From cd1840493fd99c617bbbd3ab6ee41625eceeb7cb Mon Sep 17 00:00:00 2001 From: roytam1 Date: Sat, 28 Jun 2025 00:41:36 +0800 Subject: [PATCH] nss: update certdata and bump ckbi version to 2.78 --- security/nss/lib/ckfw/builtins/certdata.txt | 6 +++++- security/nss/lib/ckfw/builtins/nssckbi.h | 4 ++-- 2 files changed, 7 insertions(+), 3 deletions(-) diff --git a/security/nss/lib/ckfw/builtins/certdata.txt b/security/nss/lib/ckfw/builtins/certdata.txt index 82fca6c761..e85458bcd3 100644 --- a/security/nss/lib/ckfw/builtins/certdata.txt +++ b/security/nss/lib/ckfw/builtins/certdata.txt @@ -3323,9 +3323,13 @@ CKA_VALUE MULTILINE_OCTAL \201\370\021\234 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE -CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +# For Server Distrust After: Tue Apr 15 23:59:59 2025 +CKA_NSS_SERVER_DISTRUST_AFTER MULTILINE_OCTAL +\062\065\060\064\061\065\062\063\065\071\065\071\132 +END CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE + # Trust for "ePKI Root Certification Authority" # Issuer: OU=ePKI Root Certification Authority,O="Chunghwa Telecom Co., Ltd.",C=TW # Serial Number:15:c8:bd:65:47:5c:af:b8:97:00:5e:e4:06:d2:bc:9d diff --git a/security/nss/lib/ckfw/builtins/nssckbi.h b/security/nss/lib/ckfw/builtins/nssckbi.h index fdaf066a02..bc5ff68761 100644 --- a/security/nss/lib/ckfw/builtins/nssckbi.h +++ b/security/nss/lib/ckfw/builtins/nssckbi.h @@ -46,8 +46,8 @@ * It's recommend to switch back to 0 after having reached version 98/99. */ #define NSS_BUILTINS_LIBRARY_VERSION_MAJOR 2 -#define NSS_BUILTINS_LIBRARY_VERSION_MINOR 76 -#define NSS_BUILTINS_LIBRARY_VERSION "2.76" +#define NSS_BUILTINS_LIBRARY_VERSION_MINOR 78 +#define NSS_BUILTINS_LIBRARY_VERSION "2.78" /* These version numbers detail the semantic changes to the ckfw engine. */ #define NSS_BUILTINS_HARDWARE_VERSION_MAJOR 1