Merge pull request #4 from timtheisen/master

SOFTWARE-4965: Remove expired Let's Encrypt ROOT CA X4

Author: timtheisen

Makefile

@@ -1,18 +1,16 @@
 sources = isrgrootx1.signing_policy \
-          letsencryptauthorityx4.signing_policy \
           lets-encrypt-r3.signing_policy \
           lets-encrypt-r4.signing_policy \
 
-targets = 23c2f850.signing_policy 4042bcee.signing_policy \
-          6187b673.signing_policy 929e297e.signing_policy \
+targets = 4042bcee.signing_policy \
+          6187b673.signing_policy \
           8d33f237.signing_policy dec71a0b.signing_policy \
           9f194ecd.signing_policy dd7d39a7.signing_policy \
-          23c2f850.0 4042bcee.0 \
+          4042bcee.0 \
           6187b673.0 8d33f237.0 \
-          929e297e.0 9f194ecd.0 \
+          9f194ecd.0 \
           dec71a0b.0 dd7d39a7.0 \
           isrgrootx1.pem \
-          letsencryptauthorityx4.pem \
           lets-encrypt-r3.pem lets-encrypt-r4.pem
 
 installfiles = $(targets) $(sources)
@@ -32,35 +30,29 @@ clean :
 	$(RM) $(targets) *.pem
 
 check : all
-	openssl verify -CApath . letsencryptauthorityx4.pem
+	openssl verify -CApath . isrgrootx1.pem
+	openssl verify -CApath . lets-encrypt-r3.pem
+	openssl verify -CApath . lets-encrypt-r4.pem
 
-23c2f850.signing_policy : letsencryptauthorityx4.signing_policy
-	$(LINK) letsencryptauthorityx4.signing_policy 23c2f850.signing_policy
 4042bcee.signing_policy : isrgrootx1.signing_policy
 	$(LINK) isrgrootx1.signing_policy 4042bcee.signing_policy
 6187b673.signing_policy : isrgrootx1.signing_policy
 	$(LINK) isrgrootx1.signing_policy 6187b673.signing_policy
 8d33f237.signing_policy : lets-encrypt-r3.signing_policy
 	$(LINK) lets-encrypt-r3.signing_policy 8d33f237.signing_policy
-929e297e.signing_policy : letsencryptauthorityx4.signing_policy
-	$(LINK) letsencryptauthorityx4.signing_policy 929e297e.signing_policy
 9f194ecd.signing_policy : lets-encrypt-r4.signing_policy
 	$(LINK) lets-encrypt-r4.signing_policy 9f194ecd.signing_policy
 dec71a0b.signing_policy : lets-encrypt-r3.signing_policy
 	$(LINK) lets-encrypt-r3.signing_policy dec71a0b.signing_policy
 dd7d39a7.signing_policy : lets-encrypt-r4.signing_policy
 	$(LINK) lets-encrypt-r4.signing_policy dd7d39a7.signing_policy
 
-23c2f850.0 : letsencryptauthorityx4.pem
-	$(LINK) letsencryptauthorityx4.pem 23c2f850.0
 4042bcee.0 : isrgrootx1.pem
 	$(LINK) isrgrootx1.pem 4042bcee.0
 6187b673.0 : isrgrootx1.pem
 	$(LINK) isrgrootx1.pem 6187b673.0
 8d33f237.0 : lets-encrypt-r3.pem
 	$(LINK) lets-encrypt-r3.pem 8d33f237.0
-929e297e.0 : letsencryptauthorityx4.pem
-	$(LINK) letsencryptauthorityx4.pem 929e297e.0
 9f194ecd.0 : lets-encrypt-r4.pem
 	$(LINK) lets-encrypt-r4.pem 9f194ecd.0
 dec71a0b.0 : lets-encrypt-r3.pem
@@ -74,5 +66,3 @@ lets-encrypt-r3.pem :
 	$(GET) https://letsencrypt.org/certs/lets-encrypt-r3.pem
 lets-encrypt-r4.pem :
 	$(GET) https://letsencrypt.org/certs/lets-encrypt-r4.pem
-letsencryptauthorityx4.pem :
-	$(GET) https://letsencrypt.org/certs/letsencryptauthorityx4.pem

isrgrootx1.signing_policy

@@ -1,3 +1,3 @@
 access_id_CA   X509    '/C=US/O=Internet Security Research Group/CN=ISRG Root X1'
 pos_rights     globus  CA:sign
-cond_subjects  globus  '"/C=US/O=Let\'s Encrypt/CN=Let\'s Encrypt Authority X4" "/C=US/O=Let\'s Encrypt/CN=R3" "/C=US/O=Let\'s Encrypt/CN=R4"'
+cond_subjects  globus  '"/C=US/O=Let\'s Encrypt/CN=R3" "/C=US/O=Let\'s Encrypt/CN=R4"'