ca-certificates (20070303-0ubuntu3) hardy; urgency=low

  * Prevent the debconf question being forced twice for users we
    suspect to be affected. Also clean up the debconf value we
    use to do this in the postinst as it will not be needed post-hardy.

 -- James Westby <james.westby@canonical.com>  Tue, 08 Apr 2008 09:40:09 +0100

ca-certificates (20070303-0ubuntu2) hardy; urgency=low

  * Improve on the last fix by trying to fix up the problem for
    those that were affected. (LP: #153625)
    - If upgrading from a broken version and the file is empty,
      then
      - if the question was never seen then act like a default
        install
      - if the question was seen and we are in pt_BR locale then
        ask the question again defaulting to selected for all
        certificates.
      - else do nothing.
    - This covers the common cases well, but may require people
      who changed their locales to either answer a question they
      already answered, or to run dpkg-reconfigure manually.
    - All of this code should be dropped after hardy, as all upgrades
      must go through hardy, and everyone will have a fixed version
      then.

 -- James Westby <james.westby@canonical.com>  Tue, 01 Apr 2008 14:58:12 +0100

ca-certificates (20070303-0ubuntu1) hardy; urgency=low

  [ James Westby ]
  * Fix installation on pt_BR locales. This was caused by the .templates
    choices strings being marked for translation, and then a translator
    changing the substitution variable name. Thanks to Andreas Hasenack
    for spotting the problem, and Daniel Hahler for the fix. (LP: #153625)
    When merging this package check if the Debian upload fixed debian
    bug 472507 as that is where the issue is reported.

  [ Steve Langasek ]
  * Modify Maintainer value to match the DebianMaintainerField
    specification.

 -- Steve Langasek <steve.langasek@ubuntu.com>  Sat, 29 Mar 2008 05:54:49 +0000

ca-certificates (20070303) unstable; urgency=low

  * Add debconf.org crt. closes: Bug#342088
  * Add cacert class3 crt. closes: Bug#350282
  * Add debian/po/pt.po. closes: Bug#408183
  * Update debian/po/ru.po. closes: Bug#410770
  * Update debian/po/pt_BR.po. closes: Bug#403824
  * Add debian/po/gl.po. closes: Bug#407951

 -- Fumitoshi UKAI <ukai@debian.or.jp>  Sun,  4 Mar 2007 14:12:23 +0900

ca-certificates (20061027.2) unstable; urgency=low

  * Non-maintainer upload to fix an RC issue revealed by the last NMU.
  * Avoid cd to /etc/ssl/certs to removing hash symlinks
    Closes: #408469

 -- Christian Perrier <bubulle@debian.org>  Fri,  2 Feb 2007 07:23:27 +0100

ca-certificates (20061027.1) unstable; urgency=low

  * Non-maintainer upload to fix remaining l10n issues
  * Debconf translation updates:
    - Czech. Closes: #407807
    - Spanish. Closes: #401968
    - German. Closes: #396942
  * Add debconf-updatepo to the clean target in debian/rules
    to guarantee up-to-date PO(T) files

 -- Christian Perrier <bubulle@debian.org>  Mon, 22 Jan 2007 18:56:53 +0100


ca-certificates (20061027) unstable; urgency=low

  * sbin/update-ca-certificates:
    in fresh mode, rm symlinks only point to /usr/share/ca-certificates.
    preserve other symlinks. closes: Bug#387089
  * debian/po/nl.po: updated
    closes: Bug#386767
  * debian/po/fr.po: updated
    closes: Bug#386806
  * debian/po/da.po: updated
    closes: Bug#388018
    
 -- Fumitoshi UKAI <ukai@debian.or.jp>  Sat, 28 Oct 2006 02:28:50 +0900

ca-certificates (20060816) unstable; urgency=low

  * debian/control: explicitly mention that trustworthiness of certificate
    authorities is not evaluated.
    closes: Bug#350726
  * debian/templates: refine messages
    closes: Bug#309481
  * debian/postinst: remove tailing spaces to avoid unnecessary dpkg-old file.
    closes: Bug#349346
  * debian/control: libssl0.9.7->libssl0.9.8
    closes: Bug#345197
  * debian/postrm: remove .dpkg-old files
    closes: Bug#349351
  * debian/README.Debian: fix
    closes: Bug#354509
  * debian/postinst: fix typo
    closes: Bug#355271
  * debian/po/sv.po: added
    closes: Bug#330984
  * debian/po/es.po: added
    closes: Bug#334383
  * add new SPI CA certificate
    submitted by Michael C. Schultheiss <schultmc@debian.org>

 -- Fumitoshi UKAI <ukai@debian.or.jp>  Thu, 17 Aug 2006 13:12:27 +0900

ca-certificates (20050804) unstable; urgency=low

  * use ${misc:Depends} in debian/control for debconf
  * update description in debian/control
    closes: Bug#309547
  * update debian/po/vi.po
    closes: Bug#313186
  * update debian/po/de.po
    closes: Bug#313678

 -- Fumitoshi UKAI <ukai@debian.or.jp>  Thu,  4 Aug 2005 01:29:38 +0900

ca-certificates (20050518) unstable; urgency=high

  * fix ca-certificates.crt generationumask-sensitive and racy
    closes: Bug#296212
  * update mozilla/certdata.txt
    add: "Certum Root CA", "Comodo AAA Services root"
         "Comodo Secure Services root", 
	 "Comodo Trusted Services root",
	 "IPS Chained CAs root", "IPS CLASE1 root", "IPS CLASE3 root",
	 "IPS CLASEA1 root", "IPS CLASEA3 root", "IPS Servidores root"
	 "IPS Timestamping root",
	 "QuoVadis Root CA",
	 "Security Communication Root CA",
	 "Sonera Class 1 Root CA", "Sonera Class 2 Root CA",
	 "Staat der Nederlanden Root CA",
	 "TDC Internet Root CA", "TDC OCES Root CA", 
	 "UTN DATACorp SGC Root CA", "UTN USERFirst Email Root CA",
	 "UTN USERFirst Hardware Root CA", "UTN USERFirst Object Root CA"
  * add CACert.org's Root CA
    closes: Bug#213086, Bug#288293
  * add debian/po/vi.po
    closes: Bug#309480
  * add debian/po/cs.po
    closes: Bug#309019
  * write "How certificate will be accepted in ca-certificates package"
    in README.Debain
    
 -- Fumitoshi UKAI <ukai@debian.or.jp>  Wed, 18 May 2005 00:40:54 +0900

ca-certificates (20040809) unstable; urgency=low

  * previous version was not fixed Bug#255933 correctly.
    update-ca-certificates now remove symlinks of deselected entries 
    in ca-certificates.conf
    closes: Bug#255933

 -- Fumitoshi UKAI <ukai@debian.or.jp>  Mon,  9 Aug 2004 03:23:20 +0900

ca-certificates (20040808) unstable; urgency=low

  * run update-ca-certificates by /bin/sh -e
    closes: Bug#247581
  * update-ca-certificates remove symlinks of deselected entries 
    in ca-certificates.conf
    closes: Bug#255933
  * change default of trust_new_crts from 'ask' to 'yes'
    closes: Bug#218838, Bug#221527, Bug#236675, Bug#247509
  * refer libssl0.9.7 instead of libssl0.9.6 in Enhances:
    closes: Bug#251158
  * add brasil.gov.br certs
    closes: Bug#224612
  * add Signet CA Roots certs
    closes: Bug#233206
  * add QuoVadis CA Roots certs
    closes: Bug#250847
  * update pt_BR.po
    closes: Bug#218812
  * add da.po
    closes: Bug#235322
  * add ca.po
    closes: Bug#237124
  * add nl.po
    closes: Bug#23840
  * add de.po
    closes: Bug#250785
  * fix quote characters in template
    closes: Bug#255738
  * remove debian.org, because certs used in db.debian.org has been
    revoked due to debian.org crack incidents.
    db.debian.org uses certificates using spi-inc.org Root CA.

 -- Fumitoshi UKAI <ukai@debian.or.jp>  Sun,  8 Aug 2004 10:58:30 +0900

ca-certificates (20031007.1) unstable; urgency=low

  * NMU
  * Add brasil.gov.br/brasil.gov.br.crt, created from
    http://www.icpbrasil.gov.br/certificadoACRaiz.crt
  * Add debian/po/pt_BR.po: closes: Bug#224612

 -- Otavio Salvador <otavio@debian.org>  Thu,  5 Aug 2004 12:16:26 -0300

ca-certificates (20031007) unstable; urgency=low

  * add debian/po/ru.po: closes: Bug#214371

 -- Fumitoshi UKAI <ukai@debian.or.jp>  Tue,  7 Oct 2003 03:06:06 +0900

ca-certificates (20030924) unstable; urgency=low

  * add debian/po/ja.po: closes: Bug#212565

 -- Fumitoshi UKAI <ukai@debian.or.jp>  Wed, 24 Sep 2003 22:09:09 +0900

ca-certificates (20030916) unstable; urgency=low

  * add debian/po/fr.po: closes: Bug#211224, Bug#206769
  * debian/config: if new cert is asked, don't ask all available certs
    closes: Bug#211199

 -- Fumitoshi UKAI <ukai@debian.or.jp>  Wed, 17 Sep 2003 02:12:14 +0900

ca-certificates (20030915) unstable; urgency=low

  * debian/config.in: fix typo. closes: Bug#190990
  * add option for new CA certificates. closes: Bug#190989
  * switch to gettext-based debconf templates. closes: Bug#205782
  * update mozilla/certdata.txt from mozilla 1.4 release

 -- Fumitoshi UKAI <ukai@debian.or.jp>  Mon, 15 Sep 2003 01:15:04 +0900

ca-certificates (20030420) unstable; urgency=low

  * add README.Debian and update-ca-certificates(8). closes: Bug#189604
  * fix broken English in debconf template. closes: Bug#189606
  * don't remove symlinks in /etc/ssl/certs. closes: Bug#189607
  * preserve comments in /etc/ca-certificates.conf when upgrading.
    closes: Bug#189611

 -- Fumitoshi UKAI <ukai@debian.or.jp>  Mon, 21 Apr 2003 00:06:01 +0900

ca-certificates (20030415) unstable; urgency=medium

  * fix upgrade problem
    closes: Bug#188938, Bug#188940
  * purge debconf

 -- Fumitoshi UKAI <ukai@debian.or.jp>  Mon, 14 Apr 2003 23:00:58 +0900

ca-certificates (20030414) unstable; urgency=medium
    
  * certificates are installed in /usr/share/ca-certificates
    you can find md5sum of certs files. closes: Bug#170777
  
  * debconf to generate /etc/ca-certificates.conf
  * update-ca-certificates update /etc/ssl/certs according 
    /etc/ca-certificates.conf
    It also generate /etc/ssl/certs/ca-certificates.crt
    which is single-file version of certs.
    closes: Bug#158904
  
  * change extension from .pem to .crt in /usr/share/ca-certificates
    - /etc/mime.types:
      application/x-x509-ca-cert crt
    but it will be hardlink or copied in /etc/ssl/certs with .pem
    extension by update-ca-certificates.
    c_rehash requires .pem extension

  * Update certificate from mozilla 2:1.3-4
    mozilla/security/nss/lib/ckfw/builtins/certdata.txt 
    cefd05b299ea683fc6b1ce9ff1e23a3f  mozilla/certdata.txt

  * Add spi-inc.org/spi-ca.crt from http://www.spi-inc.org/secretary/
    33922a1660820e44812e7ddc392878cb  spi-inc.org/spi-ca.crt
    % openssl x509 -in spi-inc.org/spi-ca.crt -fingerprint -noout
    MD5 Fingerprint=ED:85:3A:FD:32:43:13:73:91:4D:94:06:C4:10:EB:E5

 -- Fumitoshi UKAI <ukai@debian.or.jp>  Mon, 14 Apr 2003 00:02:48 +0900

ca-certificates (20020323) unstable; urgency=low

  * Moved from non-US to main now that openssl has moved there.

 -- Fumitoshi UKAI <ukai@debian.or.jp>  Sun, 24 Mar 2002 03:11:54 +0900

ca-certificates (20020208) unstable; urgency=low

  * add db.debian.org certificate

 -- Fumitoshi UKAI <ukai@debian.or.jp>  Fri,  8 Feb 2002 23:46:11 +0900

ca-certificates (20020112) unstable; urgency=low

  * upload to non-US instead of main, because it depends on openssl
    (it uses c_rehash in openssl in maintainer scripts)

 -- Fumitoshi UKAI <ukai@debian.or.jp>  Sun, 13 Jan 2002 04:30:28 +0900

ca-certificates (20020107) unstable; urgency=low

  * Initial Release. closes: Bug#126586

 -- Fumitoshi UKAI <ukai@debian.or.jp>  Mon,  7 Jan 2002 21:16:51 +0900

