Research Institutions Cert. Authority,L=Athens,C=GR
|
||||
"2.23.140.1.1",
|
||||
"CA/Browser Forum EV OID",
|
||||
{ 0xA0, 0x40, 0x92, 0x9A, 0x02, 0xCE, 0x53, 0xB4, 0xAC, 0xF4, 0xF2,
|
||||
0xFF, 0xC6, 0x98, 0x1C, 0xE4, 0x49, 0x6F, 0x75, 0x5E, 0x6D, 0x45,
|
||||
0xFE, 0x0B, 0x2A, 0x69, 0x2B, 0xCD, 0x52, 0x52, 0x3F, 0x36 },
|
||||
"MIGmMQswCQYDVQQGEwJHUjEPMA0GA1UEBxMGQXRoZW5zMUQwQgYDVQQKEztIZWxs"
|
||||
"ZW5pYyBBY2FkZW1pYyBhbmQgUmVzZWFyY2ggSW5zdGl0dXRpb25zIENlcnQuIEF1"
|
||||
"dGhvcml0eTFAMD4GA1UEAxM3SGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJlc2VhcmNo"
|
||||
"IEluc3RpdHV0aW9ucyBSb290Q0EgMjAxNQ==",
|
||||
"AA==",
|
||||
},
|
||||
{
|
||||
// CN=HARICA TLS RSA Root CA 2021,O=Hellenic Academic and Research Institutions CA,C=GR
|
||||
"2.23.140.1.1",
|
||||
"CA/Browser Forum EV OID",
|
||||
{ 0xD9, 0x5D, 0x0E, 0x8E, 0xDA, 0x79, 0x52, 0x5B, 0xF9, 0xBE, 0xB1,
|
||||
0x1B, 0x14, 0xD2, 0x10, 0x0D, 0x32, 0x94, 0x98, 0x5F, 0x0C, 0x62,
|
||||
0xD9, 0xFA, 0xBD, 0x9C, 0xD9, 0x99, 0xEC, 0xCB, 0x7B, 0x1D },
|
||||
"MGwxCzAJBgNVBAYTAkdSMTcwNQYDVQQKDC5IZWxsZW5pYyBBY2FkZW1pYyBhbmQg"
|
||||
"UmVzZWFyY2ggSW5zdGl0dXRpb25zIENBMSQwIgYDVQQDDBtIQVJJQ0EgVExTIFJT"
|
||||
"QSBSb290IENBIDIwMjE=",
|
||||
"OcqTHO9D88aOk8f0ZIk4fg==",
|
||||
},
|
||||
{
|
||||
// CN=HARICA TLS ECC Root CA 2021,O=Hellenic Academic and Research Institutions CA,C=GR
|
||||
"2.23.140.1.1",
|
||||
"CA/Browser Forum EV OID",
|
||||
{ 0x3F, 0x99, 0xCC, 0x47, 0x4A, 0xCF, 0xCE, 0x4D, 0xFE, 0xD5, 0x87,
|
||||
0x94, 0x66, 0x5E, 0x47, 0x8D, 0x15, 0x47, 0x73, 0x9F, 0x2E, 0x78,
|
||||
0x0F, 0x1B, 0xB4, 0xCA, 0x9B, 0x13, 0x30, 0x97, 0xD4, 0x01 },
|
||||
"MGwxCzAJBgNVBAYTAkdSMTcwNQYDVQQKDC5IZWxsZW5pYyBBY2FkZW1pYyBhbmQg"
|
||||
"UmVzZWFyY2ggSW5zdGl0dXRpb25zIENBMSQwIgYDVQQDDBtIQVJJQ0EgVExTIEVD"
|
||||
"QyBSb290IENBIDIwMjE=",
|
||||
"Z3SdjXfYO2rbIvT/WeK/zg==",
|
||||
},
|
||||
{
|
||||
// CN=HiPKI Root CA - G1,O="Chunghwa Telecom Co., Ltd.",C=TW
|
||||
"2.23.140.1.1",
|
||||
"CA/Browser Forum EV OID",
|
||||
{ 0xF0, 0x15, 0xCE, 0x3C, 0xC2, 0x39, 0xBF, 0xEF, 0x06, 0x4B, 0xE9,
|
||||
0xF1, 0xD2, 0xC4, 0x17, 0xE1, 0xA0, 0x26, 0x4A, 0x0A, 0x94, 0xBE,
|
||||
0x1F, 0x0C, 0x8D, 0x12, 0x18, 0x64, 0xEB, 0x69, 0x49, 0xCC },
|
||||
"ME8xCzAJBgNVBAYTAlRXMSMwIQYDVQQKDBpDaHVuZ2h3YSBUZWxlY29tIENvLiwg"
|
||||
"THRkLjEbMBkGA1UEAwwSSGlQS0kgUm9vdCBDQSAtIEcx",
|
||||
"Ld2szmKXlKFD6LDNdmpeYA==",
|
||||
},
|
||||
{
|
||||
// CN=vTrus Root CA,O="iTrusChina Co.,Ltd.",C=CN
|
||||
"2.23.140.1.1",
|
||||
"CA/Browser Forum EV OID",
|
||||
{ 0x8A, 0x71, 0xDE, 0x65, 0x59, 0x33, 0x6F, 0x42, 0x6C, 0x26, 0xE5,
|
||||
0x38, 0x80, 0xD0, 0x0D, 0x88, 0xA1, 0x8D, 0xA4, 0xC6, 0xA9, 0x1F,
|
||||
0x0D, 0xCB, 0x61, 0x94, 0xE2, 0x06, 0xC5, 0xC9, 0x63, 0x87 },
|
||||
"MEMxCzAJBgNVBAYTAkNOMRwwGgYDVQQKExNpVHJ1c0NoaW5hIENvLixMdGQuMRYw"
|
||||
"FAYDVQQDEw12VHJ1cyBSb290IENB",
|
||||
"Q+NxE9izWRRdt86M/TX9b7wFjUU=",
|
||||
},
|
||||
{
|
||||
// CN=vTrus ECC Root CA,O="iTrusChina Co.,Ltd.",C=CN
|
||||
"2.23.140.1.1",
|
||||
"CA/Browser Forum EV OID",
|
||||
{ 0x30, 0xFB, 0xBA, 0x2C, 0x32, 0x23, 0x8E, 0x2A, 0x98, 0x54, 0x7A,
|
||||
0xF9, 0x79, 0x31, 0xE5, 0x50, 0x42, 0x8B, 0x9B, 0x3F, 0x1C, 0x8E,
|
||||
0xEB, 0x66, 0x33, 0xDC, 0xFA, 0x86, 0xC5, 0xB2, 0x7D, 0xD3 },
|
||||
"MEcxCzAJBgNVBAYTAkNOMRwwGgYDVQQKExNpVHJ1c0NoaW5hIENvLixMdGQuMRow"
|
||||
"GAYDVQQDExF2VHJ1cyBFQ0MgUm9vdCBDQQ==",
|
||||
"bmq8WapTvpg5Z6LSa6Q75m0c1to=",
|
||||
},
|
||||
{
|
||||
// CN=Autoridad de Certificacion Firmaprofesional CIF A62634068,C=ES
|
||||
"2.23.140.1.1",
|
||||
"CA/Browser Forum EV OID",
|
||||
{ 0x57, 0xDE, 0x05, 0x83, 0xEF, 0xD2, 0xB2, 0x6E, 0x03, 0x61, 0xDA,
|
||||
0x99, 0xDA, 0x9D, 0xF4, 0x64, 0x8D, 0xEF, 0x7E, 0xE8, 0x44, 0x1C,
|
||||
0x3B, 0x72, 0x8A, 0xFA, 0x9B, 0xCD, 0xE0, 0xF9, 0xB2, 0x6A },
|
||||
"MFExCzAJBgNVBAYTAkVTMUIwQAYDVQQDDDlBdXRvcmlkYWQgZGUgQ2VydGlmaWNh"
|
||||
"Y2lvbiBGaXJtYXByb2Zlc2lvbmFsIENJRiBBNjI2MzQwNjg=",
|
||||
"G3Dp0v+ubHE=",
|
||||
},
|
||||
{
|
||||
// CN=NetLock Arany (Class Gold) Főtanúsítvány,OU=Tanúsítványkiadók (Certification Services),O=NetLock Kft.,L=Budapest,C=HU
|
||||
"2.23.140.1.1",
|
||||
"CA/Browser Forum EV OID",
|
||||
{ 0x6C, 0x61, 0xDA, 0xC3, 0xA2, 0xDE, 0xF0, 0x31, 0x50, 0x6B, 0xE0,
|
||||
0x36, 0xD2, 0xA6, 0xFE, 0x40, 0x19, 0x94, 0xFB, 0xD1, 0x3D, 0xF9,
|
||||
0xC8, 0xD4, 0x66, 0x59, 0x92, 0x74, 0xC4, 0x46, 0xEC, 0x98 },
|
||||
"MIGnMQswCQYDVQQGEwJIVTERMA8GA1UEBwwIQnVkYXBlc3QxFTATBgNVBAoMDE5l"
|
||||
"dExvY2sgS2Z0LjE3MDUGA1UECwwuVGFuw7pzw610dsOhbnlraWFkw7NrIChDZXJ0"
|
||||
"aWZpY2F0aW9uIFNlcnZpY2VzKTE1MDMGA1UEAwwsTmV0TG9jayBBcmFueSAoQ2xh"
|
||||
"c3MgR29sZCkgRsWRdGFuw7pzw610dsOhbnk=",
|
||||
"SUEs5AAQ",
|
||||
},
|
||||
{
|
||||
// CN=D-TRUST EV Root CA 1 2020,O=D-Trust GmbH,C=DE
|
||||
"2.23.140.1.1",
|
||||
"CA/Browser Forum EV OID",
|
||||
{ 0x08, 0x17, 0x0D, 0x1A, 0xA3, 0x64, 0x53, 0x90, 0x1A, 0x2F, 0x95,
|
||||
0x92, 0x45, 0xE3, 0x47, 0xDB, 0x0C, 0x8D, 0x37, 0xAB, 0xAA, 0xBC,
|
||||
0x56, 0xB8, 0x1A, 0xA1, 0x00, 0xDC, 0x95, 0x89, 0x70, 0xDB },
|
||||
"MEgxCzAJBgNVBAYTAkRFMRUwEwYDVQQKEwxELVRydXN0IEdtYkgxIjAgBgNVBAMT"
|
||||
"GUQtVFJVU1QgRVYgUm9vdCBDQSAxIDIwMjA=",
|
||||
"XwJB13qHfEwDo6yWjfv/0A==",
|
||||
},
|
||||
};
|
||||
|
||||
// TenFourFox issue 512, backport from ESR60: treat all EV roots as
|
||||
|
||||
@@ -43,14 +43,6 @@ static const char kCOMODO_RSA_Certification_AuthorityFingerprint[] =
|
||||
static const char kComodo_AAA_Services_rootFingerprint[] =
|
||||
"vRU+17BDT2iGsXvOi76E7TQMcTLXAqj0+jGPdW7L1vM=";
|
||||
|
||||
/* Cybertrust Global Root */
|
||||
static const char kCybertrust_Global_RootFingerprint[] =
|
||||
"foeCwVDOOVL4AuY2AjpdPpW7XWjjPoWtsroXgSXOvxU=";
|
||||
|
||||
/* DST Root CA X3 */
|
||||
static const char kDST_Root_CA_X3Fingerprint[] =
|
||||
"Vjs8r4z+80wjNcr1YKepWQboSIRi63WsWXhIMN+eWys=";
|
||||
|
||||
/* DigiCert Assured ID Root CA */
|
||||
static const char kDigiCert_Assured_ID_Root_CAFingerprint[] =
|
||||
"I/Lt/z7ekCWanjD0Cvj5EqXls2lOaThEA0H2Bg4BT/o=";
|
||||
@@ -127,6 +119,10 @@ static const char kGOOGLE_PIN_AddTrustQualifiedCARootFingerprint[] =
|
||||
static const char kGOOGLE_PIN_COMODORSADomainValidationSecureServerCAFingerprint[] =
|
||||
"klO23nT2ehFDXCfx3eHTDRESMz3asj1muO+4aIdjiuY=";
|
||||
|
||||
/* GOOGLE_PIN_DSTRootCAX3 */
|
||||
static const char kGOOGLE_PIN_DSTRootCAX3Fingerprint[] =
|
||||
"Vjs8r4z+80wjNcr1YKepWQboSIRi63WsWXhIMN+eWys=";
|
||||
|
||||
/* GOOGLE_PIN_DigiCertECCSecureServerCA */
|
||||
static const char kGOOGLE_PIN_DigiCertECCSecureServerCAFingerprint[] =
|
||||
"PZXN3lRAy+8tBKk2Ox6F7jIlnzr2Yzmwqc3JnyfXoCw=";
|
||||
@@ -171,6 +167,10 @@ static const char kGOOGLE_PIN_GeoTrustUniversalFingerprint[] =
|
||||
static const char kGOOGLE_PIN_GeoTrustUniversal2Fingerprint[] =
|
||||
"fKoDRlEkWQxgHlZ+UhSOlSwM/+iQAFMP4NlbbVDqrkE=";
|
||||
|
||||
/* GOOGLE_PIN_GlobalSignRootCA_R2 */
|
||||
static const char kGOOGLE_PIN_GlobalSignRootCA_R2Fingerprint[] =
|
||||
"iie1VXtL7HzAMF+/PVPR9xzT80kQxdZeJ+zduCB3uj0=";
|
||||
|
||||
/* GOOGLE_PIN_GoDaddySecure */
|
||||
static const char kGOOGLE_PIN_GoDaddySecureFingerprint[] =
|
||||
"MrZLZnJ6IGPkBm87lYywqu5Xal7O/ZUzmbuIdHMdlYc=";
|
||||
@@ -263,10 +263,6 @@ static const char kGTS_Root_R3Fingerprint[] =
|
||||
static const char kGTS_Root_R4Fingerprint[] =
|
||||
"mEflZT5enoR1FuXLgYYGqnVEoZvmf9c2bVBpiOjYQ0c=";
|
||||
|
||||
/* GlobalSign ECC Root CA - R4 */
|
||||
static const char kGlobalSign_ECC_Root_CA___R4Fingerprint[] =
|
||||
"CLOmM1/OXvSPjw5UOYbAf9GKOxImEp9hhku9W90fHMk=";
|
||||
|
||||
/* GlobalSign ECC Root CA - R5 */
|
||||
static const char kGlobalSign_ECC_Root_CA___R5Fingerprint[] =
|
||||
"fg6tdrtoGdwvVFEahDVPboswe53YIFjqbABPAdndpd8=";
|
||||
@@ -275,10 +271,6 @@ static const char kGlobalSign_ECC_Root_CA___R5Fingerprint[] =
|
||||
static const char kGlobalSign_Root_CAFingerprint[] =
|
||||
"K87oWBWM9UZfyddvDfoxL+8lpNyoUB2ptGtn0fv6G2Q=";
|
||||
|
||||
/* GlobalSign Root CA - R2 */
|
||||
static const char kGlobalSign_Root_CA___R2Fingerprint[] =
|
||||
"iie1VXtL7HzAMF+/PVPR9xzT80kQxdZeJ+zduCB3uj0=";
|
||||
|
||||
/* GlobalSign Root CA - R3 */
|
||||
static const char kGlobalSign_Root_CA___R3Fingerprint[] =
|
||||
"cGuxAXyFXFkWm61cF4HPWX8S0srS9j0aSqN0k4AP+4A=";
|
||||
@@ -371,14 +363,6 @@ static const char kVerisign_Class_1_Public_Primary_Certification_Authority___G3F
|
||||
static const char kVerisign_Class_2_Public_Primary_Certification_Authority___G3Fingerprint[] =
|
||||
"cAajgxHlj7GTSEIzIYIQxmEloOSoJq7VOaxWHfv72QM=";
|
||||
|
||||
/* YahooBackup1 */
|
||||
static const char kYahooBackup1Fingerprint[] =
|
||||
"2fRAUXyxl4A1/XHrKNBmc8bTkzA7y4FB/GLJuNAzCqY=";
|
||||
|
||||
/* YahooBackup2 */
|
||||
static const char kYahooBackup2Fingerprint[] =
|
||||
"dolnbtzEBnELx/9lOEQ22e6OZO/QNb6VSSX2XHA3E7A=";
|
||||
|
||||
/* Pinsets are each an ordered list by the actual value of the fingerprint */
|
||||
struct StaticFingerprints {
|
||||
// See bug 1338873 about making these fields const.
|
||||
@@ -392,7 +376,6 @@ static const char* const kPinset_google_root_pems_Data[] = {
|
||||
kCOMODO_ECC_Certification_AuthorityFingerprint,
|
||||
kDigiCert_Assured_ID_Root_G2Fingerprint,
|
||||
kCOMODO_Certification_AuthorityFingerprint,
|
||||
kGlobalSign_ECC_Root_CA___R4Fingerprint,
|
||||
kDigiCert_Assured_ID_Root_G3Fingerprint,
|
||||
kStarfield_Class_2_CAFingerprint,
|
||||
kEntrust_net_Premium_2048_Secure_Server_CAFingerprint,
|
||||
@@ -401,8 +384,6 @@ static const char* const kPinset_google_root_pems_Data[] = {
|
||||
kGlobalSign_Root_CAFingerprint,
|
||||
kGo_Daddy_Root_Certificate_Authority___G2Fingerprint,
|
||||
kAffirmTrust_Premium_ECCFingerprint,
|
||||
kGTS_Root_R3Fingerprint,
|
||||
kGTS_Root_R2Fingerprint,
|
||||
kGo_Daddy_Class_2_CAFingerprint,
|
||||
kDigiCert_Trusted_Root_G4Fingerprint,
|
||||
kDigiCert_High_Assurance_EV_Root_CAFingerprint,
|
||||
@@ -413,14 +394,10 @@ static const char* const kPinset_google_root_pems_Data[] = {
|
||||
kGlobalSign_Root_CA___R3Fingerprint,
|
||||
kEntrust_Root_Certification_Authority___G2Fingerprint,
|
||||
kGlobalSign_ECC_Root_CA___R5Fingerprint,
|
||||
kCybertrust_Global_RootFingerprint,
|
||||
kStarfield_Root_Certificate_Authority___G2Fingerprint,
|
||||
kCOMODO_RSA_Certification_AuthorityFingerprint,
|
||||
kGTS_Root_R1Fingerprint,
|
||||
kDigiCert_Global_Root_G2Fingerprint,
|
||||
kGlobalSign_Root_CA___R2Fingerprint,
|
||||
kAffirmTrust_NetworkingFingerprint,
|
||||
kGTS_Root_R4Fingerprint,
|
||||
kDigiCert_Global_Root_CAFingerprint,
|
||||
kDigiCert_Global_Root_G3Fingerprint,
|
||||
kComodo_AAA_Services_rootFingerprint,
|
||||
@@ -465,7 +442,7 @@ static const char* const kPinset_google_Data[] = {
|
||||
kGTS_Root_R2Fingerprint,
|
||||
kGOOGLE_PIN_GTSCA1O1Fingerprint,
|
||||
kGTS_Root_R1Fingerprint,
|
||||
kGlobalSign_Root_CA___R2Fingerprint,
|
||||
kGOOGLE_PIN_GlobalSignRootCA_R2Fingerprint,
|
||||
kGTS_Root_R4Fingerprint,
|
||||
};
|
||||
static const StaticFingerprints kPinset_google = {
|
||||
@@ -549,7 +526,7 @@ static const char* const kPinset_twitterCDN_Data[] = {
|
||||
kEntrust_Root_Certification_Authority___G2Fingerprint,
|
||||
kGOOGLE_PIN_GeoTrustUniversal2Fingerprint,
|
||||
kGOOGLE_PIN_GeoTrustGlobalFingerprint,
|
||||
kGlobalSign_Root_CA___R2Fingerprint,
|
||||
kGOOGLE_PIN_GlobalSignRootCA_R2Fingerprint,
|
||||
kGOOGLE_PIN_AddTrustExternalCARootFingerprint,
|
||||
kGOOGLE_PIN_VeriSignUniversalFingerprint,
|
||||
kGOOGLE_PIN_GeoTrustUniversalFingerprint,
|
||||
@@ -606,13 +583,11 @@ static const StaticFingerprints kPinset_spideroak = {
|
||||
};
|
||||
|
||||
static const char* const kPinset_yahoo_Data[] = {
|
||||
kYahooBackup1Fingerprint,
|
||||
kDigiCert_Assured_ID_Root_CAFingerprint,
|
||||
kGlobalSign_Root_CAFingerprint,
|
||||
kDigiCert_Trusted_Root_G4Fingerprint,
|
||||
kDigiCert_High_Assurance_EV_Root_CAFingerprint,
|
||||
kGlobalSign_Root_CA___R3Fingerprint,
|
||||
kYahooBackup2Fingerprint,
|
||||
kDigiCert_Global_Root_G2Fingerprint,
|
||||
kDigiCert_Global_Root_CAFingerprint,
|
||||
kDigiCert_Global_Root_G3Fingerprint,
|
||||
@@ -624,7 +599,7 @@ static const StaticFingerprints kPinset_yahoo = {
|
||||
|
||||
static const char* const kPinset_swehackCom_Data[] = {
|
||||
kSwehackFingerprint,
|
||||
kDST_Root_CA_X3Fingerprint,
|
||||
kGOOGLE_PIN_DSTRootCAX3Fingerprint,
|
||||
kLet_s_Encrypt_Authority_X3Fingerprint,
|
||||
kGOOGLE_PIN_COMODORSADomainValidationSecureServerCAFingerprint,
|
||||
kLet_s_Encrypt_Authority_X4Fingerprint,
|
||||
@@ -967,6 +942,7 @@ static const TransportSecurityPreload kPublicKeyPinningPreloadList[] = {
|
||||
{ "google.tn", true, false, false, -1, &kPinset_google_root_pems },
|
||||
{ "google.to", true, false, false, -1, &kPinset_google_root_pems },
|
||||
{ "google.tt", true, false, false, -1, &kPinset_google_root_pems },
|
||||
{ "google.ua", true, false, false, -1, &kPinset_google_root_pems },
|
||||
{ "google.us", true, false, false, -1, &kPinset_google_root_pems },
|
||||
{ "google.uz", true, false, false, -1, &kPinset_google_root_pems },
|
||||
{ "google.vg", true, false, false, -1, &kPinset_google_root_pems },
|
||||
@@ -1145,8 +1121,8 @@ static const TransportSecurityPreload kPublicKeyPinningPreloadList[] = {
|
||||
{ "zh.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
|
||||
};
|
||||
|
||||
// Pinning Preload List Length = 495;
|
||||
// Pinning Preload List Length = 496;
|
||||
|
||||
static const int32_t kUnknownId = -1;
|
||||
|
||||
static const PRTime kPreloadPKPinsExpirationTime = INT64_C(1659351116755000);
|
||||
static const PRTime kPreloadPKPinsExpirationTime = INT64_C(1669892929282000);
|
||||
|
||||
+23840
-9015
File diff suppressed because it is too large
Load Diff
Reference in New Issue
Block a user