Merge pull request #56362 from nextcloud/automated/noid/stable23-update-code-signing-crl

[stable23] fix(security): Update code signing revocation list

Author: nickvergessen

.drone.yml

@@ -145,43 +145,43 @@ trigger:
     - pull_request
     - push
 
----
-kind: pipeline
-name: samba
-
-steps:
-- name: submodules
-  image: ghcr.io/nextcloud/continuous-integration-alpine-git:latest
-  commands:
-    - git submodule update --init
-- name: sqlite-php7.4-samba-native
-  image: ghcr.io/nextcloud/continuous-integration-samba-native-php7.4:latest
-  commands:
-    - smbd -D -FS &
-    - ./autotest-external.sh sqlite smb-linux
-    - wget https://codecov.io/bash -O codecov.sh
-    - sh -c "if [ '$DRONE_BUILD_EVENT' = 'pull_request' ]; then bash codecov.sh -B $DRONE_BRANCH -C $DRONE_COMMIT -P $DRONE_PULL_REQUEST -t 117641e2-a9e8-4b7b-984b-ae872d9b05f5 -f tests/autotest-external-clover-sqlite.xml; fi"
-    - sh -c "if [ '$DRONE_BUILD_EVENT' != 'pull_request' ]; then bash codecov.sh -B $DRONE_BRANCH -C $DRONE_COMMIT -t 117641e2-a9e8-4b7b-984b-ae872d9b05f5 -f tests/autotest-external-clover-sqlite.xml; fi"
-    - sh -c "if [ '$DRONE_BUILD_EVENT' = 'pull_request' ]; then bash codecov.sh -B $DRONE_BRANCH -C $DRONE_COMMIT -P $DRONE_PULL_REQUEST -t 117641e2-a9e8-4b7b-984b-ae872d9b05f5 -f tests/autotest-external-clover-sqlite-smb-linux.xml; fi"
-    - sh -c "if [ '$DRONE_BUILD_EVENT' != 'pull_request' ]; then bash codecov.sh -B $DRONE_BRANCH -C $DRONE_COMMIT -t 117641e2-a9e8-4b7b-984b-ae872d9b05f5 -f tests/autotest-external-clover-sqlite-smb-linux.xml; fi"
-- name: sqlite-php7.4-samba-non-native
-  image: ghcr.io/nextcloud/continuous-integration-samba-non-native-php7.4:latest
-  commands:
-    - smbd -D -FS &
-    - ./autotest-external.sh sqlite smb-linux
-    - wget https://codecov.io/bash -O codecov.sh
-    - sh -c "if [ '$DRONE_BUILD_EVENT' = 'pull_request' ]; then bash codecov.sh -B $DRONE_BRANCH -C $DRONE_COMMIT -P $DRONE_PULL_REQUEST -t 117641e2-a9e8-4b7b-984b-ae872d9b05f5 -f tests/autotest-external-clover-sqlite.xml; fi"
-    - sh -c "if [ '$DRONE_BUILD_EVENT' != 'pull_request' ]; then bash codecov.sh -B $DRONE_BRANCH -C $DRONE_COMMIT -t 117641e2-a9e8-4b7b-984b-ae872d9b05f5 -f tests/autotest-external-clover-sqlite.xml; fi"
-    - sh -c "if [ '$DRONE_BUILD_EVENT' = 'pull_request' ]; then bash codecov.sh -B $DRONE_BRANCH -C $DRONE_COMMIT -P $DRONE_PULL_REQUEST -t 117641e2-a9e8-4b7b-984b-ae872d9b05f5 -f tests/autotest-external-clover-sqlite-smb-linux.xml; fi"
-    - sh -c "if [ '$DRONE_BUILD_EVENT' != 'pull_request' ]; then bash codecov.sh -B $DRONE_BRANCH -C $DRONE_COMMIT -t 117641e2-a9e8-4b7b-984b-ae872d9b05f5 -f tests/autotest-external-clover-sqlite-smb-linux.xml; fi"
-
-trigger:
-  branch:
-    - master
-    - stable*
-  event:
-    - pull_request
-    - push
+#---
+#kind: pipeline
+#name: samba
+#
+#steps:
+#- name: submodules
+#  image: ghcr.io/nextcloud/continuous-integration-alpine-git:latest
+#  commands:
+#    - git submodule update --init
+#- name: sqlite-php7.4-samba-native
+#  image: ghcr.io/nextcloud/continuous-integration-samba-native-php7.4:latest
+#  commands:
+#    - smbd -D -FS &
+#    - ./autotest-external.sh sqlite smb-linux
+#    - wget https://codecov.io/bash -O codecov.sh
+#    - sh -c "if [ '$DRONE_BUILD_EVENT' = 'pull_request' ]; then bash codecov.sh -B $DRONE_BRANCH -C $DRONE_COMMIT -P $DRONE_PULL_REQUEST -t 117641e2-a9e8-4b7b-984b-ae872d9b05f5 -f tests/autotest-external-clover-sqlite.xml; fi"
+#    - sh -c "if [ '$DRONE_BUILD_EVENT' != 'pull_request' ]; then bash codecov.sh -B $DRONE_BRANCH -C $DRONE_COMMIT -t 117641e2-a9e8-4b7b-984b-ae872d9b05f5 -f tests/autotest-external-clover-sqlite.xml; fi"
+#    - sh -c "if [ '$DRONE_BUILD_EVENT' = 'pull_request' ]; then bash codecov.sh -B $DRONE_BRANCH -C $DRONE_COMMIT -P $DRONE_PULL_REQUEST -t 117641e2-a9e8-4b7b-984b-ae872d9b05f5 -f tests/autotest-external-clover-sqlite-smb-linux.xml; fi"
+#    - sh -c "if [ '$DRONE_BUILD_EVENT' != 'pull_request' ]; then bash codecov.sh -B $DRONE_BRANCH -C $DRONE_COMMIT -t 117641e2-a9e8-4b7b-984b-ae872d9b05f5 -f tests/autotest-external-clover-sqlite-smb-linux.xml; fi"
+#- name: sqlite-php7.4-samba-non-native
+#  image: ghcr.io/nextcloud/continuous-integration-samba-non-native-php7.4:latest
+#  commands:
+#    - smbd -D -FS &
+#    - ./autotest-external.sh sqlite smb-linux
+#    - wget https://codecov.io/bash -O codecov.sh
+#    - sh -c "if [ '$DRONE_BUILD_EVENT' = 'pull_request' ]; then bash codecov.sh -B $DRONE_BRANCH -C $DRONE_COMMIT -P $DRONE_PULL_REQUEST -t 117641e2-a9e8-4b7b-984b-ae872d9b05f5 -f tests/autotest-external-clover-sqlite.xml; fi"
+#    - sh -c "if [ '$DRONE_BUILD_EVENT' != 'pull_request' ]; then bash codecov.sh -B $DRONE_BRANCH -C $DRONE_COMMIT -t 117641e2-a9e8-4b7b-984b-ae872d9b05f5 -f tests/autotest-external-clover-sqlite.xml; fi"
+#    - sh -c "if [ '$DRONE_BUILD_EVENT' = 'pull_request' ]; then bash codecov.sh -B $DRONE_BRANCH -C $DRONE_COMMIT -P $DRONE_PULL_REQUEST -t 117641e2-a9e8-4b7b-984b-ae872d9b05f5 -f tests/autotest-external-clover-sqlite-smb-linux.xml; fi"
+#    - sh -c "if [ '$DRONE_BUILD_EVENT' != 'pull_request' ]; then bash codecov.sh -B $DRONE_BRANCH -C $DRONE_COMMIT -t 117641e2-a9e8-4b7b-984b-ae872d9b05f5 -f tests/autotest-external-clover-sqlite-smb-linux.xml; fi"
+#
+#trigger:
+#  branch:
+#    - master
+#    - stable*
+#  event:
+#    - pull_request
+#    - push
 
 ---
 kind: pipeline
@@ -2355,4 +2355,6 @@ trigger:
 #    - push
 ---
 kind: signature
-hmac: 329e06f74d523c1cf3ac1082654eba5c248761ed74faf41943da4c7f6dd50033
+hmac: f3a025a17ff926af23615f50fada10ecc0c4a2fd5802f5e05566115bd54e4565
+
+...

resources/codesigning/root.crl

@@ -1,8 +1,8 @@
 -----BEGIN X509 CRL-----
-MIIKBTCCCO0CAQEwDQYJKoZIhvcNAQELBQAwezELMAkGA1UEBhMCREUxGzAZBgNV
+MIIKGjCCCQICAQEwDQYJKoZIhvcNAQELBQAwezELMAkGA1UEBhMCREUxGzAZBgNV
 BAgMEkJhZGVuLVd1ZXJ0dGVtYmVyZzEXMBUGA1UECgwOTmV4dGNsb3VkIEdtYkgx
 NjA0BgNVBAMMLU5leHRjbG91ZCBDb2RlIFNpZ25pbmcgSW50ZXJtZWRpYXRlIEF1
-dGhvcml0eRcNMjUwOTMwMTUyMDU5WhcNMzUwODA5MTUyMDU5WjCCCAowEwICEAIX
+dGhvcml0eRcNMjUxMTA0MDgwODMzWhcNMzUwOTEzMDgwODMzWjCCCB8wEwICEAIX
 DTIxMDQxOTA5NTI0NVowEwICEBAXDTE2MTAxNzEyMDkxOVowEwICEBYXDTE3MTEy
 MzE3MzUyOVowEwICEBcXDTE3MDIyMDEwMDIzOFowEwICEBgXDTE5MDEzMDEzMDEy
 NVowEwICEBwXDTE4MDIwMjEwNTIzOVowEwICEB8XDTE5MDEzMDEzMDEzM1owEwIC
@@ -45,12 +45,12 @@ EjoXDTIzMTIxMTA4MzAxNVowEwICEksXDTI0MDEwMzE3NDkxMFowEwICElAXDTI0
 MDEyMzA3NTQ0MVowEwICElgXDTI0MDIwOTA4MzI1OVowEwICEloXDTI0MDkxODEz
 MjI1NVowEwICEl4XDTI0MDMyNzE3MDU0OFowEwICEoMXDTI1MDYwMzE2NDYzMVow
 EwICEo8XDTI1MDQwNDA3MjgwNlowEwICEqcXDTI1MDUyNzEwMTA0N1owEwICErkX
-DTI1MDkxMTE0MTIwOFowEwICEr8XDTI1MDkzMDE1MjA1N1qgMDAuMB8GA1UdIwQY
-MBaAFG3qbqqpNyw8iS0XPv1G7sOeeO10MAsGA1UdFAQEAgIQUTANBgkqhkiG9w0B
-AQsFAAOCAQEABG3Qs/ovEtWdPtUtnclBJnrbGRDr4FxtHezlZFoDBOFopt/oiAQ0
-SfyBX4kokYs2Uxau4tovjNztHXl2UeNNt52gARFTl0OYjE3w3oNMJwIi5d30Vv1b
-73taPWWDE34VEQ6mnl0M1/6AJGCZCGxsEqWmxy7ft+gmi97KPKxnls6NXGN/lyNe
-z/ayn++ZWHgrVD2lwAreQka3WGfyElsNZeryBSXxdKLdob3XLwA/aX2G8D6s7+Gg
-XPzpahVuSKrgauNelQjDNAxynj4inrlq+HxN04YHZw2irqKja9W4nZotiz/xr9C1
-+pZQtE2Ox1Ge4lZBq115CqYLWCVafu5gfQ==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==
 -----END X509 CRL-----