[AUTOUPGRADE-CORE] Upgrade ca-certificates Msft cert change (microsoft#14584)

Author: CBL-Mariner-Bot

SPECS/ca-certificates/ca-certificates.signatures.json

@@ -12,7 +12,7 @@
     "bundle2pem.sh": "a61e0d9f34e21456cfe175e9a682f56959240e66dfeb75bd2457226226aa413a",
     "certdata.base.txt": "771a6c9995ea00bb4ce50fd842a252454fe9b26acad8b0568a1055207442db57",
     "certdata.distrusted.txt": "93aebf0f1e5253ed91fe269f7128fdb8b20630ef19558f629c79a8b7eb0ba30d",
-    "certdata.microsoft.txt": "1707ab328312f4ecce167a886e866136b46d7f979a01cc6f9e4afd042174babd",
+    "certdata.microsoft.txt": "9c802e9f5a0bd90ba51a4f04ec1d2304a11d1cf321e4e5bdff97459b46ba3e02",
     "certdata2pem.py": "4f5848c14210758f19ab9fdc9ffd83733303a48642a3d47c4d682f904fdc0f33",
     "pem2bundle.sh": "f96a2f0071fb80e30332c0bd95853183f2f49a3c98d5e9fc4716aeeb001e3426",
     "trust-fixes": "01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b",

SPECS/ca-certificates/ca-certificates.spec

@@ -47,7 +47,7 @@ Name:           ca-certificates
 # When updating, "Epoch, "Version", AND "Release" tags must be updated in the "prebuilt-ca-certificates*" packages as well.
 Epoch:          1
 Version:        2.0.0
-Release:        19%{?dist}
+Release:        20%{?dist}
 License:        MPLv2.0
 Vendor:         Microsoft Corporation
 Distribution:   Mariner
@@ -340,6 +340,9 @@ rm -f %{pkidir}/tls/certs/*.{0,pem}
 %{_bindir}/bundle2pem.sh
 
 %changelog
+* Thu Aug 28 2025 CBL-Mariner Servicing Account <[email protected]> - 1:2.0.0-20
+- Updating Microsoft trusted root CAs.
+
 * Wed Dec 11 2024 Pawel Winogrodzki <[email protected]> - 2.0.0-19
 - Update adding Microsoft distrusted CAs.
 - Explicitly set default file ownership to root:root.

SPECS/ca-certificates/certdata.microsoft.txt

@@ -1,4 +1,4 @@
-# Release: March 2024
+# Release: May 2025
 #
 # This Source Code Form is subject to the terms of the Mozilla Public
 # License, v. 2.0. If a copy of the MPL was not distributed with this
@@ -39152,3 +39152,288 @@ CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
 CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
 CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
 
+
+#
+# Certificate "SECOM TLS ECC Root CA 2024"
+#
+# Issuer: CN=SECOM TLS ECC Root CA 2024,O="SECOM Trust Systems Co., Ltd.",C=JP
+# Serial Number:00:81:7a:2c:ef:8f:23:7a:44
+# Subject: CN=SECOM TLS ECC Root CA 2024,O="SECOM Trust Systems Co., Ltd.",C=JP
+# Not Valid Before: Wed Jan 31 05:52:34 2024
+# Not Valid After : Thu Jan 14 05:52:34 2049
+# Fingerprint (SHA-256): 6A:B2:AB:75:F5:1C:B4:F4:F0:15:62:03:FB:F6:F6:46:23:2F:51:4B:E0:59:F6:28:33:30:8B:82:B4:D7:2D:B1
+# Fingerprint (SHA1): 7A:1F:22:2D:72:B2:C3:19:87:44:DB:61:69:E8:A6:4B:D7:0D:44:0E
+CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
+CKA_TOKEN CK_BBOOL CK_TRUE
+CKA_PRIVATE CK_BBOOL CK_FALSE
+CKA_MODIFIABLE CK_BBOOL CK_FALSE
+CKA_LABEL UTF8 "SECOM TLS ECC Root CA 2024"
+CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509
+CKA_SUBJECT MULTILINE_OCTAL
+\060\132\061\013\060\011\006\003\125\004\006\023\002\112\120\061
+\046\060\044\006\003\125\004\012\023\035\123\105\103\117\115\040
+\124\162\165\163\164\040\123\171\163\164\145\155\163\040\103\157
+\056\054\040\114\164\144\056\061\043\060\041\006\003\125\004\003
+\023\032\123\105\103\117\115\040\124\114\123\040\105\103\103\040
+\122\157\157\164\040\103\101\040\062\060\062\064
+END
+CKA_ID UTF8 "0"
+CKA_ISSUER MULTILINE_OCTAL
+\060\132\061\013\060\011\006\003\125\004\006\023\002\112\120\061
+\046\060\044\006\003\125\004\012\023\035\123\105\103\117\115\040
+\124\162\165\163\164\040\123\171\163\164\145\155\163\040\103\157
+\056\054\040\114\164\144\056\061\043\060\041\006\003\125\004\003
+\023\032\123\105\103\117\115\040\124\114\123\040\105\103\103\040
+\122\157\157\164\040\103\101\040\062\060\062\064
+END
+CKA_SERIAL_NUMBER MULTILINE_OCTAL
+\002\011\000\201\172\054\357\217\043\172\104
+END
+CKA_VALUE MULTILINE_OCTAL
+\060\202\002\114\060\202\001\321\240\003\002\001\002\002\011\000
+\201\172\054\357\217\043\172\104\060\012\006\010\052\206\110\316
+\075\004\003\003\060\132\061\013\060\011\006\003\125\004\006\023
+\002\112\120\061\046\060\044\006\003\125\004\012\023\035\123\105
+\103\117\115\040\124\162\165\163\164\040\123\171\163\164\145\155
+\163\040\103\157\056\054\040\114\164\144\056\061\043\060\041\006
+\003\125\004\003\023\032\123\105\103\117\115\040\124\114\123\040
+\105\103\103\040\122\157\157\164\040\103\101\040\062\060\062\064
+\060\036\027\015\062\064\060\061\063\061\060\065\065\062\063\064
+\132\027\015\064\071\060\061\061\064\060\065\065\062\063\064\132
+\060\132\061\013\060\011\006\003\125\004\006\023\002\112\120\061
+\046\060\044\006\003\125\004\012\023\035\123\105\103\117\115\040
+\124\162\165\163\164\040\123\171\163\164\145\155\163\040\103\157
+\056\054\040\114\164\144\056\061\043\060\041\006\003\125\004\003
+\023\032\123\105\103\117\115\040\124\114\123\040\105\103\103\040
+\122\157\157\164\040\103\101\040\062\060\062\064\060\166\060\020
+\006\007\052\206\110\316\075\002\001\006\005\053\201\004\000\042
+\003\142\000\004\354\334\305\062\333\275\167\064\027\110\320\265
+\331\366\233\223\117\206\224\056\137\212\160\167\107\265\332\146
+\211\321\121\335\264\150\130\226\071\273\156\064\020\213\121\224
+\237\223\244\027\000\116\171\006\061\027\261\164\077\064\157\062
+\122\250\234\136\073\056\366\113\003\053\162\131\006\000\260\054
+\345\141\353\351\360\045\164\357\262\217\335\022\077\306\121\201
+\371\230\027\150\243\143\060\141\060\035\006\003\125\035\016\004
+\026\004\024\073\166\021\173\051\164\342\116\006\114\126\202\100
+\320\041\057\172\263\311\325\060\037\006\003\125\035\043\004\030
+\060\026\200\024\073\166\021\173\051\164\342\116\006\114\126\202
+\100\320\041\057\172\263\311\325\060\016\006\003\125\035\017\001
+\001\377\004\004\003\002\001\006\060\017\006\003\125\035\023\001
+\001\377\004\005\060\003\001\001\377\060\012\006\010\052\206\110
+\316\075\004\003\003\003\151\000\060\146\002\061\000\335\342\157
+\307\342\326\223\030\264\003\343\062\051\101\345\356\177\037\353
+\171\010\275\061\074\277\234\147\232\023\115\233\222\012\072\100
+\237\133\373\027\365\100\257\306\305\305\005\300\243\002\061\000
+\253\001\124\355\100\010\132\173\262\114\063\076\367\157\324\105
+\030\345\257\075\355\141\213\117\211\133\371\270\361\024\005\262
+\227\314\003\161\222\135\300\146\177\244\001\361\267\120\011\326
+END
+CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE
+CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE
+CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE
+
+# Trust for "SECOM TLS ECC Root CA 2024"
+# Issuer: CN=SECOM TLS ECC Root CA 2024,O="SECOM Trust Systems Co., Ltd.",C=JP
+# Serial Number:00:81:7a:2c:ef:8f:23:7a:44
+# Subject: CN=SECOM TLS ECC Root CA 2024,O="SECOM Trust Systems Co., Ltd.",C=JP
+# Not Valid Before: Wed Jan 31 05:52:34 2024
+# Not Valid After : Thu Jan 14 05:52:34 2049
+# Fingerprint (SHA-256): 6A:B2:AB:75:F5:1C:B4:F4:F0:15:62:03:FB:F6:F6:46:23:2F:51:4B:E0:59:F6:28:33:30:8B:82:B4:D7:2D:B1
+# Fingerprint (SHA1): 7A:1F:22:2D:72:B2:C3:19:87:44:DB:61:69:E8:A6:4B:D7:0D:44:0E
+CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST
+CKA_TOKEN CK_BBOOL CK_TRUE
+CKA_PRIVATE CK_BBOOL CK_FALSE
+CKA_MODIFIABLE CK_BBOOL CK_FALSE
+CKA_LABEL UTF8 "SECOM TLS ECC Root CA 2024"
+CKA_CERT_SHA1_HASH MULTILINE_OCTAL
+\172\037\042\055\162\262\303\031\207\104\333\141\151\350\246\113
+\327\015\104\016
+END
+CKA_CERT_MD5_HASH MULTILINE_OCTAL
+\231\323\235\344\322\261\055\360\052\004\147\205\363\337\106\326
+END
+CKA_ISSUER MULTILINE_OCTAL
+\060\132\061\013\060\011\006\003\125\004\006\023\002\112\120\061
+\046\060\044\006\003\125\004\012\023\035\123\105\103\117\115\040
+\124\162\165\163\164\040\123\171\163\164\145\155\163\040\103\157
+\056\054\040\114\164\144\056\061\043\060\041\006\003\125\004\003
+\023\032\123\105\103\117\115\040\124\114\123\040\105\103\103\040
+\122\157\157\164\040\103\101\040\062\060\062\064
+END
+CKA_SERIAL_NUMBER MULTILINE_OCTAL
+\002\011\000\201\172\054\357\217\043\172\104
+END
+CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
+CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
+CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
+
+
+#
+# Certificate "SECOM TLS RSA Root CA 2024"
+#
+# Issuer: CN=SECOM TLS RSA Root CA 2024,O="SECOM Trust Systems Co., Ltd.",C=JP
+# Serial Number:00:ee:89:34:d0:cb:80:e0:b2
+# Subject: CN=SECOM TLS RSA Root CA 2024,O="SECOM Trust Systems Co., Ltd.",C=JP
+# Not Valid Before: Wed Jan 31 05:11:55 2024
+# Not Valid After : Thu Jan 14 05:11:55 2049
+# Fingerprint (SHA-256): 14:35:F2:25:C5:D2:52:D7:A2:19:48:CC:3C:E6:2A:EC:FA:88:00:1E:3D:D7:2D:1C:C3:55:51:00:EB:37:2F:93
+# Fingerprint (SHA1): FB:97:96:7C:EF:8D:98:63:06:C0:3B:B6:11:F8:E0:13:97:A2:98:D3
+CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
+CKA_TOKEN CK_BBOOL CK_TRUE
+CKA_PRIVATE CK_BBOOL CK_FALSE
+CKA_MODIFIABLE CK_BBOOL CK_FALSE
+CKA_LABEL UTF8 "SECOM TLS RSA Root CA 2024"
+CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509
+CKA_SUBJECT MULTILINE_OCTAL
+\060\132\061\013\060\011\006\003\125\004\006\023\002\112\120\061
+\046\060\044\006\003\125\004\012\023\035\123\105\103\117\115\040
+\124\162\165\163\164\040\123\171\163\164\145\155\163\040\103\157
+\056\054\040\114\164\144\056\061\043\060\041\006\003\125\004\003
+\023\032\123\105\103\117\115\040\124\114\123\040\122\123\101\040
+\122\157\157\164\040\103\101\040\062\060\062\064
+END
+CKA_ID UTF8 "0"
+CKA_ISSUER MULTILINE_OCTAL
+\060\132\061\013\060\011\006\003\125\004\006\023\002\112\120\061
+\046\060\044\006\003\125\004\012\023\035\123\105\103\117\115\040
+\124\162\165\163\164\040\123\171\163\164\145\155\163\040\103\157
+\056\054\040\114\164\144\056\061\043\060\041\006\003\125\004\003
+\023\032\123\105\103\117\115\040\124\114\123\040\122\123\101\040
+\122\157\157\164\040\103\101\040\062\060\062\064
+END
+CKA_SERIAL_NUMBER MULTILINE_OCTAL
+\002\011\000\356\211\064\320\313\200\340\262
+END
+CKA_VALUE MULTILINE_OCTAL
+\060\202\005\232\060\202\003\202\240\003\002\001\002\002\011\000
+\356\211\064\320\313\200\340\262\060\015\006\011\052\206\110\206
+\367\015\001\001\014\005\000\060\132\061\013\060\011\006\003\125
+\004\006\023\002\112\120\061\046\060\044\006\003\125\004\012\023
+\035\123\105\103\117\115\040\124\162\165\163\164\040\123\171\163
+\164\145\155\163\040\103\157\056\054\040\114\164\144\056\061\043
+\060\041\006\003\125\004\003\023\032\123\105\103\117\115\040\124
+\114\123\040\122\123\101\040\122\157\157\164\040\103\101\040\062
+\060\062\064\060\036\027\015\062\064\060\061\063\061\060\065\061
+\061\065\065\132\027\015\064\071\060\061\061\064\060\065\061\061
+\065\065\132\060\132\061\013\060\011\006\003\125\004\006\023\002
+\112\120\061\046\060\044\006\003\125\004\012\023\035\123\105\103
+\117\115\040\124\162\165\163\164\040\123\171\163\164\145\155\163
+\040\103\157\056\054\040\114\164\144\056\061\043\060\041\006\003
+\125\004\003\023\032\123\105\103\117\115\040\124\114\123\040\122
+\123\101\040\122\157\157\164\040\103\101\040\062\060\062\064\060
+\202\002\042\060\015\006\011\052\206\110\206\367\015\001\001\001
+\005\000\003\202\002\017\000\060\202\002\012\002\202\002\001\000
+\341\070\342\315\114\063\305\262\047\253\304\361\327\130\032\025
+\203\144\345\363\276\337\214\273\117\043\070\235\350\164\122\002
+\371\044\206\133\044\322\323\317\154\177\374\277\301\357\137\271
+\233\245\372\234\142\053\355\336\045\024\220\106\266\063\272\357
+\270\127\073\077\167\316\107\026\151\104\346\335\126\316\002\060
+\145\267\206\026\306\127\034\160\021\327\271\236\350\335\017\270
+\107\352\053\232\260\135\035\342\165\011\065\004\033\313\155\101
+\262\210\227\161\273\071\226\033\234\177\077\244\377\034\214\373
+\233\377\111\003\124\333\214\316\236\361\261\124\121\070\350\254
+\102\336\167\174\312\011\056\126\040\241\346\333\270\312\141\072
+\243\002\266\071\011\355\036\236\174\103\037\056\237\024\001\130
+\275\145\242\321\237\276\204\117\360\211\222\117\166\346\167\156
+\272\347\302\340\026\255\113\211\247\134\131\261\067\113\324\135
+\275\042\217\320\174\073\360\374\202\054\120\022\305\122\017\201
+\212\360\125\221\076\035\333\125\337\372\157\067\144\034\142\143
+\313\155\127\043\114\236\215\132\046\145\106\321\254\347\315\273
+\075\033\240\361\225\326\233\165\361\361\102\337\322\007\100\113
+\141\334\341\152\157\223\103\073\162\376\003\326\315\251\070\000
+\311\110\021\230\211\370\271\310\003\163\364\142\374\251\267\127
+\235\156\171\230\362\327\374\244\322\254\011\125\247\100\125\132
+\302\267\236\242\065\345\316\310\113\363\044\000\306\200\064\074
+\023\123\335\152\247\055\360\054\247\317\376\073\105\344\014\353
+\153\305\140\355\074\301\304\044\256\071\227\376\327\254\212\112
+\065\127\134\262\151\376\204\174\374\324\027\071\232\033\057\161
+\276\100\260\165\271\265\344\107\123\242\123\243\023\101\366\125
+\276\177\000\360\316\310\041\104\242\110\230\032\145\323\055\320
+\024\227\114\012\147\202\062\216\101\306\317\055\043\206\226\227
+\021\161\077\030\227\004\274\216\225\314\107\041\215\240\113\323
+\161\011\322\037\151\033\203\252\170\203\262\160\253\300\243\160
+\076\115\267\255\311\373\053\201\214\207\315\115\032\357\372\224
+\214\146\255\324\000\052\326\165\145\214\312\112\252\230\247\075
+\073\037\375\337\107\337\321\123\121\342\113\355\072\163\316\065
+\002\003\001\000\001\243\143\060\141\060\035\006\003\125\035\016
+\004\026\004\024\054\353\162\022\216\130\167\144\065\025\126\065
+\001\127\007\251\175\015\066\346\060\037\006\003\125\035\043\004
+\030\060\026\200\024\054\353\162\022\216\130\167\144\065\025\126
+\065\001\127\007\251\175\015\066\346\060\016\006\003\125\035\017
+\001\001\377\004\004\003\002\001\006\060\017\006\003\125\035\023
+\001\001\377\004\005\060\003\001\001\377\060\015\006\011\052\206
+\110\206\367\015\001\001\014\005\000\003\202\002\001\000\025\302
+\313\345\271\046\237\151\354\371\264\123\321\376\024\123\007\064
+\161\023\043\014\100\135\327\045\160\225\213\174\236\201\234\212
+\241\347\073\206\141\072\217\035\231\063\302\240\063\131\047\333
+\042\121\300\125\307\137\314\324\133\331\301\054\100\326\163\214
+\056\023\302\353\225\232\241\031\223\075\244\224\027\032\141\263
+\105\353\003\045\136\211\201\020\147\153\350\370\260\015\114\357
+\042\035\226\362\364\260\007\305\134\120\223\105\245\223\017\201
+\065\127\337\121\056\261\163\131\364\334\013\347\265\363\110\103
+\270\323\051\250\341\050\343\257\245\061\345\277\132\370\173\211
+\363\220\263\351\042\053\103\266\200\174\120\014\334\154\225\046
+\257\234\053\070\127\271\174\035\020\311\330\266\265\322\216\364
+\006\216\325\057\067\365\133\303\001\276\375\025\116\174\101\370
+\330\323\346\244\300\156\021\205\207\321\257\247\200\132\046\231
+\235\121\375\002\344\041\017\351\326\320\225\370\061\131\374\330
+\257\257\162\125\076\235\075\000\176\030\121\032\143\115\310\061
+\217\200\160\020\254\372\211\265\174\334\153\101\173\175\316\212
+\037\060\023\105\154\270\157\244\321\377\046\305\326\164\145\063
+\174\326\316\327\153\254\301\066\271\301\250\174\054\035\174\025
+\064\015\333\374\317\035\211\257\004\112\013\273\045\040\147\117
+\125\064\262\150\345\200\064\221\162\055\125\211\013\214\307\266
+\112\054\163\053\213\034\120\173\374\324\202\275\364\217\165\015
+\154\173\027\003\025\053\015\261\200\132\176\144\266\001\331\331
+\351\101\012\352\302\125\272\342\011\107\121\302\266\067\320\103
+\262\170\313\113\027\231\371\103\304\012\037\121\304\176\026\001
+\302\242\145\157\234\251\242\214\232\023\366\130\027\321\340\207
+\021\354\323\213\337\151\245\327\127\154\363\270\141\127\120\231
+\131\141\102\044\007\002\211\326\031\317\240\231\153\307\261\314
+\172\043\077\324\201\345\021\364\376\375\112\164\160\042\262\250
+\122\216\322\145\375\102\000\034\204\070\361\351\116\237\314\053
+\115\321\132\247\206\033\345\241\340\226\143\036\067\037\237\000
+\210\103\226\345\225\177\024\316\354\176\035\114\365\076\110\125
+\121\060\260\041\373\014\012\145\372\233\367\211\314\171
+END
+CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE
+CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE
+CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE
+
+# Trust for "SECOM TLS RSA Root CA 2024"
+# Issuer: CN=SECOM TLS RSA Root CA 2024,O="SECOM Trust Systems Co., Ltd.",C=JP
+# Serial Number:00:ee:89:34:d0:cb:80:e0:b2
+# Subject: CN=SECOM TLS RSA Root CA 2024,O="SECOM Trust Systems Co., Ltd.",C=JP
+# Not Valid Before: Wed Jan 31 05:11:55 2024
+# Not Valid After : Thu Jan 14 05:11:55 2049
+# Fingerprint (SHA-256): 14:35:F2:25:C5:D2:52:D7:A2:19:48:CC:3C:E6:2A:EC:FA:88:00:1E:3D:D7:2D:1C:C3:55:51:00:EB:37:2F:93
+# Fingerprint (SHA1): FB:97:96:7C:EF:8D:98:63:06:C0:3B:B6:11:F8:E0:13:97:A2:98:D3
+CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST
+CKA_TOKEN CK_BBOOL CK_TRUE
+CKA_PRIVATE CK_BBOOL CK_FALSE
+CKA_MODIFIABLE CK_BBOOL CK_FALSE
+CKA_LABEL UTF8 "SECOM TLS RSA Root CA 2024"
+CKA_CERT_SHA1_HASH MULTILINE_OCTAL
+\373\227\226\174\357\215\230\143\006\300\073\266\021\370\340\023
+\227\242\230\323
+END
+CKA_CERT_MD5_HASH MULTILINE_OCTAL
+\320\244\333\062\353\104\230\322\142\013\076\274\115\174\134\351
+END
+CKA_ISSUER MULTILINE_OCTAL
+\060\132\061\013\060\011\006\003\125\004\006\023\002\112\120\061
+\046\060\044\006\003\125\004\012\023\035\123\105\103\117\115\040
+\124\162\165\163\164\040\123\171\163\164\145\155\163\040\103\157
+\056\054\040\114\164\144\056\061\043\060\041\006\003\125\004\003
+\023\032\123\105\103\117\115\040\124\114\123\040\122\123\101\040
+\122\157\157\164\040\103\101\040\062\060\062\064
+END
+CKA_SERIAL_NUMBER MULTILINE_OCTAL
+\002\011\000\356\211\064\320\313\200\340\262
+END
+CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
+CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
+CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
+

SPECS/prebuilt-ca-certificates-base/prebuilt-ca-certificates-base.spec

@@ -3,7 +3,7 @@ Name:           prebuilt-ca-certificates-base
 # When updating, "Epoch, "Version", AND "Release" tags must be updated in the "ca-certificates" package as well.
 Epoch:          1
 Version:        2.0.0
-Release:        19%{?dist}
+Release:        20%{?dist}
 License:        MIT
 Vendor:         Microsoft Corporation
 Distribution:   Mariner
@@ -46,6 +46,9 @@ find %{buildroot} -name README -delete
 %{_sysconfdir}/pki/java/cacerts
 
 %changelog
+* Thu Aug 28 2025 CBL-Mariner Servicing Account <[email protected]> - 1:2.0.0-20
+- Making 'Release' match with 'ca-certificates'
+
 * Wed Dec 11 2024 Pawel Winogrodzki <[email protected]> - 2.0.0-19
 - Update adding Microsoft distrusted CAs.
 

SPECS/prebuilt-ca-certificates/prebuilt-ca-certificates.spec

@@ -3,7 +3,7 @@ Name:           prebuilt-ca-certificates
 # When updating, "Epoch, "Version", AND "Release" tags must be updated in the "ca-certificates" package as well.
 Epoch:          1
 Version:        2.0.0
-Release:        19%{?dist}
+Release:        20%{?dist}
 License:        MIT
 Vendor:         Microsoft Corporation
 Distribution:   Mariner
@@ -49,6 +49,9 @@ find %{buildroot} -name README -delete
 %{_sysconfdir}/pki/java/cacerts
 
 %changelog
+* Thu Aug 28 2025 CBL-Mariner Servicing Account <[email protected]> - 1:2.0.0-20
+- Making 'Release' match with 'ca-certificates'
+
 * Wed Dec 11 2024 Pawel Winogrodzki <[email protected]> - 2.0.0-19
 - Update adding Microsoft distrusted CAs.
 

toolkit/resources/manifests/package/pkggen_core_aarch64.txt

@@ -231,10 +231,10 @@ libffi-devel-3.4.2-3.cm2.aarch64.rpm
 libtasn1-4.19.0-2.cm2.aarch64.rpm
 p11-kit-0.24.1-1.cm2.aarch64.rpm
 p11-kit-trust-0.24.1-1.cm2.aarch64.rpm
-ca-certificates-shared-2.0.0-19.cm2.noarch.rpm
-ca-certificates-tools-2.0.0-19.cm2.noarch.rpm
-ca-certificates-base-2.0.0-19.cm2.noarch.rpm
-ca-certificates-2.0.0-19.cm2.noarch.rpm
+ca-certificates-shared-2.0.0-20.cm2.noarch.rpm
+ca-certificates-tools-2.0.0-20.cm2.noarch.rpm
+ca-certificates-base-2.0.0-20.cm2.noarch.rpm
+ca-certificates-2.0.0-20.cm2.noarch.rpm
 dwz-0.14-2.cm2.aarch64.rpm
 unzip-6.0-22.cm2.aarch64.rpm
 python3-3.9.19-14.cm2.aarch64.rpm

toolkit/resources/manifests/package/pkggen_core_x86_64.txt

@@ -231,10 +231,10 @@ libffi-devel-3.4.2-3.cm2.x86_64.rpm
 libtasn1-4.19.0-2.cm2.x86_64.rpm
 p11-kit-0.24.1-1.cm2.x86_64.rpm
 p11-kit-trust-0.24.1-1.cm2.x86_64.rpm
-ca-certificates-shared-2.0.0-19.cm2.noarch.rpm
-ca-certificates-tools-2.0.0-19.cm2.noarch.rpm
-ca-certificates-base-2.0.0-19.cm2.noarch.rpm
-ca-certificates-2.0.0-19.cm2.noarch.rpm
+ca-certificates-shared-2.0.0-20.cm2.noarch.rpm
+ca-certificates-tools-2.0.0-20.cm2.noarch.rpm
+ca-certificates-base-2.0.0-20.cm2.noarch.rpm
+ca-certificates-2.0.0-20.cm2.noarch.rpm
 dwz-0.14-2.cm2.x86_64.rpm
 unzip-6.0-22.cm2.x86_64.rpm
 python3-3.9.19-14.cm2.x86_64.rpm