Skip to content

Commit a7cf917

Browse files
authored
Added DigiCert root CAs to 'ca-certificates-base' (microsoft#15163)
1 parent b449ade commit a7cf917

File tree

9 files changed

+435
-22
lines changed

9 files changed

+435
-22
lines changed

SPECS/ca-certificates/ca-certificates.signatures.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@
1010
"README.src": "86184318d451bec55d70c84e618cbfe10c8adb7dc893964ce4aaecff99d83433",
1111
"README.usr": "0d2e90b6cf575678cd9d4f409d92258ef0d676995d4d733acdb2425309a38ff8",
1212
"bundle2pem.sh": "a61e0d9f34e21456cfe175e9a682f56959240e66dfeb75bd2457226226aa413a",
13-
"certdata.base.txt": "771a6c9995ea00bb4ce50fd842a252454fe9b26acad8b0568a1055207442db57",
13+
"certdata.base.txt": "4bef2bd5e4f4693c424b92a4b9862d9fa8a62a654c998a4ca8c1e82bdcd62e99",
1414
"certdata.distrusted.txt": "536b1235c5b0b3c82ddf303eca696ec164cdb21899cd9e5313d8b29ce9cdc268",
1515
"certdata.microsoft.txt": "38cd7da10bce27751cfee01b2fdaa55f52321cdf1a408ec658bbf591b64cc484",
1616
"certdata2pem.py": "4f5848c14210758f19ab9fdc9ffd83733303a48642a3d47c4d682f904fdc0f33",

SPECS/ca-certificates/ca-certificates.spec

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@ Name: ca-certificates
4747
# When updating, "Epoch, "Version", AND "Release" tags must be updated in the "prebuilt-ca-certificates*" packages as well.
4848
Epoch: 1
4949
Version: %{azl}.0.0
50-
Release: 13%{?dist}
50+
Release: 14%{?dist}
5151
License: MPLv2.0
5252
Vendor: Microsoft Corporation
5353
Distribution: Azure Linux
@@ -340,6 +340,9 @@ rm -f %{pkidir}/tls/certs/*.{0,pem}
340340
%{_bindir}/bundle2pem.sh
341341

342342
%changelog
343+
* Mon Nov 24 2025 Pawel Winogrodzki <[email protected]> - 1:3.0.0-14
344+
- Adding 2 new base CAs: 'Microsoft TLS RSA Root G2' and 'Microsoft TLS ECC Root G2'.
345+
343346
* Mon Oct 27 2025 Andrew Phelps <[email protected]> - 1:3.0.0-13
344347
- Revert: Adding 2 new base CAs: 'Microsoft TLS RSA Root G2' and 'Microsoft TLS ECC Root G2'.
345348

SPECS/ca-certificates/certdata.base.txt

Lines changed: 404 additions & 0 deletions
Large diffs are not rendered by default.

SPECS/prebuilt-ca-certificates-base/prebuilt-ca-certificates-base.spec

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ Name: prebuilt-ca-certificates-base
33
# When updating, "Epoch, "Version", AND "Release" tags must be updated in the "ca-certificates" package as well.
44
Epoch: 1
55
Version: %{azl}.0.0
6-
Release: 13%{?dist}
6+
Release: 14%{?dist}
77
License: MIT
88
Vendor: Microsoft Corporation
99
Distribution: Azure Linux
@@ -46,6 +46,9 @@ find %{buildroot} -name README -delete
4646
%{_sysconfdir}/pki/java/cacerts
4747

4848
%changelog
49+
* Mon Nov 24 2025 Pawel Winogrodzki <[email protected]> - 1:3.0.0-14
50+
- Making 'Release' match with 'ca-certificates'
51+
4952
* Wed Oct 29 2025 Andrew Phelps <[email protected]> - 1:3.0.0-13
5053
- Making 'Release' match with 'ca-certificates'
5154

SPECS/prebuilt-ca-certificates/prebuilt-ca-certificates.spec

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ Name: prebuilt-ca-certificates
33
# When updating, "Epoch, "Version", AND "Release" tags must be updated in the "ca-certificates" package as well.
44
Epoch: 1
55
Version: %{azl}.0.0
6-
Release: 13%{?dist}
6+
Release: 14%{?dist}
77
License: MIT
88
Vendor: Microsoft Corporation
99
Distribution: Azure Linux
@@ -49,6 +49,9 @@ find %{buildroot} -name README -delete
4949
%{_sysconfdir}/pki/java/cacerts
5050

5151
%changelog
52+
* Mon Nov 24 2025 Pawel Winogrodzki <[email protected]> - 1:3.0.0-14
53+
- Making 'Release' match with 'ca-certificates'
54+
5255
* Wed Oct 29 2025 Andrew Phelps <[email protected]> - 1:3.0.0-13
5356
- Making 'Release' match with 'ca-certificates'
5457

toolkit/resources/manifests/package/pkggen_core_aarch64.txt

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -238,10 +238,10 @@ libffi-devel-3.4.4-1.azl3.aarch64.rpm
238238
libtasn1-4.19.0-2.azl3.aarch64.rpm
239239
p11-kit-0.25.0-1.azl3.aarch64.rpm
240240
p11-kit-trust-0.25.0-1.azl3.aarch64.rpm
241-
ca-certificates-shared-3.0.0-13.azl3.noarch.rpm
242-
ca-certificates-tools-3.0.0-13.azl3.noarch.rpm
243-
ca-certificates-base-3.0.0-13.azl3.noarch.rpm
244-
ca-certificates-3.0.0-13.azl3.noarch.rpm
241+
ca-certificates-shared-3.0.0-14.azl3.noarch.rpm
242+
ca-certificates-tools-3.0.0-14.azl3.noarch.rpm
243+
ca-certificates-base-3.0.0-14.azl3.noarch.rpm
244+
ca-certificates-3.0.0-14.azl3.noarch.rpm
245245
dwz-0.14-2.azl3.aarch64.rpm
246246
unzip-6.0-22.azl3.aarch64.rpm
247247
python3-3.12.9-5.azl3.aarch64.rpm

toolkit/resources/manifests/package/pkggen_core_x86_64.txt

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -238,10 +238,10 @@ libffi-devel-3.4.4-1.azl3.x86_64.rpm
238238
libtasn1-4.19.0-2.azl3.x86_64.rpm
239239
p11-kit-0.25.0-1.azl3.x86_64.rpm
240240
p11-kit-trust-0.25.0-1.azl3.x86_64.rpm
241-
ca-certificates-shared-3.0.0-13.azl3.noarch.rpm
242-
ca-certificates-tools-3.0.0-13.azl3.noarch.rpm
243-
ca-certificates-base-3.0.0-13.azl3.noarch.rpm
244-
ca-certificates-3.0.0-13.azl3.noarch.rpm
241+
ca-certificates-shared-3.0.0-14.azl3.noarch.rpm
242+
ca-certificates-tools-3.0.0-14.azl3.noarch.rpm
243+
ca-certificates-base-3.0.0-14.azl3.noarch.rpm
244+
ca-certificates-3.0.0-14.azl3.noarch.rpm
245245
dwz-0.14-2.azl3.x86_64.rpm
246246
unzip-6.0-22.azl3.x86_64.rpm
247247
python3-3.12.9-5.azl3.x86_64.rpm

toolkit/resources/manifests/package/toolchain_aarch64.txt

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -39,11 +39,11 @@ bzip2-1.0.8-1.azl3.aarch64.rpm
3939
bzip2-debuginfo-1.0.8-1.azl3.aarch64.rpm
4040
bzip2-devel-1.0.8-1.azl3.aarch64.rpm
4141
bzip2-libs-1.0.8-1.azl3.aarch64.rpm
42-
ca-certificates-3.0.0-13.azl3.noarch.rpm
43-
ca-certificates-base-3.0.0-13.azl3.noarch.rpm
44-
ca-certificates-legacy-3.0.0-13.azl3.noarch.rpm
45-
ca-certificates-shared-3.0.0-13.azl3.noarch.rpm
46-
ca-certificates-tools-3.0.0-13.azl3.noarch.rpm
42+
ca-certificates-3.0.0-14.azl3.noarch.rpm
43+
ca-certificates-base-3.0.0-14.azl3.noarch.rpm
44+
ca-certificates-legacy-3.0.0-14.azl3.noarch.rpm
45+
ca-certificates-shared-3.0.0-14.azl3.noarch.rpm
46+
ca-certificates-tools-3.0.0-14.azl3.noarch.rpm
4747
ccache-4.8.3-3.azl3.aarch64.rpm
4848
ccache-debuginfo-4.8.3-3.azl3.aarch64.rpm
4949
check-0.15.2-1.azl3.aarch64.rpm

toolkit/resources/manifests/package/toolchain_x86_64.txt

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -42,11 +42,11 @@ bzip2-1.0.8-1.azl3.x86_64.rpm
4242
bzip2-debuginfo-1.0.8-1.azl3.x86_64.rpm
4343
bzip2-devel-1.0.8-1.azl3.x86_64.rpm
4444
bzip2-libs-1.0.8-1.azl3.x86_64.rpm
45-
ca-certificates-3.0.0-13.azl3.noarch.rpm
46-
ca-certificates-base-3.0.0-13.azl3.noarch.rpm
47-
ca-certificates-legacy-3.0.0-13.azl3.noarch.rpm
48-
ca-certificates-shared-3.0.0-13.azl3.noarch.rpm
49-
ca-certificates-tools-3.0.0-13.azl3.noarch.rpm
45+
ca-certificates-3.0.0-14.azl3.noarch.rpm
46+
ca-certificates-base-3.0.0-14.azl3.noarch.rpm
47+
ca-certificates-legacy-3.0.0-14.azl3.noarch.rpm
48+
ca-certificates-shared-3.0.0-14.azl3.noarch.rpm
49+
ca-certificates-tools-3.0.0-14.azl3.noarch.rpm
5050
ccache-4.8.3-3.azl3.x86_64.rpm
5151
ccache-debuginfo-4.8.3-3.azl3.x86_64.rpm
5252
check-0.15.2-1.azl3.x86_64.rpm

0 commit comments

Comments
 (0)