Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2024-10-08 02:14:43 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Bug 1345368 - land NSS 7228445b43ac, r=me

Browse Source
This commit is contained in:
Franziskus Kiefer 2017-04-10 06:00:57 +02:00
parent 32138a6ea3
commit 8cab0b55cc
11 changed files with 2508 additions and 706 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1147
security/manager/ssl/RootHashes.inc.orig Normal file
View File

File diff suppressed because it is too large Load Diff

954
security/manager/tools/KnownRootHashes.json.orig Normal file
View File

@ -0,0 +1,954 @@
// This Source Code Form is subject to the terms of the Mozilla Public
// License, v. 2.0. If a copy of the MPL was not distributed with this
// file, You can obtain one at http://mozilla.org/MPL/2.0/. */
//
//***************************************************************************
// This is an automatically generated file. It's used to maintain state for
// runs of genRootCAHashes.js; you should never need to manually edit it
//***************************************************************************
{
"roots": [
{
"label": "GTE_CyberTrust_Global_Root",
"binNumber": 1,
"sha256Fingerprint": "pTElGI0hEKqWSwLHt8baMgMXCJTl+3H/+2Zn1eaBCjY="
},
{
"label": "Thawte_Server_CA",
"binNumber": 2,
"sha256Fingerprint": "tEELc+Lm6spH+8Qvj6QBivQ4HcVM+qhEUEYe7QlFTek="
},
{
"label": "Thawte_Premium_Server_CA",
"binNumber": 3,
"sha256Fingerprint": "q3A2NlxxVKopwsKfXUGRFjsWKiIlARNX1W0H/6e8H3I="
},
{
"label": "OU_Equifax_Secure_Certificate_Authority_O_Equifax_C_US",
"binNumber": 4,
"sha256Fingerprint": "CCl6QEfbojaAxzHbbjF2U8p4SOG+vToLAXmnB/ks8Xg="
},
{
"label": "OU_VeriSign_Trust_Network_OU___c__1998_VeriSign__Inc____For_authorized_use_only__OU_Class_3_Public_Primary_Certification_Authority___G2_O__VeriSign__Inc___C_US",
"binNumber": 5,
"sha256Fingerprint": "g848Eiloilk9SF+BlzwPkZVDHto3zF42Qw55x6iIY4s="
},
{
"label": "GlobalSign_Root_CA",
"binNumber": 6,
"sha256Fingerprint": "69QQQOS7PsdCyeOB0x7ypBpItmhclufO88HfbNQzHJk="
},
{
"label": "GlobalSign",
"binNumber": 7,
"sha256Fingerprint": "ykLdQXRf0LgeuQI2LPnYv3Gdob0bHvyUb1tMmfQsG54="
},
{
"label": "VeriSign_Class_3_Public_Primary_Certification_Authority___G3",
"binNumber": 8,
"sha256Fingerprint": "6wTPXrHzmvp2LyuxIPKWy6Ugwbl9sViVZbgcuaF7ckQ="
},
{
"label": "VeriSign_Class_4_Public_Primary_Certification_Authority___G3",
"binNumber": 9,
"sha256Fingerprint": "44k2DQ/brrPSUFhLRzAxTiIvOcFWoCAUTo2WBWF5FQY="
},
{
"label": "Entrust_net_Certification_Authority__2048_",
"binNumber": 10,
"sha256Fingerprint": "bcRxcuAcvLC/YlgNiV/iuKya1PhzgB4MELnIN9IesXc="
},
{
"label": "Baltimore_CyberTrust_Root",
"binNumber": 11,
"sha256Fingerprint": "Fq9XqfZ2sKsSYJWqXrre8iqzERnWRKyVzUuT2/Pyaus="
},
{
"label": "Equifax_Secure_Global_eBusiness_CA_1",
"binNumber": 12,
"sha256Fingerprint": "Xwti6rXjU+plIWUWWPu2U1n0QygKSvvRBNd9EPnwTAc="
},
{
"label": "Equifax_Secure_eBusiness_CA_1",
"binNumber": 13,
"sha256Fingerprint": "z1b/RqShhhCd2WWEte61ilEMQnWw5flPQLuuhl4Z9nM="
},
{
"label": "AddTrust_Class_1_CA_Root",
"binNumber": 14,
"sha256Fingerprint": "jHIJJ5rATideFtB/07d16AFUtZaARuMfUt0ldmMk6ac="
},
{
"label": "AddTrust_External_CA_Root",
"binNumber": 15,
"sha256Fingerprint": "aH+kUTgieP/wyLEfjUPVdmccbrK86rQT+4PZZdBtL/I="
},
{
"label": "AddTrust_Public_CA_Root",
"binNumber": 16,
"sha256Fingerprint": "B5HKB0myB4Kq08fXvQzfyUhYNYQ+steZYAnOQ6tsaSc="
},
{
"label": "AddTrust_Qualified_CA_Root",
"binNumber": 17,
"sha256Fingerprint": "gJUhCAXbS7w1XkQo2P1uws3jq1+5eplCmI649NzQYBY="
},
{
"label": "Entrust_Root_Certification_Authority",
"binNumber": 18,
"sha256Fingerprint": "c8F2Q08bxtWt9FsOducnKHyN5XYWwebmFBorLLx9jkw="
},
{
"label": "OU_RSA_Security_2048_V3_O_RSA_Security_Inc",
"binNumber": 19,
"sha256Fingerprint": "r4tnYqHlKCKBYaldXFWe4mYnj3XXnoMBiaUDUGq9a0w="
},
{
"label": "GeoTrust_Global_CA",
"binNumber": 20,
"sha256Fingerprint": "/4VqLSUdzYjTZlb0UBJnmM+rqt5AeZxyLeTStds2pzo="
},
{
"label": "GeoTrust_Global_CA_2",
"binNumber": 21,
"sha256Fingerprint": "yi2CoIZ3By+KtnZP8DVnbP4+XjJeASFy3z+SCW23m4U="
},
{
"label": "GeoTrust_Universal_CA",
"binNumber": 22,
"sha256Fingerprint": "oEWbn2OyJVn1+l1MbbP59y/xk0IDNXjwc78dG0bLuRI="
},
{
"label": "GeoTrust_Universal_CA_2",
"binNumber": 23,
"sha256Fingerprint": "oCNPO8hSfKVijuyBrV1piV2laA3JHRy4R38z+Hi5Wws="
},
{
"label": "America_Online_Root_Certification_Authority_1",
"binNumber": 24,
"sha256Fingerprint": "d0BzEsY6FT1bwAtOUXWc39rCN9wqM7Z5RumOm/poCuM="
},
{
"label": "America_Online_Root_Certification_Authority_2",
"binNumber": 25,
"sha256Fingerprint": "fTtGWmAU5SbAr/zuISfSMRcnrYEcJoQtAGrzcwbMgL0="
},
{
"label": "Visa_eCommerce_Root",
"binNumber": 26,
"sha256Fingerprint": "afrJvVX7CseNU7vuXPHVl5if0KqrIKJRUb3xcz7n0SI="
},
{
"label": "Certum_CA",
"binNumber": 27,
"sha256Fingerprint": "2OD+vB2y440AlA830n1BNE2ZPnNLmdVlbZd41NgUNiQ="
},
{
"label": "AAA_Certificate_Services",
"binNumber": 28,
"sha256Fingerprint": "16eg+11+JzHXcelITrze9x1fDD4KKUh4K8g+4OppnvQ="
},
{
"label": "Secure_Certificate_Services",
"binNumber": 29,
"sha256Fingerprint": "vYHOO09lkdEaZ7X8ekf97yVSG/mqThi5498uNKeAO+g="
},
{
"label": "Trusted_Certificate_Services",
"binNumber": 30,
"sha256Fingerprint": "PwblVoHUlvW+Fp61OJ+fK4/2HhcI32iBckhJzV0ny2k="
},
{
"label": "QuoVadis_Root_Certification_Authority",
"binNumber": 31,
"sha256Fingerprint": "pF7eO7vwnIrhXHLvwHJo1pOiHJlv1R5nygeUYP1tiHM="
},
{
"label": "QuoVadis_Root_CA_2",
"binNumber": 32,
"sha256Fingerprint": "haDdfdcgrbf/Bfg9VCsgncf/RSj31nexg4n+peXEnoY="
},
{
"label": "QuoVadis_Root_CA_3",
"binNumber": 33,
"sha256Fingerprint": "GPH8fyBd+K3d63/gB91X4683WpxNjXNUa/Tx/tHhjTU="
},
{
"label": "OU_Security_Communication_RootCA1_O_SECOM_Trust_net_C_JP",
"binNumber": 34,
"sha256Fingerprint": "515y7Z9WDuxutIAAc6Q/w60ZGVo5IoIBeJWXSpkCa2w="
},
{
"label": "Sonera_Class2_CA",
"binNumber": 35,
"sha256Fingerprint": "eQi0AxTBOBALUY0HNYB/+/z4UYoAlTNxBbo4axU92Sc="
},
{
"label": "Staat_der_Nederlanden_Root_CA",
"binNumber": 36,
"sha256Fingerprint": "1B2CnowWWYIq+T/OYr/83iZPyE6LlQxf8nXQUjVGlaM="
},
{
"label": "UTN___DATACorp_SGC",
"binNumber": 37,
"sha256Fingerprint": "hfsvkd0SJ1oBRbY2U0+EAkrWi2m47ohoT/cRN1gFs0g="
},
{
"label": "UTN_USERFirst_Hardware",
"binNumber": 38,
"sha256Fingerprint": "bqVHQdAEZn7tG0gWY0qjp55uS5aVD4J52vyNm9iBITc="
},
{
"label": "Chambers_of_Commerce_Root",
"binNumber": 39,
"sha256Fingerprint": "DCWKEqVnSu8l8oun3Prs7qNI5UHm9cxO5jtxs2FgasM="
},
{
"label": "Global_Chambersign_Root",
"binNumber": 40,
"sha256Fingerprint": "7zy0F/yOv2+Xh2yeTs453h6l/mSRQdECi30RwLIpjO0="
},
{
"label": "NetLock_Kozjegyzoi__Class_A__Tanusitvanykiado",
"binNumber": 41,
"sha256Fingerprint": "fxLNX35eKQ7H2FF51bcsIKW+dQj/21v4GrloSn/J9mc="
},
{
"label": "XRamp_Global_Certification_Authority",
"binNumber": 42,
"sha256Fingerprint": "zs3ckFCZ2NrfxbHSCbc3y+LBjPssEMD/C88NMob8GqI="
},
{
"label": "OU_Go_Daddy_Class_2_Certification_Authority_O__The_Go_Daddy_Group__Inc___C_US",
"binNumber": 43,
"sha256Fingerprint": "w4Rr8kuek8pkJ0wOxnwezF4CT/ys0tdAGTUOgf5UauQ="
},
{
"label": "OU_Starfield_Class_2_Certification_Authority_O__Starfield_Technologies__Inc___C_US",
"binNumber": 44,
"sha256Fingerprint": "FGX6IFOXuHb6pvCplY5VkOQPzH+qT7fCyGd1Iftftlg="
},
{
"label": "StartCom_Certification_Authority",
"binNumber": 45,
"sha256Fingerprint": "x2apvvLUBxyGOjGqSSDoE7LRmGCMt7fP4hFDuDbfCeo="
},
{
"label": "O_Government_Root_Certification_Authority_C_TW",
"binNumber": 46,
"sha256Fingerprint": "dgApXu/oW54f1iTbdgYqqq5ZgYpU0ndM1MCywBEx4bM="
},
{
"label": "Swisscom_Root_CA_1",
"binNumber": 47,
"sha256Fingerprint": "IdsgEjZguy7UGCBdoR7nqFpl4rxuVbWvfniZyKJm2S4="
},
{
"label": "DigiCert_Assured_ID_Root_CA",
"binNumber": 48,
"sha256Fingerprint": "PpCZtQFej0hsALzqnREe5yH6ujVaibzx32lWHj3GMlw="
},
{
"label": "DigiCert_Global_Root_CA",
"binNumber": 49,
"sha256Fingerprint": "Q0ig6URMeMsmXgWNXolEtNhPlmK9Jtslf4k0pEPHAWE="
},
{
"label": "DigiCert_High_Assurance_EV_Root_CA",
"binNumber": 50,
"sha256Fingerprint": "dDHl9MPBzkaQd08LYeBUQIg7qaAe0Aumq9eAbtOxGM8="
},
{
"label": "Class_2_Primary_CA",
"binNumber": 51,
"sha256Fingerprint": "D5k8iu+Xuq9WhxQO1ZrRghu0r6zwqppYtdV6M4o6+8s="
},
{
"label": "DST_Root_CA_X3",
"binNumber": 52,
"sha256Fingerprint": "BocmAzGnJAPZCfEF5pvPDTLhvSST/8bZIG0RvNZ3Bzk="
},
{
"label": "DST_ACES_CA_X6",
"binNumber": 53,
"sha256Fingerprint": "dnyVWnZBLImvaI6QoccPVWz9a2Al2+oQQW1+toMfjEA="
},
{
"label": "T_RKTRUST_Elektronik_Sertifika_Hizmet_Sa_lay_c_s_",
"binNumber": 54,
"sha256Fingerprint": "RATjO14UDc+ZgFH9/IAox8gWFcXuc3sRG1iCM6m1NaA="
},
{
"label": "T_RKTRUST_Elektronik_Sertifika_Hizmet_Sa_lay_c_s_",
"binNumber": 55,
"sha256Fingerprint": "xHDPVH4jArl3+yndcaiae2wfYHd7Ayn1YBfzKL9Pa+Y="
},
{
"label": "SwissSign_Gold_CA___G2",
"binNumber": 56,
"sha256Fingerprint": "Yt0L6bn1ChY+oPjnXAU7HspX6lXIaI9kfGiB8sg1e5U="
},
{
"label": "SwissSign_Silver_CA___G2",
"binNumber": 57,
"sha256Fingerprint": "vmxNoru5ulm285OXaDdCRsPABZk/qY8CDR3tvtSKgdU="
},
{
"label": "GeoTrust_Primary_Certification_Authority",
"binNumber": 58,
"sha256Fingerprint": "N9UQBsUS6qtiZCHx7IySAT/F+CrpjuUz60YZuN600Gw="
},
{
"label": "thawte_Primary_Root_CA",
"binNumber": 59,
"sha256Fingerprint": "jXIvganBE8B5HfE2opZtsmyVCpcdtGtBmfTqVLeL+58="
},
{
"label": "VeriSign_Class_3_Public_Primary_Certification_Authority___G5",
"binNumber": 60,
"sha256Fingerprint": "ms+rfkPI2IDQayYqlN7u5LRlmYnD0Mrxm69kBeQat98="
},
{
"label": "SecureTrust_CA",
"binNumber": 61,
"sha256Fingerprint": "8cG1CuWiDdgDDsn2vCSCPdNntSVXWbTnG2H86fc3XXM="
},
{
"label": "Secure_Global_CA",
"binNumber": 62,
"sha256Fingerprint": "QgD1BDrIWQ67Un0gntFQMCn7y9QcobUG7CfxWt59rGk="
},
{
"label": "COMODO_Certification_Authority",
"binNumber": 63,
"sha256Fingerprint": "DCzWPfeAb6OZ7egJEWtXW/h5ifBlGPmAjIYFAxeLr2Y="
},
{
"label": "Network_Solutions_Certificate_Authority",
"binNumber": 64,
"sha256Fingerprint": "FfC6AKOsevOsiEwHKxARoHe9d8CX9AFksvhZir2Dhgw="
},
{
"label": "WellsSecure_Public_Root_Certificate_Authority",
"binNumber": 65,
"sha256Fingerprint": "pxJyrqqjz+hyf3+znw+z0eVCbpBgsG7m8T6aPFgzzUM="
},
{
"label": "COMODO_ECC_Certification_Authority",
"binNumber": 66,
"sha256Fingerprint": "F5OSegYUVJeJrc4vjzT38LZtDzrjo7hNIewV27pPrcc="
},
{
"label": "IGC_A",
"binNumber": 67,
"sha256Fingerprint": "ub6nhgqWLqNhHauXq22j4hwQaLl9VVde0OESecEciTI="
},
{
"label": "OU_Security_Communication_EV_RootCA1_O__SECOM_Trust_Systems_CO__LTD___C_JP",
"binNumber": 68,
"sha256Fingerprint": "oi26aB6XN24tOX1yiq46m2KWuf26YLwuEfZH8sZ1+zc="
},
{
"label": "OISTE_WISeKey_Global_Root_GA_CA",
"binNumber": 69,
"sha256Fingerprint": "Qckjhmq0yta3rVeAgVguAgeXpsvfT/94zoOWs4k31/U="
},
{
"label": "Microsec_e_Szigno_Root_CA",
"binNumber": 70,
"sha256Fingerprint": "Mno9dhq63qA065mEBidcsaR3bv2uL99tAWjqHE9VZ9A="
},
{
"label": "Certigna",
"binNumber": 71,
"sha256Fingerprint": "47ai2y7XzkiEL3rFMkHHtx1UFEv7QMEfPx0LQvXuoS0="
},
{
"label": "TC_TrustCenter_Class_2_CA_II",
"binNumber": 72,
"sha256Fingerprint": "5rj4dmSF+Aeuf42sFnBGHwfAoT7vOh/3F1ONerrTkbQ="
},
{
"label": "TC_TrustCenter_Class_3_CA_II",
"binNumber": 73,
"sha256Fingerprint": "jaCE/Pmc4Hci+JsyBZOYBvpcuBHhyBP2oQjH0zazQI4="
},
{
"label": "TC_TrustCenter_Universal_CA_I",
"binNumber": 74,
"sha256Fingerprint": "6/PAKoeJsft9URmV1mO3KQbZE84NXhBWiop34lhhZ+c="
},
{
"label": "Deutsche_Telekom_Root_CA_2",
"binNumber": 75,
"sha256Fingerprint": "thkaUNDDl399qZvNqshqIn2uuWeexwujsMnZInHBcNM="
},
{
"label": "ComSign_Secured_CA",
"binNumber": 76,
"sha256Fingerprint": "UHlBx0RgoLRwhiINTpkyVyq10bW7y4mAqxyxdlGoRNI="
},
{
"label": "Cybertrust_Global_Root",
"binNumber": 77,
"sha256Fingerprint": "lgrfAGPpY1Z1DCll3QoIZ9oLnL1ud3FK6vsjSas5PaM="
},
{
"label": "OU_ePKI_Root_Certification_Authority_O__Chunghwa_Telecom_Co___Ltd___C_TW",
"binNumber": 78,
"sha256Fingerprint": "wKb03GOiS/3PVO8qaggqCnLeNYA+L/X/Unrl2HIG39U="
},
{
"label": "T_B_TAK_UEKAE_K_k_Sertifika_Hizmet_Sa_lay_c_s____S_r_m_3",
"binNumber": 79,
"sha256Fingerprint": "5Mc0MNeltQkl30M3Cg0hbpp5udbbg3Ogxp6xzDHHxSo="
},
{
"label": "Buypass_Class_2_CA_1",
"binNumber": 80,
"sha256Fingerprint": "D06c3SZLAlVQ0XCAY0AhT+lENMmwL2l+xxD8X+r7Xjg="
},
{
"label": "Buypass_Class_3_CA_1",
"binNumber": 81,
"sha256Fingerprint": "t7ErFx+CHaqZDND+UIexKESLqOUYT4TFHgK1yPuWKyQ="
},
{
"label": "EBG_Elektronik_Sertifika_Hizmet_Sa_lay_c_s_",
"binNumber": 82,
"sha256Fingerprint": "Na5b3dj3rmNc/7pWgqjwC5X0hGLHEI7poOUpKwdKr7I="
},
{
"label": "OU_certSIGN_ROOT_CA_O_certSIGN_C_RO",
"binNumber": 83,
"sha256Fingerprint": "6qlixPpKa6/r5BUZbTUczYiNT1Pz+orm18RmqU5gQrs="
},
{
"label": "CNNIC_ROOT",
"binNumber": 84,
"sha256Fingerprint": "4oOTdz2oRaZ58ggMx/tEo7ehw3kst+t3Kf3Lao2Zrqc="
},
{
"label": "OU_ApplicationCA_O_Japanese_Government_C_JP",
"binNumber": 85,
"sha256Fingerprint": "LUdDfeF5USFaEvPFjlHHKaWAJu8fzApfs9ncAS9gDRk="
},
{
"label": "GeoTrust_Primary_Certification_Authority___G3",
"binNumber": 86,
"sha256Fingerprint": "tHi4EiUN+HhjXCqn7H0VXqpiXugpFuLNKUNhiGzR+9Q="
},
{
"label": "thawte_Primary_Root_CA___G2",
"binNumber": 87,
"sha256Fingerprint": "pDENUK8YpkRxkDcqhq+vi5Uf+0Mdg38eVoi0WXHtFVc="
},
{
"label": "thawte_Primary_Root_CA___G3",
"binNumber": 88,
"sha256Fingerprint": "SwP0WAetcPIb/Cyuccn95GBMBkz1/7aGuuXbqtf900w="
},
{
"label": "GeoTrust_Primary_Certification_Authority___G2",
"binNumber": 89,
"sha256Fingerprint": "Xtt6xDuCoGqHYejXvkl56/JhH33Xm/kcHGtWaiGe12Y="
},
{
"label": "VeriSign_Universal_Root_Certification_Authority",
"binNumber": 90,
"sha256Fingerprint": "I5lWESelcSXejO/qYQ3fL6B4tcgGf06CgpC/uGDoSzw="
},
{
"label": "VeriSign_Class_3_Public_Primary_Certification_Authority___G4",
"binNumber": 91,
"sha256Fingerprint": "ad3X6pC7V8k+E13IXqb81UgLYDI5vcRU/HWLKibPf3k="
},
{
"label": "NetLock_Arany__Class_Gold__F_tan_s_tv_ny",
"binNumber": 92,
"sha256Fingerprint": "bGHaw6Le8DFQa+A20qb+QBmU+9E9+cjUZlmSdMRG7Jg="
},
{
"label": "Staat_der_Nederlanden_Root_CA___G2",
"binNumber": 93,
"sha256Fingerprint": "ZoyDlH2mO3JL7OF0PDGg5q7Q247Fsxvjd7t4T5G2cW8="
},
{
"label": "CA_Disig",
"binNumber": 94,
"sha256Fingerprint": "kr9RGavsytCxMy3E4dBfunW1Z5BE7gyibpMfdE8vM88="
},
{
"label": "Juur_SK",
"binNumber": 95,
"sha256Fingerprint": "7MPpw0B1A77gkaqVL0E0j/iLqoY7ImS++sgHkBV06Tk="
},
{
"label": "Hongkong_Post_Root_CA_1",
"binNumber": 96,
"sha256Fingerprint": "+eZ9M2xRACrAVMYyAi1m3aLn4//xCtBh7THYu7QQz7I="
},
{
"label": "SecureSign_RootCA11",
"binNumber": 97,
"sha256Fingerprint": "vw/u+546WBrV+enbdYmYV0PSYQhcTTFPb11yWapCFhI="
},
{
"label": "ACEDICOM_Root",
"binNumber": 98,
"sha256Fingerprint": "A5UPtJpTHz4ZkZQjmN+p4Ooy17oc3ZvIXbV+2UALQ0o="
},
{
"label": "Microsec_e_Szigno_Root_CA_2009",
"binNumber": 99,
"sha256Fingerprint": "PF+B/qX6uCxkv6Lq7K/N6OB3/IYgp8rlNxY9827b83g="
},
{
"label": "e_Guven_Kok_Elektronik_Sertifika_Hizmet_Saglayicisi",
"binNumber": 100,
"sha256Fingerprint": "5gkHhGWkGXgMtqxMHAv7RlPZ2cxus5Rut/PWmZe61Zg="
},
{
"label": "GlobalSign",
"binNumber": 101,
"sha256Fingerprint": "y7Ui17fxJ61qAROGW98c1BAufQdZr2NafPRyDcljxTs="
},
{
"label": "Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068",
"binNumber": 102,
"sha256Fingerprint": "BASAKL8fKGTUj5rU2DKUNmqCiFZVPzsUMD+QFH9dQO8="
},
{
"label": "Izenpe_com",
"binNumber": 103,
"sha256Fingerprint": "JTDMjpgyFQK62W+bH7obCZ4tKZ4PRUi7kU82O8DUUx8="
},
{
"label": "Chambers_of_Commerce_Root___2008",
"binNumber": 104,
"sha256Fingerprint": "Bj5K+sSR39My8wibhULpRhfYk9f+lE4Qp5N+4p2Wk8A="
},
{
"label": "Global_Chambersign_Root___2008",
"binNumber": 105,
"sha256Fingerprint": "E2M1Q5M0p2mAFqDTJN5yKE4HnXtSILuPvXR4Fu6+uso="
},
{
"label": "Go_Daddy_Root_Certificate_Authority___G2",
"binNumber": 106,
"sha256Fingerprint": "RRQLMkfrnMjFtPDXtTCR9zKSCJ5uWmPidJ3TrKkZjto="
},
{
"label": "Starfield_Root_Certificate_Authority___G2",
"binNumber": 107,
"sha256Fingerprint": "LOHLC/nS+eECmT++IVFSw7LdDKveHGjlMZuDkVTbt/U="
},
{
"label": "Starfield_Services_Root_Certificate_Authority___G2",
"binNumber": 108,
"sha256Fingerprint": "Vo1pBaLIhwikswJRkO3P7bGXSmBqE8blKQ/LKuY+2rU="
},
{
"label": "AffirmTrust_Commercial",
"binNumber": 109,
"sha256Fingerprint": "A3arHVTF+YA85LLiAaDufu97V7Y26Kk8m41IYMlvX6c="
},
{
"label": "AffirmTrust_Networking",
"binNumber": 110,
"sha256Fingerprint": "CoHsWpKXd/FFkErzjV1Qn2a14sWPzbUxBYsOF/PwtBs="
},
{
"label": "AffirmTrust_Premium",
"binNumber": 111,
"sha256Fingerprint": "cKc/fzdrYAdCSJBFNLEUgtW/DmmOzEmN9SV36/LpO5o="
},
{
"label": "AffirmTrust_Premium_ECC",
"binNumber": 112,
"sha256Fingerprint": "vXH99tqX5M9i0WR63SWBsH15rfg5frTsupxehIiCFCM="
},
{
"label": "Certum_Trusted_Network_CA",
"binNumber": 113,
"sha256Fingerprint": "XFhGjVX1jkl+dDmC0rUAELbRZTdKz4On1KMtt2jEQI4="
},
{
"label": "Certinomis___Autorit__Racine",
"binNumber": 114,
"sha256Fingerprint": "/L/iiGIG9ysnWTyLBwKX4S12ntEO15MHBagJjv/BTRc="
},
{
"label": "Root_CA_Generalitat_Valenciana",
"binNumber": 115,
"sha256Fingerprint": "jE7f0ENI8yKWnn4ppM1NygBGVQYcFuGwdkIu80KtYw4="
},
{
"label": "A_Trust_nQual_03",
"binNumber": 116,
"sha256Fingerprint": "eTy/RVm5/eOKsi3xaGn2mIGuFMSwE5rHiKeKGvzKAvs="
},
{
"label": "TWCA_Root_Certification_Authority",
"binNumber": 117,
"sha256Fingerprint": "v9iP4RAcQa4+gBv4vlY1Dum60aa5vVFe3FxtW4cRrEQ="
},
{
"label": "OU_Security_Communication_RootCA2_O__SECOM_Trust_Systems_CO__LTD___C_JP",
"binNumber": 118,
"sha256Fingerprint": "UTss7LgQ1M3l3YU5Gt/Gwt1g2Hu3NtK1IUhKpHoOvvY="
},
{
"label": "EC_ACC",
"binNumber": 119,
"sha256Fingerprint": "iEl/AWAvMVQkauKMTVrvEPHYfrt2Ym9K4Lf5W6eWh5k="
},
{
"label": "Hellenic_Academic_and_Research_Institutions_RootCA_2011",
"binNumber": 120,
"sha256Fingerprint": "vBBPFaSL5wncpUKn4dS5328FRSfoAuqpLVlURCWK/nE="
},
{
"label": "Actalis_Authentication_Root_CA",
"binNumber": 121,
"sha256Fingerprint": "VZJghOyWOmS5biq+Ac4LqGpk+/68x6q1r8FVs3/XYGY="
},
{
"label": "OU_Trustis_FPS_Root_CA_O_Trustis_Limited_C_GB",
"binNumber": 122,
"sha256Fingerprint": "wbSCmaulII/pYwrOVcpooD7aWlGciAKg06Zzvo+OVX0="
},
{
"label": "StartCom_Certification_Authority",
"binNumber": 123,
"sha256Fingerprint": "4XiQ7gmj+/T0i5xBShfWN7elBkfpvHUjInJ/zBdCqRE="
},
{
"label": "StartCom_Certification_Authority_G2",
"binNumber": 124,
"sha256Fingerprint": "x7plZ96Tp5iuH6p5HnEtN4+uH5PEOX/qRBu3y+b9WZU="
},
{
"label": "Buypass_Class_2_Root_CA",
"binNumber": 125,
"sha256Fingerprint": "mhFAJRl8W7ldlOY9Vc1DeQhHtkayPN8RraSgDv8V+0g="
},
{
"label": "Buypass_Class_3_Root_CA",
"binNumber": 126,
"sha256Fingerprint": "7ffrvKJ6KjhNOHt9QBDGZuLttIQ+TCm0rh1bkzLmsk0="
},
{
"label": "T_TeleSec_GlobalRoot_Class_3",
"binNumber": 127,
"sha256Fingerprint": "/XPa0xxkT/G0O+8MzdqWcQuc2Ydeyn4xcHrz6W1SK70="
},
{
"label": "EE_Certification_Centre_Root_CA",
"binNumber": 128,
"sha256Fingerprint": "PoS6Q0KQhRbndXPAmS8JecoITkaFaB/xlcy6iiKbinY="
},
{
"label": "T_RKTRUST_Elektronik_Sertifika_Hizmet_Sa_lay_c_s_",
"binNumber": 129,
"sha256Fingerprint": "l4zZZvL6oHunqpUA2cAunXfyza2mrWunSvS5HGZZPFA="
},
{
"label": "D_TRUST_Root_Class_3_CA_2_2009",
"binNumber": 130,
"sha256Fingerprint": "SeekQqzw6mKHBQBUtSVktlDk9J5C40jWqjjgOelXscE="
},
{
"label": "D_TRUST_Root_Class_3_CA_2_EV_2009",
"binNumber": 131,
"sha256Fingerprint": "7sVJa5iM6YYluTQJLuwpCL7QsPMWwtRzDITq8fPTSIE="
},
{
"label": "PSCProcert",
"binNumber": 132,
"sha256Fingerprint": "PPw8FNH2hP8X44xDykQMALln7JM+i/4GTKHXLJDyrbA="
},
{
"label": "China_Internet_Network_Information_Center_EV_Certificates_Root",
"binNumber": 133,
"sha256Fingerprint": "HAHG9Nuy/vwiVYsryjJWP0mESs/DK3vksP9Zn56Mevc="
},
{
"label": "Swisscom_Root_CA_2",
"binNumber": 134,
"sha256Fingerprint": "8JsSLHEU9KCb1OpPSpnVWLRuTCXNgRQNKcBWE5FMOEE="
},
{
"label": "Swisscom_Root_EV_CA_2",
"binNumber": 135,
"sha256Fingerprint": "2V/qPKTu3OdM1251/G0f9ixEHw+ovHfwNLGeXbJYAV0="
},
{
"label": "CA_Disig_Root_R1",
"binNumber": 136,
"sha256Fingerprint": "+W8j9MPnnAd6RpiNWvWQBnag8DnLZF3RdUmyFsgkQM4="
},
{
"label": "CA_Disig_Root_R2",
"binNumber": 137,
"sha256Fingerprint": "4j1KA217cOn1lbFCIHnSuR7fux+2UaBjPqqKncX4BwM="
},
{
"label": "ACCVRAIZ1",
"binNumber": 138,
"sha256Fingerprint": "mm7AEuGn2p2+NBlNR4rXwNsYIvsHHfEpgUlu0QQ4QRM="
},
{
"label": "TWCA_Global_Root_CA",
"binNumber": 139,
"sha256Fingerprint": "WXaQB/doXQ/NUIcvn5XVdVpbK0V9gfNpK2EKmGcvDhs="
},
{
"label": "TeliaSonera_Root_CA_v1",
"binNumber": 140,
"sha256Fingerprint": "3Wk2/iH48HfBI6GlIcEiJPciVbc+A6cmBpPooksPo4k="
},
{
"label": "E_Tugra_Certification_Authority",
"binNumber": 141,
"sha256Fingerprint": "sL/VK7DX2b2Sv11NwT2iVcAsVC83g2XqiTkR9V5V8jw="
},
{
"label": "T_TeleSec_GlobalRoot_Class_2",
"binNumber": 142,
"sha256Fingerprint": "keL1eI1YEOunulhzfeFUio7KzQFFmLwLFD4EGxcFJVI="
},
{
"label": "Atos_TrustedRoot_2011",
"binNumber": 143,
"sha256Fingerprint": "81a+okS3qR6zXVPKmteGSs4Bji011fj5bd9opvQapHQ="
},
{
"label": "QuoVadis_Root_CA_1_G3",
"binNumber": 144,
"sha256Fingerprint": "ioZv0bJ2tX5XjpIcZYKKK+1Y6fLyiAVBNLfx9L/JzHQ="
},
{
"label": "QuoVadis_Root_CA_2_G3",
"binNumber": 145,
"sha256Fingerprint": "j+T7Cvk6TQ1n2wvrsj43xxvzJdy83SQOoE2vWLR+GEA="
},
{
"label": "QuoVadis_Root_CA_3_G3",
"binNumber": 146,
"sha256Fingerprint": "iO+B3iAusBhFLkP4ZHJc6l+9H8LZ0gVzBwnF2LhpD0Y="
},
{
"label": "DigiCert_Assured_ID_Root_G2",
"binNumber": 147,
"sha256Fingerprint": "fQXrtoIzn4yUUe4JTuv++nlToRTtsvRJSUUvq30vwYU="
},
{
"label": "DigiCert_Assured_ID_Root_G3",
"binNumber": 148,
"sha256Fingerprint": "fjfLi0xHCQyrNlUbpvRduEBoD7oWapUtsQBxf0MFP8I="
},
{
"label": "DigiCert_Global_Root_G2",
"binNumber": 149,
"sha256Fingerprint": "yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18="
},
{
"label": "DigiCert_Global_Root_G3",
"binNumber": 150,
"sha256Fingerprint": "Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA="
},
{
"label": "DigiCert_Trusted_Root_G4",
"binNumber": 151,
"sha256Fingerprint": "VS973PGnr55s5nIBf08Sq/dyQMeOdhrCA9HZ0grImYg="
},
{
"label": "Certification_Authority_of_WoSign",
"binNumber": 152,
"sha256Fingerprint": "SyLVpq7JnzzbeapewGg4R5zV7LpxZPfyLcHWX2PYVwg="
},
{
"label": "CA______",
"binNumber": 153,
"sha256Fingerprint": "1vA0vZSqIz8Cl+ykJFsoOXPkR6pZDzEMd/SP34MRIlQ="
},
{
"label": "COMODO_RSA_Certification_Authority",
"binNumber": 154,
"sha256Fingerprint": "UvDhxOWOxikpG2AxfwdGcbhdfqgNWwcnNGNTSzK0AjQ="
},
{
"label": "USERTrust_RSA_Certification_Authority",
"binNumber": 155,
"sha256Fingerprint": "55PJsC/YqhPiHDEiisywgRlkO3SciYlksXRtRsPUy9I="
},
{
"label": "USERTrust_ECC_Certification_Authority",
"binNumber": 156,
"sha256Fingerprint": "T/Rg1Uuchtq/vPxXEuBADSvtP7xNT72qhuBq3NKprXo="
},
{
"label": "GlobalSign",
"binNumber": 157,
"sha256Fingerprint": "vslJEcKVVnbbbApVCYbXbjugBWZ8RCyXYrT7t3PeIow="
},
{
"label": "GlobalSign",
"binNumber": 158,
"sha256Fingerprint": "F5+8FIo90A/STqE0WMxDv6f1nIGC14OlE/br7BAMiSQ="
},
{
"label": "Staat_der_Nederlanden_Root_CA___G3",
"binNumber": 159,
"sha256Fingerprint": "PE+wuVq4swAy9DK4b1Nf4XLBhdD9OYZYN882GH+m9Cg="
},
{
"label": "Staat_der_Nederlanden_EV_Root_CA",
"binNumber": 160,
"sha256Fingerprint": "TSSRQUz+lWdG7Ezvps9vcuKKEylDL52KkHrEy12twVo="
},
{
"label": "IdenTrust_Commercial_Root_CA_1",
"binNumber": 161,
"sha256Fingerprint": "XVZJm+TS4IvPytCKPjhyPVBQO95waUjkL1VgMBnlKK4="
},
{
"label": "IdenTrust_Public_Sector_Root_CA_1",
"binNumber": 162,
"sha256Fingerprint": "MNCJWppEiiYgkWNVItH1IBC1hnrK4Sx475WP1PQ4ny8="
},
{
"label": "Entrust_Root_Certification_Authority___G2",
"binNumber": 163,
"sha256Fingerprint": "Q99XdLA+f+9f5A2TGnvt8bsua0JzjE5tOEEQPTqn8zk="
},
{
"label": "Entrust_Root_Certification_Authority___EC1",
"binNumber": 164,
"sha256Fingerprint": "Au0OsowU2kUWXFZnkXANZFHX+1bwsqsdO46wcOVu3/U="
},
{
"label": "CFCA_EV_ROOT",
"binNumber": 165,
"sha256Fingerprint": "XMPXjk4dXkVUegTmhz5k+Qz5U20czC74APNVxMX9cP0="
},
{
"label": "T_RKTRUST_Elektronik_Sertifika_Hizmet_Sa_lay_c_s__H5",
"binNumber": 166,
"sha256Fingerprint": "STUbkDREwYXM3FxpPSTYVVyyCNaoFBMHaZ9K8GMZnXg="
},
{
"label": "T_RKTRUST_Elektronik_Sertifika_Hizmet_Sa_lay_c_s__H6",
"binNumber": 167,
"sha256Fingerprint": "jeeGVeG+f3hHgAuT9pTSHTaMwG4DPn+rBLteuZ2mtwA="
},
{
"label": "Certinomis___Root_CA",
"binNumber": 168,
"sha256Fingerprint": "Kpn1vBF0tzy7HWIIhOAcNOUcyzl42hJfDjMmiIO/QVg="
},
{
"label": "OISTE_WISeKey_Global_Root_GB_CA",
"binNumber": 169,
"sha256Fingerprint": "a5wI6G6w92fPrWXNmLYhSeVJSmf1hF570e0Bnye4a9Y="
},
{
"label": "Certification_Authority_of_WoSign_G2",
"binNumber": 170,
"sha256Fingerprint": "1Ielb4OwdILoXpYzlMHswsnlHQkD7pRrAsMBWB7ZnhY="
},
{
"label": "CA_WoSign_ECC_Root",
"binNumber": 171,
"sha256Fingerprint": "i0XaHAb3kesMq/Jr5Yj1+yMWXC5hS/iFVi0NzlCymwI="
},
{
"label": "SZAFIR_ROOT_CA2",
"binNumber": 172,
"sha256Fingerprint": "oTOdMygaC1blV9PTKxzn+TZ+sJS9X6cqflAEyN7Xyv4="
},
{
"label": "Certum_Trusted_Network_CA_2",
"binNumber": 173,
"sha256Fingerprint": "tnby7drod1zTbLD2PNHUYDlh9J5iZboBOi8DB7bQuAQ="
},
{
"label": "Hellenic_Academic_and_Research_Institutions_RootCA_2015",
"binNumber": 174,
"sha256Fingerprint": "oECSmgLOU7Ss9PL/xpgc5ElvdV5tRf4LKmkrzVJSPzY="
},
{
"label": "Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015",
"binNumber": 175,
"sha256Fingerprint": "RLVFqool5lpzyhXcJ/w20kwcuZU6BmU5sRWC3Eh7SDM="
},
{
"label": "Certplus_Root_CA_G1",
"binNumber": 176,
"sha256Fingerprint": "FSpAK/zfLNVIBU0idbOcf8o+wJeAeLDw6nblYabHQz4="
},
{
"label": "Certplus_Root_CA_G2",
"binNumber": 177,
"sha256Fingerprint": "bMBQQeZEXnRpbEz7yfgPVDt+q7tEtM5veHxqmXHELxc="
},
{
"label": "OpenTrust_Root_CA_G1",
"binNumber": 178,
"sha256Fingerprint": "VsdxKNmMGNkbTP3/vCXukQPUdY6iq62CapDzRX1GDrQ="
},
{
"label": "OpenTrust_Root_CA_G2",
"binNumber": 179,
"sha256Fingerprint": "J5lYKf5qdRXBv+hI+cR2HbFsIlkpJXv0DQiU8p6ouvI="
},
{
"label": "OpenTrust_Root_CA_G3",
"binNumber": 180,
"sha256Fingerprint": "t8NiMXBugQeMNny4lhmPHjII3ZJpSd2PVwmkEPdbYpI="
},
{
"label": "ISRG_Root_X1",
"binNumber": 181,
"sha256Fingerprint": "lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY="
},
{
"label": "OU_AC_RAIZ_FNMT_RCM_O_FNMT_RCM_C_ES",
"binNumber": 182,
"sha256Fingerprint": "68VXDCkBjE1nsaoSe68S9wO0YR68F7fatVc4lBebk/o="
},
{
"label": "Amazon_Root_CA_1",
"binNumber": 183,
"sha256Fingerprint": "js3miE89h7ESW6Maw/yxPXAW3n9XzJBP4cuXxq6YGW4="
},
{
"label": "Amazon_Root_CA_2",
"binNumber": 184,
"sha256Fingerprint": "G6WyqoxlQBqClgEY+AvsT2IwTYPOxHE6GcOcAR6kbbQ="
},
{
"label": "Amazon_Root_CA_3",
"binNumber": 185,
"sha256Fingerprint": "GM5s/nvxTmCy40e43+hoyzHQLrs62icVafUDQ7Rts6Q="
},
{
"label": "Amazon_Root_CA_4",
"binNumber": 186,
"sha256Fingerprint": "410oQZ7QICXPppA4zWI5YkWNpcaV+96jwisL+yWJcJI="
},
{
"label": "LuxTrust_Global_Root_2",
"binNumber": 187,
"sha256Fingerprint": "VEVfcSnCCxRHxBj5lxaPJMWPxQI79dpb4utuHdiQLtU="
},
{
"label": "TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi___Surum_1",
"binNumber": 188,
"sha256Fingerprint": "Ru3DaJBG1TpFP7MQSrgNyuxliyZg6hYp3X6GeZBkhxY="
}
],
"maxBin": 188
}

2
security/nss/TAG-INFO
View File

@ -1 +1 @@
1fb7e5f584de
7228445b43ac

2
security/nss/cmd/certutil/certext.c
View File

@ -980,8 +980,6 @@ AddNameConstraints(void *extHandle)
GEN_BREAK(SECFailure);
}
(void)SEC_ASN1EncodeInteger(arena, &current->min, 0);
if (!GetGeneralName(arena, &current->name, PR_TRUE)) {
GEN_BREAK(SECFailure);
}

2
security/nss/cmd/pk12util/pk12util.c
View File

@ -1058,7 +1058,7 @@ main(int argc, char **argv)
certCipher = PKCS12U_MapCipherFromString(cipherString, certKeyLen);
/* If the user requested a cipher and we didn't find it, then
* don't just silently not encrypt. */
if (cipher == SEC_OID_UNKNOWN) {
if (certCipher == SEC_OID_UNKNOWN) {
PORT_SetError(SEC_ERROR_INVALID_ALGORITHM);
SECU_PrintError(progName, "Algorithm: \"%s\"", cipherString);
pk12uErrno = PK12UERR_INVALIDALGORITHM;

1
security/nss/coreconf/coreconf.dep
View File

@ -10,4 +10,3 @@
*/
#error "Do not include this header file."

37
security/nss/lib/certdb/genname.c
View File

@ -1588,10 +1588,10 @@ done:
STRING_TO_SECITEM(CA##_NAME_CONSTRAINTS) \
}
/* Agence Nationale de la Securite des Systemes d'Information (ANSSI) */
/* clang-format off */
/* Agence Nationale de la Securite des Systemes d'Information (ANSSI) */
#define ANSSI_SUBJECT_DN \
"\x30\x81\x85" \
"\x31\x0B\x30\x09\x06\x03\x55\x04\x06\x13\x02" "FR" /* C */ \
@ -1619,10 +1619,39 @@ done:
"\x30\x05\x82\x03" ".nc" \
"\x30\x05\x82\x03" ".tf"
/* TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1 */
#define TUBITAK1_SUBJECT_DN \
"\x30\x81\xd2" \
"\x31\x0b\x30\x09\x06\x03\x55\x04\x06\x13\x02" \
/* C */ "TR" \
"\x31\x18\x30\x16\x06\x03\x55\x04\x07\x13\x0f" \
/* L */ "Gebze - Kocaeli" \
"\x31\x42\x30\x40\x06\x03\x55\x04\x0a\x13\x39" \
/* O */ "Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK" \
"\x31\x2d\x30\x2b\x06\x03\x55\x04\x0b\x13\x24" \
/* OU */ "Kamu Sertifikasyon Merkezi - Kamu SM" \
"\x31\x36\x30\x34\x06\x03\x55\x04\x03\x13\x2d" \
/* CN */ "TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1"
#define TUBITAK1_NAME_CONSTRAINTS \
"\x30\x65\xa0\x63" \
"\x30\x09\x82\x07" ".gov.tr" \
"\x30\x09\x82\x07" ".k12.tr" \
"\x30\x09\x82\x07" ".pol.tr" \
"\x30\x09\x82\x07" ".mil.tr" \
"\x30\x09\x82\x07" ".tsk.tr" \
"\x30\x09\x82\x07" ".kep.tr" \
"\x30\x09\x82\x07" ".bel.tr" \
"\x30\x09\x82\x07" ".edu.tr" \
"\x30\x09\x82\x07" ".org.tr"
/* clang-format on */
static const SECItem builtInNameConstraints[][2] = { NAME_CONSTRAINTS_ENTRY(
ANSSI) };
static const SECItem builtInNameConstraints[][2] = {
NAME_CONSTRAINTS_ENTRY(ANSSI),
NAME_CONSTRAINTS_ENTRY(TUBITAK1)
};
SECStatus
CERT_GetImposedNameConstraints(const SECItem *derSubject, SECItem *extensions)

972
security/nss/lib/ckfw/builtins/certdata.txt
View File

@ -8245,168 +8245,6 @@ CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
#
# Certificate "WellsSecure Public Root Certificate Authority"
#
# Issuer: CN=WellsSecure Public Root Certificate Authority,OU=Wells Fargo Bank NA,O=Wells Fargo WellsSecure,C=US
# Serial Number: 1 (0x1)
# Subject: CN=WellsSecure Public Root Certificate Authority,OU=Wells Fargo Bank NA,O=Wells Fargo WellsSecure,C=US
# Not Valid Before: Thu Dec 13 17:07:54 2007
# Not Valid After : Wed Dec 14 00:07:54 2022
# Fingerprint (MD5): 15:AC:A5:C2:92:2D:79:BC:E8:7F:CB:67:ED:02:CF:36
# Fingerprint (SHA1): E7:B4:F6:9D:61:EC:90:69:DB:7E:90:A7:40:1A:3C:F4:7D:4F:E8:EE
CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
CKA_TOKEN CK_BBOOL CK_TRUE
CKA_PRIVATE CK_BBOOL CK_FALSE
CKA_MODIFIABLE CK_BBOOL CK_FALSE
CKA_LABEL UTF8 "WellsSecure Public Root Certificate Authority"
CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509
CKA_SUBJECT MULTILINE_OCTAL
\060\201\205\061\013\060\011\006\003\125\004\006\023\002\125\123
\061\040\060\036\006\003\125\004\012\014\027\127\145\154\154\163
\040\106\141\162\147\157\040\127\145\154\154\163\123\145\143\165
\162\145\061\034\060\032\006\003\125\004\013\014\023\127\145\154
\154\163\040\106\141\162\147\157\040\102\141\156\153\040\116\101
\061\066\060\064\006\003\125\004\003\014\055\127\145\154\154\163
\123\145\143\165\162\145\040\120\165\142\154\151\143\040\122\157
\157\164\040\103\145\162\164\151\146\151\143\141\164\145\040\101
\165\164\150\157\162\151\164\171
END
CKA_ID UTF8 "0"
CKA_ISSUER MULTILINE_OCTAL
\060\201\205\061\013\060\011\006\003\125\004\006\023\002\125\123
\061\040\060\036\006\003\125\004\012\014\027\127\145\154\154\163
\040\106\141\162\147\157\040\127\145\154\154\163\123\145\143\165
\162\145\061\034\060\032\006\003\125\004\013\014\023\127\145\154
\154\163\040\106\141\162\147\157\040\102\141\156\153\040\116\101
\061\066\060\064\006\003\125\004\003\014\055\127\145\154\154\163
\123\145\143\165\162\145\040\120\165\142\154\151\143\040\122\157
\157\164\040\103\145\162\164\151\146\151\143\141\164\145\040\101
\165\164\150\157\162\151\164\171
END
CKA_SERIAL_NUMBER MULTILINE_OCTAL
\002\001\001
END
CKA_VALUE MULTILINE_OCTAL
\060\202\004\275\060\202\003\245\240\003\002\001\002\002\001\001
\060\015\006\011\052\206\110\206\367\015\001\001\005\005\000\060
\201\205\061\013\060\011\006\003\125\004\006\023\002\125\123\061
\040\060\036\006\003\125\004\012\014\027\127\145\154\154\163\040
\106\141\162\147\157\040\127\145\154\154\163\123\145\143\165\162
\145\061\034\060\032\006\003\125\004\013\014\023\127\145\154\154
\163\040\106\141\162\147\157\040\102\141\156\153\040\116\101\061
\066\060\064\006\003\125\004\003\014\055\127\145\154\154\163\123
\145\143\165\162\145\040\120\165\142\154\151\143\040\122\157\157
\164\040\103\145\162\164\151\146\151\143\141\164\145\040\101\165
\164\150\157\162\151\164\171\060\036\027\015\060\067\061\062\061
\063\061\067\060\067\065\064\132\027\015\062\062\061\062\061\064
\060\060\060\067\065\064\132\060\201\205\061\013\060\011\006\003
\125\004\006\023\002\125\123\061\040\060\036\006\003\125\004\012
\014\027\127\145\154\154\163\040\106\141\162\147\157\040\127\145
\154\154\163\123\145\143\165\162\145\061\034\060\032\006\003\125
\004\013\014\023\127\145\154\154\163\040\106\141\162\147\157\040
\102\141\156\153\040\116\101\061\066\060\064\006\003\125\004\003
\014\055\127\145\154\154\163\123\145\143\165\162\145\040\120\165
\142\154\151\143\040\122\157\157\164\040\103\145\162\164\151\146
\151\143\141\164\145\040\101\165\164\150\157\162\151\164\171\060
\202\001\042\060\015\006\011\052\206\110\206\367\015\001\001\001
\005\000\003\202\001\017\000\060\202\001\012\002\202\001\001\000
\356\157\264\275\171\342\217\010\041\236\070\004\101\045\357\253
\133\034\123\222\254\155\236\335\302\304\056\105\224\003\065\210
\147\164\127\343\337\214\270\247\166\217\073\367\250\304\333\051
\143\016\221\150\066\212\227\216\212\161\150\011\007\344\350\324
\016\117\370\326\053\114\244\026\371\357\103\230\217\263\236\122
\337\155\221\071\217\070\275\167\213\103\143\353\267\223\374\060
\114\034\001\223\266\023\373\367\241\037\277\045\341\164\067\054
\036\244\136\074\150\370\113\277\015\271\036\056\066\350\251\344
\247\370\017\313\202\165\174\065\055\042\326\302\277\013\363\264
\374\154\225\141\036\127\327\004\201\062\203\122\171\346\203\143
\317\267\313\143\213\021\342\275\136\353\366\215\355\225\162\050
\264\254\022\142\351\112\063\346\203\062\256\005\165\225\275\204
\225\333\052\134\233\216\056\014\270\201\053\101\346\070\126\237
\111\233\154\166\372\212\135\367\001\171\201\174\301\203\100\005
\376\161\375\014\077\314\116\140\011\016\145\107\020\057\001\300
\005\077\217\370\263\101\357\132\102\176\131\357\322\227\014\145
\002\003\001\000\001\243\202\001\064\060\202\001\060\060\017\006
\003\125\035\023\001\001\377\004\005\060\003\001\001\377\060\071
\006\003\125\035\037\004\062\060\060\060\056\240\054\240\052\206
\050\150\164\164\160\072\057\057\143\162\154\056\160\153\151\056
\167\145\154\154\163\146\141\162\147\157\056\143\157\155\057\167
\163\160\162\143\141\056\143\162\154\060\016\006\003\125\035\017
\001\001\377\004\004\003\002\001\306\060\035\006\003\125\035\016
\004\026\004\024\046\225\031\020\331\350\241\227\221\377\334\031
\331\265\004\076\322\163\012\152\060\201\262\006\003\125\035\043
\004\201\252\060\201\247\200\024\046\225\031\020\331\350\241\227
\221\377\334\031\331\265\004\076\322\163\012\152\241\201\213\244
\201\210\060\201\205\061\013\060\011\006\003\125\004\006\023\002
\125\123\061\040\060\036\006\003\125\004\012\014\027\127\145\154
\154\163\040\106\141\162\147\157\040\127\145\154\154\163\123\145
\143\165\162\145\061\034\060\032\006\003\125\004\013\014\023\127
\145\154\154\163\040\106\141\162\147\157\040\102\141\156\153\040
\116\101\061\066\060\064\006\003\125\004\003\014\055\127\145\154
\154\163\123\145\143\165\162\145\040\120\165\142\154\151\143\040
\122\157\157\164\040\103\145\162\164\151\146\151\143\141\164\145
\040\101\165\164\150\157\162\151\164\171\202\001\001\060\015\006
\011\052\206\110\206\367\015\001\001\005\005\000\003\202\001\001
\000\271\025\261\104\221\314\043\310\053\115\167\343\370\232\173
\047\015\315\162\273\231\000\312\174\146\031\120\306\325\230\355
\253\277\003\132\345\115\345\036\310\117\161\227\206\325\343\035
\375\220\311\074\165\167\127\172\175\370\336\364\324\325\367\225
\346\164\156\035\074\256\174\235\333\002\003\005\054\161\113\045
\076\007\343\136\232\365\146\027\051\210\032\070\237\317\252\101
\003\204\227\153\223\070\172\312\060\104\033\044\104\063\320\344
\321\334\050\070\364\023\103\065\065\051\143\250\174\242\265\255
\070\244\355\255\375\306\232\037\377\227\163\376\373\263\065\247
\223\206\306\166\221\000\346\254\121\026\304\047\062\134\333\163
\332\245\223\127\216\076\155\065\046\010\131\325\347\104\327\166
\040\143\347\254\023\147\303\155\261\160\106\174\325\226\021\075
\211\157\135\250\241\353\215\012\332\303\035\063\154\243\352\147
\031\232\231\177\113\075\203\121\052\035\312\057\206\014\242\176
\020\055\053\324\026\225\013\007\252\056\024\222\111\267\051\157
\330\155\061\175\365\374\241\020\007\207\316\057\131\334\076\130
\333
END
CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE
# Trust for Certificate "WellsSecure Public Root Certificate Authority"
# Issuer: CN=WellsSecure Public Root Certificate Authority,OU=Wells Fargo Bank NA,O=Wells Fargo WellsSecure,C=US
# Serial Number: 1 (0x1)
# Subject: CN=WellsSecure Public Root Certificate Authority,OU=Wells Fargo Bank NA,O=Wells Fargo WellsSecure,C=US
# Not Valid Before: Thu Dec 13 17:07:54 2007
# Not Valid After : Wed Dec 14 00:07:54 2022
# Fingerprint (MD5): 15:AC:A5:C2:92:2D:79:BC:E8:7F:CB:67:ED:02:CF:36
# Fingerprint (SHA1): E7:B4:F6:9D:61:EC:90:69:DB:7E:90:A7:40:1A:3C:F4:7D:4F:E8:EE
CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST
CKA_TOKEN CK_BBOOL CK_TRUE
CKA_PRIVATE CK_BBOOL CK_FALSE
CKA_MODIFIABLE CK_BBOOL CK_FALSE
CKA_LABEL UTF8 "WellsSecure Public Root Certificate Authority"
CKA_CERT_SHA1_HASH MULTILINE_OCTAL
\347\264\366\235\141\354\220\151\333\176\220\247\100\032\074\364
\175\117\350\356
END
CKA_CERT_MD5_HASH MULTILINE_OCTAL
\025\254\245\302\222\055\171\274\350\177\313\147\355\002\317\066
END
CKA_ISSUER MULTILINE_OCTAL
\060\201\205\061\013\060\011\006\003\125\004\006\023\002\125\123
\061\040\060\036\006\003\125\004\012\014\027\127\145\154\154\163
\040\106\141\162\147\157\040\127\145\154\154\163\123\145\143\165
\162\145\061\034\060\032\006\003\125\004\013\014\023\127\145\154
\154\163\040\106\141\162\147\157\040\102\141\156\153\040\116\101
\061\066\060\064\006\003\125\004\003\014\055\127\145\154\154\163
\123\145\143\165\162\145\040\120\165\142\154\151\143\040\122\157
\157\164\040\103\145\162\164\151\146\151\143\141\164\145\040\101
\165\164\150\157\162\151\164\171
END
CKA_SERIAL_NUMBER MULTILINE_OCTAL
\002\001\001
END
CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
#
# Certificate "COMODO ECC Certification Authority"
#
@ -8991,213 +8829,6 @@ CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
#
# Certificate "Microsec e-Szigno Root CA"
#
# Issuer: CN=Microsec e-Szigno Root CA,OU=e-Szigno CA,O=Microsec Ltd.,L=Budapest,C=HU
# Serial Number:00:cc:b8:e7:bf:4e:29:1a:fd:a2:dc:66:a5:1c:2c:0f:11
# Subject: CN=Microsec e-Szigno Root CA,OU=e-Szigno CA,O=Microsec Ltd.,L=Budapest,C=HU
# Not Valid Before: Wed Apr 06 12:28:44 2005
# Not Valid After : Thu Apr 06 12:28:44 2017
# Fingerprint (MD5): F0:96:B6:2F:C5:10:D5:67:8E:83:25:32:E8:5E:2E:E5
# Fingerprint (SHA1): 23:88:C9:D3:71:CC:9E:96:3D:FF:7D:3C:A7:CE:FC:D6:25:EC:19:0D
CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
CKA_TOKEN CK_BBOOL CK_TRUE
CKA_PRIVATE CK_BBOOL CK_FALSE
CKA_MODIFIABLE CK_BBOOL CK_FALSE
CKA_LABEL UTF8 "Microsec e-Szigno Root CA"
CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509
CKA_SUBJECT MULTILINE_OCTAL
\060\162\061\013\060\011\006\003\125\004\006\023\002\110\125\061
\021\060\017\006\003\125\004\007\023\010\102\165\144\141\160\145
\163\164\061\026\060\024\006\003\125\004\012\023\015\115\151\143
\162\157\163\145\143\040\114\164\144\056\061\024\060\022\006\003
\125\004\013\023\013\145\055\123\172\151\147\156\157\040\103\101
\061\042\060\040\006\003\125\004\003\023\031\115\151\143\162\157
\163\145\143\040\145\055\123\172\151\147\156\157\040\122\157\157
\164\040\103\101
END
CKA_ID UTF8 "0"
CKA_ISSUER MULTILINE_OCTAL
\060\162\061\013\060\011\006\003\125\004\006\023\002\110\125\061
\021\060\017\006\003\125\004\007\023\010\102\165\144\141\160\145
\163\164\061\026\060\024\006\003\125\004\012\023\015\115\151\143
\162\157\163\145\143\040\114\164\144\056\061\024\060\022\006\003
\125\004\013\023\013\145\055\123\172\151\147\156\157\040\103\101
\061\042\060\040\006\003\125\004\003\023\031\115\151\143\162\157
\163\145\143\040\145\055\123\172\151\147\156\157\040\122\157\157
\164\040\103\101
END
CKA_SERIAL_NUMBER MULTILINE_OCTAL
\002\021\000\314\270\347\277\116\051\032\375\242\334\146\245\034
\054\017\021
END
CKA_VALUE MULTILINE_OCTAL
\060\202\007\250\060\202\006\220\240\003\002\001\002\002\021\000
\314\270\347\277\116\051\032\375\242\334\146\245\034\054\017\021
\060\015\006\011\052\206\110\206\367\015\001\001\005\005\000\060
\162\061\013\060\011\006\003\125\004\006\023\002\110\125\061\021
\060\017\006\003\125\004\007\023\010\102\165\144\141\160\145\163
\164\061\026\060\024\006\003\125\004\012\023\015\115\151\143\162
\157\163\145\143\040\114\164\144\056\061\024\060\022\006\003\125
\004\013\023\013\145\055\123\172\151\147\156\157\040\103\101\061
\042\060\040\006\003\125\004\003\023\031\115\151\143\162\157\163
\145\143\040\145\055\123\172\151\147\156\157\040\122\157\157\164
\040\103\101\060\036\027\015\060\065\060\064\060\066\061\062\062
\070\064\064\132\027\015\061\067\060\064\060\066\061\062\062\070
\064\064\132\060\162\061\013\060\011\006\003\125\004\006\023\002
\110\125\061\021\060\017\006\003\125\004\007\023\010\102\165\144
\141\160\145\163\164\061\026\060\024\006\003\125\004\012\023\015
\115\151\143\162\157\163\145\143\040\114\164\144\056\061\024\060
\022\006\003\125\004\013\023\013\145\055\123\172\151\147\156\157
\040\103\101\061\042\060\040\006\003\125\004\003\023\031\115\151
\143\162\157\163\145\143\040\145\055\123\172\151\147\156\157\040
\122\157\157\164\040\103\101\060\202\001\042\060\015\006\011\052
\206\110\206\367\015\001\001\001\005\000\003\202\001\017\000\060
\202\001\012\002\202\001\001\000\355\310\000\325\201\173\315\070
\000\107\314\333\204\301\041\151\054\164\220\014\041\331\123\207
\355\076\103\104\123\257\253\370\200\233\074\170\215\324\215\256
\270\357\323\021\334\201\346\317\073\226\214\326\157\025\306\167
\176\241\057\340\137\222\266\047\327\166\232\035\103\074\352\331
\354\057\356\071\363\152\147\113\213\202\317\042\370\145\125\376
\054\313\057\175\110\172\075\165\371\252\240\047\273\170\302\006
\312\121\302\176\146\113\257\315\242\247\115\002\202\077\202\254
\205\306\341\017\220\107\231\224\012\161\162\223\052\311\246\300
\276\074\126\114\163\222\047\361\153\265\365\375\374\060\005\140
\222\306\353\226\176\001\221\302\151\261\036\035\173\123\105\270
\334\101\037\311\213\161\326\124\024\343\213\124\170\077\276\364
\142\073\133\365\243\354\325\222\164\342\164\060\357\001\333\341
\324\253\231\233\052\153\370\275\246\034\206\043\102\137\354\111
\336\232\213\133\364\162\072\100\305\111\076\245\276\216\252\161
\353\154\372\365\032\344\152\375\173\175\125\100\357\130\156\346
\331\325\274\044\253\301\357\267\002\003\001\000\001\243\202\004
\067\060\202\004\063\060\147\006\010\053\006\001\005\005\007\001
\001\004\133\060\131\060\050\006\010\053\006\001\005\005\007\060
\001\206\034\150\164\164\160\163\072\057\057\162\143\141\056\145
\055\163\172\151\147\156\157\056\150\165\057\157\143\163\160\060
\055\006\010\053\006\001\005\005\007\060\002\206\041\150\164\164
\160\072\057\057\167\167\167\056\145\055\163\172\151\147\156\157
\056\150\165\057\122\157\157\164\103\101\056\143\162\164\060\017
\006\003\125\035\023\001\001\377\004\005\060\003\001\001\377\060
\202\001\163\006\003\125\035\040\004\202\001\152\060\202\001\146
\060\202\001\142\006\014\053\006\001\004\001\201\250\030\002\001
\001\001\060\202\001\120\060\050\006\010\053\006\001\005\005\007
\002\001\026\034\150\164\164\160\072\057\057\167\167\167\056\145
\055\163\172\151\147\156\157\056\150\165\057\123\132\123\132\057
\060\202\001\042\006\010\053\006\001\005\005\007\002\002\060\202
\001\024\036\202\001\020\000\101\000\040\000\164\000\141\000\156
\000\372\000\163\000\355\000\164\000\166\000\341\000\156\000\171
\000\040\000\351\000\162\000\164\000\145\000\154\000\155\000\145
\000\172\000\351\000\163\000\351\000\150\000\145\000\172\000\040
\000\351\000\163\000\040\000\145\000\154\000\146\000\157\000\147
\000\141\000\144\000\341\000\163\000\341\000\150\000\157\000\172
\000\040\000\141\000\040\000\123\000\172\000\157\000\154\000\147
\000\341\000\154\000\164\000\141\000\164\000\363\000\040\000\123
\000\172\000\157\000\154\000\147\000\341\000\154\000\164\000\141
\000\164\000\341\000\163\000\151\000\040\000\123\000\172\000\141
\000\142\000\341\000\154\000\171\000\172\000\141\000\164\000\141
\000\040\000\163\000\172\000\145\000\162\000\151\000\156\000\164
\000\040\000\153\000\145\000\154\000\154\000\040\000\145\000\154
\000\152\000\341\000\162\000\156\000\151\000\072\000\040\000\150
\000\164\000\164\000\160\000\072\000\057\000\057\000\167\000\167
\000\167\000\056\000\145\000\055\000\163\000\172\000\151\000\147
\000\156\000\157\000\056\000\150\000\165\000\057\000\123\000\132
\000\123\000\132\000\057\060\201\310\006\003\125\035\037\004\201
\300\060\201\275\060\201\272\240\201\267\240\201\264\206\041\150
\164\164\160\072\057\057\167\167\167\056\145\055\163\172\151\147
\156\157\056\150\165\057\122\157\157\164\103\101\056\143\162\154
\206\201\216\154\144\141\160\072\057\057\154\144\141\160\056\145
\055\163\172\151\147\156\157\056\150\165\057\103\116\075\115\151
\143\162\157\163\145\143\045\062\060\145\055\123\172\151\147\156
\157\045\062\060\122\157\157\164\045\062\060\103\101\054\117\125
\075\145\055\123\172\151\147\156\157\045\062\060\103\101\054\117
\075\115\151\143\162\157\163\145\143\045\062\060\114\164\144\056
\054\114\075\102\165\144\141\160\145\163\164\054\103\075\110\125
\077\143\145\162\164\151\146\151\143\141\164\145\122\145\166\157
\143\141\164\151\157\156\114\151\163\164\073\142\151\156\141\162
\171\060\016\006\003\125\035\017\001\001\377\004\004\003\002\001
\006\060\201\226\006\003\125\035\021\004\201\216\060\201\213\201
\020\151\156\146\157\100\145\055\163\172\151\147\156\157\056\150
\165\244\167\060\165\061\043\060\041\006\003\125\004\003\014\032
\115\151\143\162\157\163\145\143\040\145\055\123\172\151\147\156
\303\263\040\122\157\157\164\040\103\101\061\026\060\024\006\003
\125\004\013\014\015\145\055\123\172\151\147\156\303\263\040\110
\123\132\061\026\060\024\006\003\125\004\012\023\015\115\151\143
\162\157\163\145\143\040\113\146\164\056\061\021\060\017\006\003
\125\004\007\023\010\102\165\144\141\160\145\163\164\061\013\060
\011\006\003\125\004\006\023\002\110\125\060\201\254\006\003\125
\035\043\004\201\244\060\201\241\200\024\307\240\111\165\026\141
\204\333\061\113\204\322\361\067\100\220\357\116\334\367\241\166
\244\164\060\162\061\013\060\011\006\003\125\004\006\023\002\110
\125\061\021\060\017\006\003\125\004\007\023\010\102\165\144\141
\160\145\163\164\061\026\060\024\006\003\125\004\012\023\015\115
\151\143\162\157\163\145\143\040\114\164\144\056\061\024\060\022
\006\003\125\004\013\023\013\145\055\123\172\151\147\156\157\040
\103\101\061\042\060\040\006\003\125\004\003\023\031\115\151\143
\162\157\163\145\143\040\145\055\123\172\151\147\156\157\040\122
\157\157\164\040\103\101\202\021\000\314\270\347\277\116\051\032
\375\242\334\146\245\034\054\017\021\060\035\006\003\125\035\016
\004\026\004\024\307\240\111\165\026\141\204\333\061\113\204\322
\361\067\100\220\357\116\334\367\060\015\006\011\052\206\110\206
\367\015\001\001\005\005\000\003\202\001\001\000\323\023\234\146
\143\131\056\312\134\160\014\374\203\274\125\261\364\216\007\154
\146\047\316\301\073\040\251\034\273\106\124\160\356\132\314\240
\167\352\150\104\047\353\362\051\335\167\251\325\373\343\324\247
\004\304\225\270\013\341\104\150\140\007\103\060\061\102\141\345
\356\331\345\044\325\033\337\341\112\033\252\237\307\137\370\172
\021\352\023\223\000\312\212\130\261\356\355\016\115\264\327\250
\066\046\174\340\072\301\325\127\202\361\165\266\375\211\137\332
\363\250\070\237\065\006\010\316\042\225\276\315\325\374\276\133
\336\171\153\334\172\251\145\146\276\261\045\132\137\355\176\323
\254\106\155\114\364\062\207\264\040\004\340\154\170\260\167\321
\205\106\113\246\022\267\165\350\112\311\126\154\327\222\253\235
\365\111\070\322\117\123\343\125\220\021\333\230\226\306\111\362
\076\364\237\033\340\367\210\334\045\142\231\104\330\163\277\077
\060\363\014\067\076\324\302\050\200\163\261\001\267\235\132\226
\024\001\113\251\021\235\051\152\056\320\135\201\300\317\262\040
\103\307\003\340\067\116\135\012\334\131\040\045
END
CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE
# Trust for Certificate "Microsec e-Szigno Root CA"
# Issuer: CN=Microsec e-Szigno Root CA,OU=e-Szigno CA,O=Microsec Ltd.,L=Budapest,C=HU
# Serial Number:00:cc:b8:e7:bf:4e:29:1a:fd:a2:dc:66:a5:1c:2c:0f:11
# Subject: CN=Microsec e-Szigno Root CA,OU=e-Szigno CA,O=Microsec Ltd.,L=Budapest,C=HU
# Not Valid Before: Wed Apr 06 12:28:44 2005
# Not Valid After : Thu Apr 06 12:28:44 2017
# Fingerprint (MD5): F0:96:B6:2F:C5:10:D5:67:8E:83:25:32:E8:5E:2E:E5
# Fingerprint (SHA1): 23:88:C9:D3:71:CC:9E:96:3D:FF:7D:3C:A7:CE:FC:D6:25:EC:19:0D
CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST
CKA_TOKEN CK_BBOOL CK_TRUE
CKA_PRIVATE CK_BBOOL CK_FALSE
CKA_MODIFIABLE CK_BBOOL CK_FALSE
CKA_LABEL UTF8 "Microsec e-Szigno Root CA"
CKA_CERT_SHA1_HASH MULTILINE_OCTAL
\043\210\311\323\161\314\236\226\075\377\175\074\247\316\374\326
\045\354\031\015
END
CKA_CERT_MD5_HASH MULTILINE_OCTAL
\360\226\266\057\305\020\325\147\216\203\045\062\350\136\056\345
END
CKA_ISSUER MULTILINE_OCTAL
\060\162\061\013\060\011\006\003\125\004\006\023\002\110\125\061
\021\060\017\006\003\125\004\007\023\010\102\165\144\141\160\145
\163\164\061\026\060\024\006\003\125\004\012\023\015\115\151\143
\162\157\163\145\143\040\114\164\144\056\061\024\060\022\006\003
\125\004\013\023\013\145\055\123\172\151\147\156\157\040\103\101
\061\042\060\040\006\003\125\004\003\023\031\115\151\143\162\157
\163\145\143\040\145\055\123\172\151\147\156\157\040\122\157\157
\164\040\103\101
END
CKA_SERIAL_NUMBER MULTILINE_OCTAL
\002\021\000\314\270\347\277\116\051\032\375\242\334\146\245\034
\054\017\021
END
CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
#
# Certificate "Certigna"
#
@ -10815,138 +10446,6 @@ CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
#
# Certificate "ApplicationCA - Japanese Government"
#
# Issuer: OU=ApplicationCA,O=Japanese Government,C=JP
# Serial Number: 49 (0x31)
# Subject: OU=ApplicationCA,O=Japanese Government,C=JP
# Not Valid Before: Wed Dec 12 15:00:00 2007
# Not Valid After : Tue Dec 12 15:00:00 2017
# Fingerprint (MD5): 7E:23:4E:5B:A7:A5:B4:25:E9:00:07:74:11:62:AE:D6
# Fingerprint (SHA1): 7F:8A:B0:CF:D0:51:87:6A:66:F3:36:0F:47:C8:8D:8C:D3:35:FC:74
CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
CKA_TOKEN CK_BBOOL CK_TRUE
CKA_PRIVATE CK_BBOOL CK_FALSE
CKA_MODIFIABLE CK_BBOOL CK_FALSE
CKA_LABEL UTF8 "ApplicationCA - Japanese Government"
CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509
CKA_SUBJECT MULTILINE_OCTAL
\060\103\061\013\060\011\006\003\125\004\006\023\002\112\120\061
\034\060\032\006\003\125\004\012\023\023\112\141\160\141\156\145
\163\145\040\107\157\166\145\162\156\155\145\156\164\061\026\060
\024\006\003\125\004\013\023\015\101\160\160\154\151\143\141\164
\151\157\156\103\101
END
CKA_ID UTF8 "0"
CKA_ISSUER MULTILINE_OCTAL
\060\103\061\013\060\011\006\003\125\004\006\023\002\112\120\061
\034\060\032\006\003\125\004\012\023\023\112\141\160\141\156\145
\163\145\040\107\157\166\145\162\156\155\145\156\164\061\026\060
\024\006\003\125\004\013\023\015\101\160\160\154\151\143\141\164
\151\157\156\103\101
END
CKA_SERIAL_NUMBER MULTILINE_OCTAL
\002\001\061
END
CKA_VALUE MULTILINE_OCTAL
\060\202\003\240\060\202\002\210\240\003\002\001\002\002\001\061
\060\015\006\011\052\206\110\206\367\015\001\001\005\005\000\060
\103\061\013\060\011\006\003\125\004\006\023\002\112\120\061\034
\060\032\006\003\125\004\012\023\023\112\141\160\141\156\145\163
\145\040\107\157\166\145\162\156\155\145\156\164\061\026\060\024
\006\003\125\004\013\023\015\101\160\160\154\151\143\141\164\151
\157\156\103\101\060\036\027\015\060\067\061\062\061\062\061\065
\060\060\060\060\132\027\015\061\067\061\062\061\062\061\065\060
\060\060\060\132\060\103\061\013\060\011\006\003\125\004\006\023
\002\112\120\061\034\060\032\006\003\125\004\012\023\023\112\141
\160\141\156\145\163\145\040\107\157\166\145\162\156\155\145\156
\164\061\026\060\024\006\003\125\004\013\023\015\101\160\160\154
\151\143\141\164\151\157\156\103\101\060\202\001\042\060\015\006
\011\052\206\110\206\367\015\001\001\001\005\000\003\202\001\017
\000\060\202\001\012\002\202\001\001\000\247\155\340\164\116\207
\217\245\006\336\150\242\333\206\231\113\144\015\161\360\012\005
\233\216\252\341\314\056\322\152\073\301\172\264\227\141\215\212
\276\306\232\234\006\264\206\121\344\067\016\164\170\176\137\212
\177\224\244\327\107\010\375\120\132\126\344\150\254\050\163\240
\173\351\177\030\222\100\117\055\235\365\256\104\110\163\066\006
\236\144\054\073\064\043\333\134\046\344\161\171\217\324\156\171
\042\271\223\301\312\315\301\126\355\210\152\327\240\071\041\004
\127\054\242\365\274\107\101\117\136\064\042\225\265\037\051\155
\136\112\363\115\162\276\101\126\040\207\374\351\120\107\327\060
\024\356\134\214\125\272\131\215\207\374\043\336\223\320\004\214
\375\357\155\275\320\172\311\245\072\152\162\063\306\112\015\005
\027\052\055\173\261\247\330\326\360\276\364\077\352\016\050\155
\101\141\043\166\170\303\270\145\244\363\132\256\314\302\252\331
\347\130\336\266\176\235\205\156\237\052\012\157\237\003\051\060
\227\050\035\274\267\317\124\051\116\121\061\371\047\266\050\046
\376\242\143\346\101\026\360\063\230\107\002\003\001\000\001\243
\201\236\060\201\233\060\035\006\003\125\035\016\004\026\004\024
\124\132\313\046\077\161\314\224\106\015\226\123\352\153\110\320
\223\376\102\165\060\016\006\003\125\035\017\001\001\377\004\004
\003\002\001\006\060\131\006\003\125\035\021\004\122\060\120\244
\116\060\114\061\013\060\011\006\003\125\004\006\023\002\112\120
\061\030\060\026\006\003\125\004\012\014\017\346\227\245\346\234
\254\345\233\275\346\224\277\345\272\234\061\043\060\041\006\003
\125\004\013\014\032\343\202\242\343\203\227\343\203\252\343\202
\261\343\203\274\343\202\267\343\203\247\343\203\263\103\101\060
\017\006\003\125\035\023\001\001\377\004\005\060\003\001\001\377
\060\015\006\011\052\206\110\206\367\015\001\001\005\005\000\003
\202\001\001\000\071\152\104\166\167\070\072\354\243\147\106\017
\371\213\006\250\373\152\220\061\316\176\354\332\321\211\174\172
\353\056\014\275\231\062\347\260\044\326\303\377\365\262\210\011
\207\054\343\124\341\243\246\262\010\013\300\205\250\310\322\234
\161\366\035\237\140\374\070\063\023\341\236\334\013\137\332\026
\120\051\173\057\160\221\017\231\272\064\064\215\225\164\305\176
\170\251\146\135\275\312\041\167\102\020\254\146\046\075\336\221
\253\375\025\360\157\355\154\137\020\370\363\026\366\003\212\217
\247\022\021\014\313\375\077\171\301\234\375\142\356\243\317\124
\014\321\053\137\027\076\343\076\277\300\053\076\011\233\376\210
\246\176\264\222\027\374\043\224\201\275\156\247\305\214\302\353
\021\105\333\370\101\311\226\166\352\160\137\171\022\153\344\243
\007\132\005\357\047\111\317\041\237\212\114\011\160\146\251\046
\301\053\021\116\063\322\016\374\326\154\322\016\062\144\150\377
\255\005\170\137\003\035\250\343\220\254\044\340\017\100\247\113
\256\213\050\267\202\312\030\007\346\267\133\164\351\040\031\177
\262\033\211\124
END
CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE
# Trust for Certificate "ApplicationCA - Japanese Government"
# Issuer: OU=ApplicationCA,O=Japanese Government,C=JP
# Serial Number: 49 (0x31)
# Subject: OU=ApplicationCA,O=Japanese Government,C=JP
# Not Valid Before: Wed Dec 12 15:00:00 2007
# Not Valid After : Tue Dec 12 15:00:00 2017
# Fingerprint (MD5): 7E:23:4E:5B:A7:A5:B4:25:E9:00:07:74:11:62:AE:D6
# Fingerprint (SHA1): 7F:8A:B0:CF:D0:51:87:6A:66:F3:36:0F:47:C8:8D:8C:D3:35:FC:74
CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST
CKA_TOKEN CK_BBOOL CK_TRUE
CKA_PRIVATE CK_BBOOL CK_FALSE
CKA_MODIFIABLE CK_BBOOL CK_FALSE
CKA_LABEL UTF8 "ApplicationCA - Japanese Government"
CKA_CERT_SHA1_HASH MULTILINE_OCTAL
\177\212\260\317\320\121\207\152\146\363\066\017\107\310\215\214
\323\065\374\164
END
CKA_CERT_MD5_HASH MULTILINE_OCTAL
\176\043\116\133\247\245\264\045\351\000\007\164\021\142\256\326
END
CKA_ISSUER MULTILINE_OCTAL
\060\103\061\013\060\011\006\003\125\004\006\023\002\112\120\061
\034\060\032\006\003\125\004\012\023\023\112\141\160\141\156\145
\163\145\040\107\157\166\145\162\156\155\145\156\164\061\026\060
\024\006\003\125\004\013\023\015\101\160\160\154\151\143\141\164
\151\157\156\103\101
END
CKA_SERIAL_NUMBER MULTILINE_OCTAL
\002\001\061
END
CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
#
# Certificate "GeoTrust Primary Certification Authority - G3"
#
@ -26424,167 +25923,6 @@ CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
#
# Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6"
#
# Issuer: CN=T..RKTRUST Elektronik Sertifika Hizmet Sa..lay..c..s.. H6,O=T..RKTRUST Bilgi ..leti..im ve Bili..im G..venli..i Hizmetleri A....,L=Ankara,C=TR
# Serial Number:7d:a1:f2:65:ec:8a
# Subject: CN=T..RKTRUST Elektronik Sertifika Hizmet Sa..lay..c..s.. H6,O=T..RKTRUST Bilgi ..leti..im ve Bili..im G..venli..i Hizmetleri A....,L=Ankara,C=TR
# Not Valid Before: Wed Dec 18 09:04:10 2013
# Not Valid After : Sat Dec 16 09:04:10 2023
# Fingerprint (SHA-256): 8D:E7:86:55:E1:BE:7F:78:47:80:0B:93:F6:94:D2:1D:36:8C:C0:6E:03:3E:7F:AB:04:BB:5E:B9:9D:A6:B7:00
# Fingerprint (SHA1): 8A:5C:8C:EE:A5:03:E6:05:56:BA:D8:1B:D4:F6:C9:B0:ED:E5:2F:E0
CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
CKA_TOKEN CK_BBOOL CK_TRUE
CKA_PRIVATE CK_BBOOL CK_FALSE
CKA_MODIFIABLE CK_BBOOL CK_FALSE
CKA_LABEL UTF8 "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6"
CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509
CKA_SUBJECT MULTILINE_OCTAL
\060\201\261\061\013\060\011\006\003\125\004\006\023\002\124\122
\061\017\060\015\006\003\125\004\007\014\006\101\156\153\141\162
\141\061\115\060\113\006\003\125\004\012\014\104\124\303\234\122
\113\124\122\125\123\124\040\102\151\154\147\151\040\304\260\154
\145\164\151\305\237\151\155\040\166\145\040\102\151\154\151\305
\237\151\155\040\107\303\274\166\145\156\154\151\304\237\151\040
\110\151\172\155\145\164\154\145\162\151\040\101\056\305\236\056
\061\102\060\100\006\003\125\004\003\014\071\124\303\234\122\113
\124\122\125\123\124\040\105\154\145\153\164\162\157\156\151\153
\040\123\145\162\164\151\146\151\153\141\040\110\151\172\155\145
\164\040\123\141\304\237\154\141\171\304\261\143\304\261\163\304
\261\040\110\066
END
CKA_ID UTF8 "0"
CKA_ISSUER MULTILINE_OCTAL
\060\201\261\061\013\060\011\006\003\125\004\006\023\002\124\122
\061\017\060\015\006\003\125\004\007\014\006\101\156\153\141\162
\141\061\115\060\113\006\003\125\004\012\014\104\124\303\234\122
\113\124\122\125\123\124\040\102\151\154\147\151\040\304\260\154
\145\164\151\305\237\151\155\040\166\145\040\102\151\154\151\305
\237\151\155\040\107\303\274\166\145\156\154\151\304\237\151\040
\110\151\172\155\145\164\154\145\162\151\040\101\056\305\236\056
\061\102\060\100\006\003\125\004\003\014\071\124\303\234\122\113
\124\122\125\123\124\040\105\154\145\153\164\162\157\156\151\153
\040\123\145\162\164\151\146\151\153\141\040\110\151\172\155\145
\164\040\123\141\304\237\154\141\171\304\261\143\304\261\163\304
\261\040\110\066
END
CKA_SERIAL_NUMBER MULTILINE_OCTAL
\002\006\175\241\362\145\354\212
END
CKA_VALUE MULTILINE_OCTAL
\060\202\004\046\060\202\003\016\240\003\002\001\002\002\006\175
\241\362\145\354\212\060\015\006\011\052\206\110\206\367\015\001
\001\013\005\000\060\201\261\061\013\060\011\006\003\125\004\006
\023\002\124\122\061\017\060\015\006\003\125\004\007\014\006\101
\156\153\141\162\141\061\115\060\113\006\003\125\004\012\014\104
\124\303\234\122\113\124\122\125\123\124\040\102\151\154\147\151
\040\304\260\154\145\164\151\305\237\151\155\040\166\145\040\102
\151\154\151\305\237\151\155\040\107\303\274\166\145\156\154\151
\304\237\151\040\110\151\172\155\145\164\154\145\162\151\040\101
\056\305\236\056\061\102\060\100\006\003\125\004\003\014\071\124
\303\234\122\113\124\122\125\123\124\040\105\154\145\153\164\162
\157\156\151\153\040\123\145\162\164\151\146\151\153\141\040\110
\151\172\155\145\164\040\123\141\304\237\154\141\171\304\261\143
\304\261\163\304\261\040\110\066\060\036\027\015\061\063\061\062
\061\070\060\071\060\064\061\060\132\027\015\062\063\061\062\061
\066\060\071\060\064\061\060\132\060\201\261\061\013\060\011\006
\003\125\004\006\023\002\124\122\061\017\060\015\006\003\125\004
\007\014\006\101\156\153\141\162\141\061\115\060\113\006\003\125
\004\012\014\104\124\303\234\122\113\124\122\125\123\124\040\102
\151\154\147\151\040\304\260\154\145\164\151\305\237\151\155\040
\166\145\040\102\151\154\151\305\237\151\155\040\107\303\274\166
\145\156\154\151\304\237\151\040\110\151\172\155\145\164\154\145
\162\151\040\101\056\305\236\056\061\102\060\100\006\003\125\004
\003\014\071\124\303\234\122\113\124\122\125\123\124\040\105\154
\145\153\164\162\157\156\151\153\040\123\145\162\164\151\146\151
\153\141\040\110\151\172\155\145\164\040\123\141\304\237\154\141
\171\304\261\143\304\261\163\304\261\040\110\066\060\202\001\042
\060\015\006\011\052\206\110\206\367\015\001\001\001\005\000\003
\202\001\017\000\060\202\001\012\002\202\001\001\000\235\260\150
\326\350\275\024\226\243\000\012\232\361\364\307\314\221\115\161
\170\167\271\367\041\046\025\163\121\026\224\011\107\005\342\063
\365\150\232\065\377\334\113\057\062\307\260\355\342\202\345\157
\332\332\352\254\306\006\317\045\015\101\201\366\301\070\042\275
\371\261\245\246\263\001\274\077\120\027\053\366\351\146\125\324
\063\263\134\370\103\040\170\223\125\026\160\031\062\346\211\327
\144\353\275\110\120\375\366\320\101\003\302\164\267\375\366\200
\317\133\305\253\244\326\225\022\233\347\227\023\062\003\351\324
\253\103\133\026\355\063\042\144\051\266\322\223\255\057\154\330
\075\266\366\035\016\064\356\322\175\251\125\017\040\364\375\051
\273\221\133\034\175\306\102\070\155\102\050\155\324\001\373\315
\210\227\111\176\270\363\203\370\265\230\057\263\047\013\110\136
\126\347\116\243\063\263\104\326\245\362\030\224\355\034\036\251
\225\134\142\112\370\015\147\121\251\257\041\325\370\062\235\171
\272\032\137\345\004\125\115\023\106\377\362\317\164\307\032\143
\155\303\037\027\022\303\036\020\076\140\010\263\061\002\003\001
\000\001\243\102\060\100\060\035\006\003\125\035\016\004\026\004
\024\335\125\027\023\366\254\350\110\041\312\357\265\257\321\000
\062\355\236\214\265\060\016\006\003\125\035\017\001\001\377\004
\004\003\002\001\006\060\017\006\003\125\035\023\001\001\377\004
\005\060\003\001\001\377\060\015\006\011\052\206\110\206\367\015
\001\001\013\005\000\003\202\001\001\000\157\130\015\227\103\252
\026\124\076\277\251\337\222\105\077\205\013\273\126\323\014\122
\314\310\277\166\147\136\346\252\263\247\357\271\254\264\020\024
\015\164\176\075\155\255\321\175\320\232\251\245\312\030\073\002
\100\056\052\234\120\024\213\376\127\176\127\134\021\011\113\066
\105\122\367\075\254\024\375\104\337\213\227\043\324\303\301\356
\324\123\225\376\054\112\376\015\160\252\273\213\057\055\313\062
\243\202\362\124\337\330\362\335\327\110\162\356\112\243\051\226
\303\104\316\156\265\222\207\166\244\273\364\222\154\316\054\024
\011\146\216\215\255\026\265\307\033\011\141\073\343\040\242\003
\200\216\255\176\121\000\116\307\226\206\373\103\230\167\175\050
\307\217\330\052\156\347\204\157\227\101\051\000\026\136\115\342
\023\352\131\300\143\147\072\104\373\230\374\004\323\060\162\246
\366\207\011\127\255\166\246\035\143\232\375\327\145\310\170\203
\053\165\073\245\133\270\015\135\177\276\043\256\126\125\224\130
\357\037\201\214\052\262\315\346\233\143\236\030\274\345\153\006
\264\013\230\113\050\136\257\210\130\313
END
CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE
# Trust for "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6"
# Issuer: CN=T..RKTRUST Elektronik Sertifika Hizmet Sa..lay..c..s.. H6,O=T..RKTRUST Bilgi ..leti..im ve Bili..im G..venli..i Hizmetleri A....,L=Ankara,C=TR
# Serial Number:7d:a1:f2:65:ec:8a
# Subject: CN=T..RKTRUST Elektronik Sertifika Hizmet Sa..lay..c..s.. H6,O=T..RKTRUST Bilgi ..leti..im ve Bili..im G..venli..i Hizmetleri A....,L=Ankara,C=TR
# Not Valid Before: Wed Dec 18 09:04:10 2013
# Not Valid After : Sat Dec 16 09:04:10 2023
# Fingerprint (SHA-256): 8D:E7:86:55:E1:BE:7F:78:47:80:0B:93:F6:94:D2:1D:36:8C:C0:6E:03:3E:7F:AB:04:BB:5E:B9:9D:A6:B7:00
# Fingerprint (SHA1): 8A:5C:8C:EE:A5:03:E6:05:56:BA:D8:1B:D4:F6:C9:B0:ED:E5:2F:E0
CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST
CKA_TOKEN CK_BBOOL CK_TRUE
CKA_PRIVATE CK_BBOOL CK_FALSE
CKA_MODIFIABLE CK_BBOOL CK_FALSE
CKA_LABEL UTF8 "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6"
CKA_CERT_SHA1_HASH MULTILINE_OCTAL
\212\134\214\356\245\003\346\005\126\272\330\033\324\366\311\260
\355\345\057\340
END
CKA_CERT_MD5_HASH MULTILINE_OCTAL
\370\305\356\052\153\276\225\215\010\367\045\112\352\161\076\106
END
CKA_ISSUER MULTILINE_OCTAL
\060\201\261\061\013\060\011\006\003\125\004\006\023\002\124\122
\061\017\060\015\006\003\125\004\007\014\006\101\156\153\141\162
\141\061\115\060\113\006\003\125\004\012\014\104\124\303\234\122
\113\124\122\125\123\124\040\102\151\154\147\151\040\304\260\154
\145\164\151\305\237\151\155\040\166\145\040\102\151\154\151\305
\237\151\155\040\107\303\274\166\145\156\154\151\304\237\151\040
\110\151\172\155\145\164\154\145\162\151\040\101\056\305\236\056
\061\102\060\100\006\003\125\004\003\014\071\124\303\234\122\113
\124\122\125\123\124\040\105\154\145\153\164\162\157\156\151\153
\040\123\145\162\164\151\146\151\153\141\040\110\151\172\155\145
\164\040\123\141\304\237\154\141\171\304\261\143\304\261\163\304
\261\040\110\066
END
CKA_SERIAL_NUMBER MULTILINE_OCTAL
\002\006\175\241\362\145\354\212
END
CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
#
# Certificate "Certinomis - Root CA"
#
@ -30027,3 +29365,313 @@ CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
#
# Certificate "D-TRUST Root CA 3 2013"
#
# Issuer: CN=D-TRUST Root CA 3 2013,O=D-Trust GmbH,C=DE
# Serial Number: 1039788 (0xfddac)
# Subject: CN=D-TRUST Root CA 3 2013,O=D-Trust GmbH,C=DE
# Not Valid Before: Fri Sep 20 08:25:51 2013
# Not Valid After : Wed Sep 20 08:25:51 2028
# Fingerprint (SHA-256): A1:A8:6D:04:12:1E:B8:7F:02:7C:66:F5:33:03:C2:8E:57:39:F9:43:FC:84:B3:8A:D6:AF:00:90:35:DD:94:57
# Fingerprint (SHA1): 6C:7C:CC:E7:D4:AE:51:5F:99:08:CD:3F:F6:E8:C3:78:DF:6F:EF:97
CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
CKA_TOKEN CK_BBOOL CK_TRUE
CKA_PRIVATE CK_BBOOL CK_FALSE
CKA_MODIFIABLE CK_BBOOL CK_FALSE
CKA_LABEL UTF8 "D-TRUST Root CA 3 2013"
CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509
CKA_SUBJECT MULTILINE_OCTAL
\060\105\061\013\060\011\006\003\125\004\006\023\002\104\105\061
\025\060\023\006\003\125\004\012\014\014\104\055\124\162\165\163
\164\040\107\155\142\110\061\037\060\035\006\003\125\004\003\014
\026\104\055\124\122\125\123\124\040\122\157\157\164\040\103\101
\040\063\040\062\060\061\063
END
CKA_ID UTF8 "0"
CKA_ISSUER MULTILINE_OCTAL
\060\105\061\013\060\011\006\003\125\004\006\023\002\104\105\061
\025\060\023\006\003\125\004\012\014\014\104\055\124\162\165\163
\164\040\107\155\142\110\061\037\060\035\006\003\125\004\003\014
\026\104\055\124\122\125\123\124\040\122\157\157\164\040\103\101
\040\063\040\062\060\061\063
END
CKA_SERIAL_NUMBER MULTILINE_OCTAL
\002\003\017\335\254
END
CKA_VALUE MULTILINE_OCTAL
\060\202\004\016\060\202\002\366\240\003\002\001\002\002\003\017
\335\254\060\015\006\011\052\206\110\206\367\015\001\001\013\005
\000\060\105\061\013\060\011\006\003\125\004\006\023\002\104\105
\061\025\060\023\006\003\125\004\012\014\014\104\055\124\162\165
\163\164\040\107\155\142\110\061\037\060\035\006\003\125\004\003
\014\026\104\055\124\122\125\123\124\040\122\157\157\164\040\103
\101\040\063\040\062\060\061\063\060\036\027\015\061\063\060\071
\062\060\060\070\062\065\065\061\132\027\015\062\070\060\071\062
\060\060\070\062\065\065\061\132\060\105\061\013\060\011\006\003
\125\004\006\023\002\104\105\061\025\060\023\006\003\125\004\012
\014\014\104\055\124\162\165\163\164\040\107\155\142\110\061\037
\060\035\006\003\125\004\003\014\026\104\055\124\122\125\123\124
\040\122\157\157\164\040\103\101\040\063\040\062\060\061\063\060
\202\001\042\060\015\006\011\052\206\110\206\367\015\001\001\001
\005\000\003\202\001\017\000\060\202\001\012\002\202\001\001\000
\304\173\102\222\202\037\354\355\124\230\216\022\300\312\011\337
\223\156\072\223\134\033\344\020\167\236\116\151\210\154\366\341
\151\362\366\233\242\141\261\275\007\040\164\230\145\361\214\046
\010\315\250\065\312\200\066\321\143\155\350\104\172\202\303\154
\136\336\273\350\066\322\304\150\066\214\237\062\275\204\042\340
\334\302\356\020\106\071\155\257\223\071\256\207\346\303\274\011
\311\054\153\147\133\331\233\166\165\114\013\340\273\305\327\274
\076\171\362\137\276\321\220\127\371\256\366\146\137\061\277\323
\155\217\247\272\112\363\043\145\273\267\357\243\045\327\012\352
\130\266\357\210\372\372\171\262\122\130\325\360\254\214\241\121
\164\051\225\252\121\073\220\062\003\237\034\162\164\220\336\075
\355\141\322\345\343\375\144\107\345\271\267\112\251\367\037\256
\226\206\004\254\057\343\244\201\167\267\132\026\377\330\017\077
\366\267\170\314\244\257\372\133\074\022\133\250\122\211\162\357
\210\363\325\104\201\206\225\043\237\173\335\274\331\064\357\174
\224\074\252\300\101\302\343\235\120\032\300\344\031\042\374\263
\002\003\001\000\001\243\202\001\005\060\202\001\001\060\017\006
\003\125\035\023\001\001\377\004\005\060\003\001\001\377\060\035
\006\003\125\035\016\004\026\004\024\077\220\310\175\307\025\157
\363\044\217\251\303\057\113\242\017\041\262\057\347\060\016\006
\003\125\035\017\001\001\377\004\004\003\002\001\006\060\201\276
\006\003\125\035\037\004\201\266\060\201\263\060\164\240\162\240
\160\206\156\154\144\141\160\072\057\057\144\151\162\145\143\164
\157\162\171\056\144\055\164\162\165\163\164\056\156\145\164\057
\103\116\075\104\055\124\122\125\123\124\045\062\060\122\157\157
\164\045\062\060\103\101\045\062\060\063\045\062\060\062\060\061
\063\054\117\075\104\055\124\162\165\163\164\045\062\060\107\155
\142\110\054\103\075\104\105\077\143\145\162\164\151\146\151\143
\141\164\145\162\145\166\157\143\141\164\151\157\156\154\151\163
\164\060\073\240\071\240\067\206\065\150\164\164\160\072\057\057
\143\162\154\056\144\055\164\162\165\163\164\056\156\145\164\057
\143\162\154\057\144\055\164\162\165\163\164\137\162\157\157\164
\137\143\141\137\063\137\062\060\061\063\056\143\162\154\060\015
\006\011\052\206\110\206\367\015\001\001\013\005\000\003\202\001
\001\000\016\131\016\130\344\164\110\043\104\317\064\041\265\234
\024\032\255\232\113\267\263\210\155\134\251\027\160\360\052\237
\215\173\371\173\205\372\307\071\350\020\010\260\065\053\137\317
\002\322\323\234\310\013\036\356\005\124\256\067\223\004\011\175
\154\217\302\164\274\370\034\224\276\061\001\100\055\363\044\040
\267\204\125\054\134\310\365\164\112\020\031\213\243\307\355\065
\326\011\110\323\016\300\272\071\250\260\106\002\260\333\306\210
\131\302\276\374\173\261\053\317\176\142\207\125\226\314\001\157
\233\147\041\225\065\213\370\020\374\161\033\267\113\067\151\246
\073\326\354\213\356\301\260\363\045\311\217\222\175\241\352\303
\312\104\277\046\245\164\222\234\343\164\353\235\164\331\313\115
\207\330\374\264\151\154\213\240\103\007\140\170\227\351\331\223
\174\302\106\274\233\067\122\243\355\212\074\023\251\173\123\113
\111\232\021\005\054\013\156\126\254\037\056\202\154\340\151\147
\265\016\155\055\331\344\300\025\361\077\372\030\162\341\025\155
\047\133\055\060\050\053\237\110\232\144\053\231\357\362\165\111
\137\134
END
CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE
# Trust for "D-TRUST Root CA 3 2013"
# Issuer: CN=D-TRUST Root CA 3 2013,O=D-Trust GmbH,C=DE
# Serial Number: 1039788 (0xfddac)
# Subject: CN=D-TRUST Root CA 3 2013,O=D-Trust GmbH,C=DE
# Not Valid Before: Fri Sep 20 08:25:51 2013
# Not Valid After : Wed Sep 20 08:25:51 2028
# Fingerprint (SHA-256): A1:A8:6D:04:12:1E:B8:7F:02:7C:66:F5:33:03:C2:8E:57:39:F9:43:FC:84:B3:8A:D6:AF:00:90:35:DD:94:57
# Fingerprint (SHA1): 6C:7C:CC:E7:D4:AE:51:5F:99:08:CD:3F:F6:E8:C3:78:DF:6F:EF:97
CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST
CKA_TOKEN CK_BBOOL CK_TRUE
CKA_PRIVATE CK_BBOOL CK_FALSE
CKA_MODIFIABLE CK_BBOOL CK_FALSE
CKA_LABEL UTF8 "D-TRUST Root CA 3 2013"
CKA_CERT_SHA1_HASH MULTILINE_OCTAL
\154\174\314\347\324\256\121\137\231\010\315\077\366\350\303\170
\337\157\357\227
END
CKA_CERT_MD5_HASH MULTILINE_OCTAL
\267\042\146\230\176\326\003\340\301\161\346\165\315\126\105\277
END
CKA_ISSUER MULTILINE_OCTAL
\060\105\061\013\060\011\006\003\125\004\006\023\002\104\105\061
\025\060\023\006\003\125\004\012\014\014\104\055\124\162\165\163
\164\040\107\155\142\110\061\037\060\035\006\003\125\004\003\014
\026\104\055\124\122\125\123\124\040\122\157\157\164\040\103\101
\040\063\040\062\060\061\063
END
CKA_SERIAL_NUMBER MULTILINE_OCTAL
\002\003\017\335\254
END
CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
#
# Certificate "TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1"
#
# Issuer: CN=TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1,OU=Kamu Sertifikasyon Merkezi - Kamu SM,O=Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK,L=Gebze - Kocaeli,C=TR
# Serial Number: 1 (0x1)
# Subject: CN=TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1,OU=Kamu Sertifikasyon Merkezi - Kamu SM,O=Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK,L=Gebze - Kocaeli,C=TR
# Not Valid Before: Mon Nov 25 08:25:55 2013
# Not Valid After : Sun Oct 25 08:25:55 2043
# Fingerprint (SHA-256): 46:ED:C3:68:90:46:D5:3A:45:3F:B3:10:4A:B8:0D:CA:EC:65:8B:26:60:EA:16:29:DD:7E:86:79:90:64:87:16
# Fingerprint (SHA1): 31:43:64:9B:EC:CE:27:EC:ED:3A:3F:0B:8F:0D:E4:E8:91:DD:EE:CA
CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
CKA_TOKEN CK_BBOOL CK_TRUE
CKA_PRIVATE CK_BBOOL CK_FALSE
CKA_MODIFIABLE CK_BBOOL CK_FALSE
CKA_LABEL UTF8 "TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1"
CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509
CKA_SUBJECT MULTILINE_OCTAL
\060\201\322\061\013\060\011\006\003\125\004\006\023\002\124\122
\061\030\060\026\006\003\125\004\007\023\017\107\145\142\172\145
\040\055\040\113\157\143\141\145\154\151\061\102\060\100\006\003
\125\004\012\023\071\124\165\162\153\151\171\145\040\102\151\154
\151\155\163\145\154\040\166\145\040\124\145\153\156\157\154\157
\152\151\153\040\101\162\141\163\164\151\162\155\141\040\113\165
\162\165\155\165\040\055\040\124\125\102\111\124\101\113\061\055
\060\053\006\003\125\004\013\023\044\113\141\155\165\040\123\145
\162\164\151\146\151\153\141\163\171\157\156\040\115\145\162\153
\145\172\151\040\055\040\113\141\155\165\040\123\115\061\066\060
\064\006\003\125\004\003\023\055\124\125\102\111\124\101\113\040
\113\141\155\165\040\123\115\040\123\123\114\040\113\157\153\040
\123\145\162\164\151\146\151\153\141\163\151\040\055\040\123\165
\162\165\155\040\061
END
CKA_ID UTF8 "0"
CKA_ISSUER MULTILINE_OCTAL
\060\201\322\061\013\060\011\006\003\125\004\006\023\002\124\122
\061\030\060\026\006\003\125\004\007\023\017\107\145\142\172\145
\040\055\040\113\157\143\141\145\154\151\061\102\060\100\006\003
\125\004\012\023\071\124\165\162\153\151\171\145\040\102\151\154
\151\155\163\145\154\040\166\145\040\124\145\153\156\157\154\157
\152\151\153\040\101\162\141\163\164\151\162\155\141\040\113\165
\162\165\155\165\040\055\040\124\125\102\111\124\101\113\061\055
\060\053\006\003\125\004\013\023\044\113\141\155\165\040\123\145
\162\164\151\146\151\153\141\163\171\157\156\040\115\145\162\153
\145\172\151\040\055\040\113\141\155\165\040\123\115\061\066\060
\064\006\003\125\004\003\023\055\124\125\102\111\124\101\113\040
\113\141\155\165\040\123\115\040\123\123\114\040\113\157\153\040
\123\145\162\164\151\146\151\153\141\163\151\040\055\040\123\165
\162\165\155\040\061
END
CKA_SERIAL_NUMBER MULTILINE_OCTAL
\002\001\001
END
CKA_VALUE MULTILINE_OCTAL
\060\202\004\143\060\202\003\113\240\003\002\001\002\002\001\001
\060\015\006\011\052\206\110\206\367\015\001\001\013\005\000\060
\201\322\061\013\060\011\006\003\125\004\006\023\002\124\122\061
\030\060\026\006\003\125\004\007\023\017\107\145\142\172\145\040
\055\040\113\157\143\141\145\154\151\061\102\060\100\006\003\125
\004\012\023\071\124\165\162\153\151\171\145\040\102\151\154\151
\155\163\145\154\040\166\145\040\124\145\153\156\157\154\157\152
\151\153\040\101\162\141\163\164\151\162\155\141\040\113\165\162
\165\155\165\040\055\040\124\125\102\111\124\101\113\061\055\060
\053\006\003\125\004\013\023\044\113\141\155\165\040\123\145\162
\164\151\146\151\153\141\163\171\157\156\040\115\145\162\153\145
\172\151\040\055\040\113\141\155\165\040\123\115\061\066\060\064
\006\003\125\004\003\023\055\124\125\102\111\124\101\113\040\113
\141\155\165\040\123\115\040\123\123\114\040\113\157\153\040\123
\145\162\164\151\146\151\153\141\163\151\040\055\040\123\165\162
\165\155\040\061\060\036\027\015\061\063\061\061\062\065\060\070
\062\065\065\065\132\027\015\064\063\061\060\062\065\060\070\062
\065\065\065\132\060\201\322\061\013\060\011\006\003\125\004\006
\023\002\124\122\061\030\060\026\006\003\125\004\007\023\017\107
\145\142\172\145\040\055\040\113\157\143\141\145\154\151\061\102
\060\100\006\003\125\004\012\023\071\124\165\162\153\151\171\145
\040\102\151\154\151\155\163\145\154\040\166\145\040\124\145\153
\156\157\154\157\152\151\153\040\101\162\141\163\164\151\162\155
\141\040\113\165\162\165\155\165\040\055\040\124\125\102\111\124
\101\113\061\055\060\053\006\003\125\004\013\023\044\113\141\155
\165\040\123\145\162\164\151\146\151\153\141\163\171\157\156\040
\115\145\162\153\145\172\151\040\055\040\113\141\155\165\040\123
\115\061\066\060\064\006\003\125\004\003\023\055\124\125\102\111
\124\101\113\040\113\141\155\165\040\123\115\040\123\123\114\040
\113\157\153\040\123\145\162\164\151\146\151\153\141\163\151\040
\055\040\123\165\162\165\155\040\061\060\202\001\042\060\015\006
\011\052\206\110\206\367\015\001\001\001\005\000\003\202\001\017
\000\060\202\001\012\002\202\001\001\000\257\165\060\063\252\273
\153\323\231\054\022\067\204\331\215\173\227\200\323\156\347\377
\233\120\225\076\220\225\126\102\327\031\174\046\204\215\222\372
\001\035\072\017\342\144\070\267\214\274\350\210\371\213\044\253
\056\243\365\067\344\100\216\030\045\171\203\165\037\073\377\154
\250\305\306\126\370\264\355\212\104\243\253\154\114\374\035\320
\334\357\150\275\317\344\252\316\360\125\367\242\064\324\203\153
\067\174\034\302\376\265\003\354\127\316\274\264\265\305\355\000
\017\123\067\052\115\364\117\014\203\373\206\317\313\376\214\116
\275\207\371\247\213\041\127\234\172\337\003\147\211\054\235\227
\141\247\020\270\125\220\177\016\055\047\070\164\337\347\375\332
\116\022\343\115\025\042\002\310\340\340\374\017\255\212\327\311
\124\120\314\073\017\312\026\200\204\320\121\126\303\216\126\177
\211\042\063\057\346\205\012\275\245\250\033\066\336\323\334\054
\155\073\307\023\275\131\043\054\346\345\244\367\330\013\355\352
\220\100\104\250\225\273\223\325\320\200\064\266\106\170\016\037
\000\223\106\341\356\351\371\354\117\027\002\003\001\000\001\243
\102\060\100\060\035\006\003\125\035\016\004\026\004\024\145\077
\307\212\206\306\074\335\074\124\134\065\370\072\355\122\014\107
\127\310\060\016\006\003\125\035\017\001\001\377\004\004\003\002
\001\006\060\017\006\003\125\035\023\001\001\377\004\005\060\003
\001\001\377\060\015\006\011\052\206\110\206\367\015\001\001\013
\005\000\003\202\001\001\000\052\077\341\361\062\216\256\341\230
\134\113\136\317\153\036\152\011\322\042\251\022\307\136\127\175
\163\126\144\200\204\172\223\344\011\271\020\315\237\052\047\341
\000\167\276\110\310\065\250\201\237\344\270\054\311\177\016\260
\322\113\067\135\352\271\325\013\136\064\275\364\163\051\303\355
\046\025\234\176\010\123\212\130\215\320\113\050\337\301\263\337
\040\363\371\343\343\072\337\314\234\224\330\116\117\303\153\027
\267\367\162\350\255\146\063\265\045\123\253\340\370\114\251\235
\375\362\015\272\256\271\331\252\306\153\371\223\273\256\253\270
\227\074\003\032\272\103\306\226\271\105\162\070\263\247\241\226
\075\221\173\176\300\041\123\114\207\355\362\013\124\225\121\223
\325\042\245\015\212\361\223\016\076\124\016\260\330\311\116\334
\362\061\062\126\352\144\371\352\265\235\026\146\102\162\363\177
\323\261\061\103\374\244\216\027\361\155\043\253\224\146\370\255
\373\017\010\156\046\055\177\027\007\011\262\214\373\120\300\237
\226\215\317\266\375\000\235\132\024\232\277\002\104\365\301\302
\237\042\136\242\017\241\343
END
CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE
# Trust for "TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1"
# Issuer: CN=TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1,OU=Kamu Sertifikasyon Merkezi - Kamu SM,O=Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK,L=Gebze - Kocaeli,C=TR
# Serial Number: 1 (0x1)
# Subject: CN=TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1,OU=Kamu Sertifikasyon Merkezi - Kamu SM,O=Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK,L=Gebze - Kocaeli,C=TR
# Not Valid Before: Mon Nov 25 08:25:55 2013
# Not Valid After : Sun Oct 25 08:25:55 2043
# Fingerprint (SHA-256): 46:ED:C3:68:90:46:D5:3A:45:3F:B3:10:4A:B8:0D:CA:EC:65:8B:26:60:EA:16:29:DD:7E:86:79:90:64:87:16
# Fingerprint (SHA1): 31:43:64:9B:EC:CE:27:EC:ED:3A:3F:0B:8F:0D:E4:E8:91:DD:EE:CA
CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST
CKA_TOKEN CK_BBOOL CK_TRUE
CKA_PRIVATE CK_BBOOL CK_FALSE
CKA_MODIFIABLE CK_BBOOL CK_FALSE
CKA_LABEL UTF8 "TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1"
CKA_CERT_SHA1_HASH MULTILINE_OCTAL
\061\103\144\233\354\316\047\354\355\072\077\013\217\015\344\350
\221\335\356\312
END
CKA_CERT_MD5_HASH MULTILINE_OCTAL
\334\000\201\334\151\057\076\057\260\073\366\075\132\221\216\111
END
CKA_ISSUER MULTILINE_OCTAL
\060\201\322\061\013\060\011\006\003\125\004\006\023\002\124\122
\061\030\060\026\006\003\125\004\007\023\017\107\145\142\172\145
\040\055\040\113\157\143\141\145\154\151\061\102\060\100\006\003
\125\004\012\023\071\124\165\162\153\151\171\145\040\102\151\154
\151\155\163\145\154\040\166\145\040\124\145\153\156\157\154\157
\152\151\153\040\101\162\141\163\164\151\162\155\141\040\113\165
\162\165\155\165\040\055\040\124\125\102\111\124\101\113\061\055
\060\053\006\003\125\004\013\023\044\113\141\155\165\040\123\145
\162\164\151\146\151\153\141\163\171\157\156\040\115\145\162\153
\145\172\151\040\055\040\113\141\155\165\040\123\115\061\066\060
\064\006\003\125\004\003\023\055\124\125\102\111\124\101\113\040
\113\141\155\165\040\123\115\040\123\123\114\040\113\157\153\040
\123\145\162\164\151\146\151\153\141\163\151\040\055\040\123\165
\162\165\155\040\061
END
CKA_SERIAL_NUMBER MULTILINE_OCTAL
\002\001\001
END
CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE

39
security/nss/lib/ckfw/builtins/nssckbi.h
View File

@ -22,31 +22,32 @@
* to the list of trusted certificates.
*
* The NSS_BUILTINS_LIBRARY_VERSION_MINOR macro needs to be bumped
* for each NSS minor release AND whenever we change the list of
* trusted certificates. 10 minor versions are allocated for each
* NSS 3.x branch as follows, allowing us to change the list of
* trusted certificates up to 9 times on each branch.
* - NSS 3.5 branch: 3-9
* - NSS 3.6 branch: 10-19
* - NSS 3.7 branch: 20-29
* - NSS 3.8 branch: 30-39
* - NSS 3.9 branch: 40-49
* - NSS 3.10 branch: 50-59
* - NSS 3.11 branch: 60-69
* ...
* - NSS 3.12 branch: 70-89
* - NSS 3.13 branch: 90-99
* - NSS 3.14 branch: 100-109
* ...
* - NSS 3.29 branch: 250-255
* whenever we change the list of trusted certificates.
*
* Please use the following rules when increasing the version number:
*
* - starting with version 2.14, NSS_BUILTINS_LIBRARY_VERSION_MINOR
* must always be an EVEN number (e.g. 16, 18, 20 etc.)
*
* - whenever possible, if older branches require a modification to the
* list, these changes should be made on the main line of development (trunk),
* and the older branches should update to the most recent list.
*
* - ODD minor version numbers are reserved to indicate a snapshot that has
* deviated from the main line of development, e.g. if it was necessary
* to modify the list on a stable branch.
* Once the version has been changed to an odd number (e.g. 2.13) on a branch,
* it should remain unchanged on that branch, even if further changes are
* made on that branch.
*
* NSS_BUILTINS_LIBRARY_VERSION_MINOR is a CK_BYTE. It's not clear
* whether we may use its full range (0-255) or only 0-99 because
* of the comment in the CK_VERSION type definition.
* It's recommend to switch back to 0 after having reached version 98/99.
*/
#define NSS_BUILTINS_LIBRARY_VERSION_MAJOR 2
#define NSS_BUILTINS_LIBRARY_VERSION_MINOR 11
#define NSS_BUILTINS_LIBRARY_VERSION "2.11"
#define NSS_BUILTINS_LIBRARY_VERSION_MINOR 14
#define NSS_BUILTINS_LIBRARY_VERSION "2.14"
/* These version numbers detail the semantic changes to the ckfw engine. */
#define NSS_BUILTINS_HARDWARE_VERSION_MAJOR 1

2
security/nss/lib/pkcs7/p7encode.c
View File

@ -510,7 +510,7 @@ sec_pkcs7_encoder_work_data(SEC_PKCS7EncoderContext *p7ecx, SECItem *dest,
* No output is expected, but the input data may be buffered
* so we still have to call Encrypt.
*/
rv = sec_PKCS7Encrypt(p7ecx->encryptobj, NULL, NULL, 0,
rv = sec_PKCS7Encrypt(p7ecx->encryptobj, NULL, &outlen, 0,
data, inlen, final);
if (final) {
len = 0;

56
security/nss/tests/tools/tools.sh
View File

@ -29,7 +29,7 @@
"PKCS #12 V2 PBE With SHA-1 and 40 Bit RC4"
export pkcs12v2pbeWithSha1AndTripleDESCBC=\
"PKCS #12 V2 PBE With SHA-1 and Triple DES-CBC"
"PKCS #12 V2 PBE With SHA-1 and 3KEY Triple DES-CBC"
export pkcs12v2pbeWithSha1And128BitRc2Cbc=\
"PKCS #12 V2 PBE With SHA-1 and 128 Bit RC2 CBC"
@ -249,7 +249,7 @@ tools_p12_export_list_import_all_pkcs5pbe_ciphers()
"${pkcs5pbeWithMD5AndDEScbc}" \
"${pkcs5pbeWithSha1AndDEScbc}" \
"DEFAULT"\
"null"; do
"none"; do
export_list_import "${key_cipher}" "${cert_cipher}"
done
done
@ -287,7 +287,7 @@ tools_p12_export_list_import_all_pkcs5v2_ciphers()
AES-128-CBC \
AES-192-CBC \
AES-256-CBC \
null; do
none; do
export_list_import ${key_cipher} ${cert_cipher}
done
done
@ -324,8 +324,8 @@ tools_p12_export_list_import_all_pkcs12v2pbe_ciphers()
"${pkcs12v2pbeWithMd5AndDESCBC}" \
"${pkcs12v2pbeWithSha1AndDESCBC}" \
"DEFAULT"\
"null"; do
export_list_import "${key_cipher}" "${key_cipher}"
"none"; do
export_list_import "${key_cipher}" "${cert_cipher}"
done
#done
}
@ -333,34 +333,59 @@ tools_p12_export_list_import_all_pkcs12v2pbe_ciphers()
#########################################################################
# Export with no encryption on key should fail but on cert should pass
#########################################################################
tools_p12_export_with_null_ciphers()
tools_p12_export_with_none_ciphers()
{
# use null as the key encryption algorithm default for the cert one
# use none as the key encryption algorithm default for the cert one
# should fail
echo "pk12util -o Alice.p12 -n \"Alice\" -d ${P_R_ALICEDIR} \\"
echo " -k ${R_PWFILE} -w ${R_PWFILE} -c null"
echo " -k ${R_PWFILE} -w ${R_PWFILE} -c none"
${BINDIR}/pk12util -o Alice.p12 -n Alice -d ${P_R_ALICEDIR} \
-k ${R_PWFILE} -w ${R_PWFILE} \
-c null 2>&1
-c none 2>&1
ret=$?
html_msg $ret 30 "Exporting with [null:default] (pk12util -o)"
html_msg $ret 30 "Exporting with [none:default] (pk12util -o)"
check_tmpfile
# use default as the key encryption algorithm null for the cert one
# use default as the key encryption algorithm none for the cert one
# should pass
echo "pk12util -o Alice.p12 -n \"Alice\" -d ${P_R_ALICEDIR} \\"
echo " -k ${R_PWFILE} -w ${R_PWFILE} -C null"
echo " -k ${R_PWFILE} -w ${R_PWFILE} -C none"
${BINDIR}/pk12util -o Alice.p12 -n Alice -d ${P_R_ALICEDIR} \
-k ${R_PWFILE} -w ${R_PWFILE} \
-C null 2>&1
-C none 2>&1
ret=$?
html_msg $ret 0 "Exporting with [default:null] (pk12util -o)"
html_msg $ret 0 "Exporting with [default:none] (pk12util -o)"
check_tmpfile
}
#########################################################################
# Export with invalid cipher should fail
#########################################################################
tools_p12_export_with_invalid_ciphers()
{
echo "pk12util -o Alice.p12 -n \"Alice\" -d ${P_R_ALICEDIR} \\"
echo " -k ${R_PWFILE} -w ${R_PWFILE} -c INVALID_CIPHER"
${BINDIR}/pk12util -o Alice.p12 -n Alice -d ${P_R_ALICEDIR} \
-k ${R_PWFILE} -w ${R_PWFILE} \
-c INVALID_CIPHER 2>&1
ret=$?
html_msg $ret 30 "Exporting with [INVALID_CIPHER:default] (pk12util -o)"
check_tmpfile
echo "pk12util -o Alice.p12 -n \"Alice\" -d ${P_R_ALICEDIR} \\"
echo " -k ${R_PWFILE} -w ${R_PWFILE} -C INVALID_CIPHER"
${BINDIR}/pk12util -o Alice.p12 -n Alice -d ${P_R_ALICEDIR} \
-k ${R_PWFILE} -w ${R_PWFILE} \
-C INVALID_CIPHER 2>&1
ret=$?
html_msg $ret 30 "Exporting with [default:INVALID_CIPHER] (pk12util -o)"
check_tmpfile
}
#########################################################################
# Exports using the default key and certificate encryption ciphers.
# Imports from and lists the contents of the p12 file.
@ -407,7 +432,8 @@ tools_p12()
tools_p12_export_list_import_all_pkcs5v2_ciphers
tools_p12_export_list_import_all_pkcs5pbe_ciphers
tools_p12_export_list_import_all_pkcs12v2pbe_ciphers
tools_p12_export_with_null_ciphers
tools_p12_export_with_none_ciphers
tools_p12_export_with_invalid_ciphers
}
############################## tools_sign ##############################