summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMax Rees <maxcrees@me.com>2020-06-02 18:47:03 -0500
committerMax Rees <maxcrees@me.com>2020-06-02 19:00:39 -0500
commit4023193aac8706830d99720de6628cc0d8eabd84 (patch)
tree22e466c3ad18092c5467bb03172923e30d4a2c1b
parenta4c6115d9202e1d1ecdec25fa1a665fe8d857cc5 (diff)
downloadca-certificates-4023193aac8706830d99720de6628cc0d8eabd84.tar.gz
ca-certificates-4023193aac8706830d99720de6628cc0d8eabd84.tar.bz2
ca-certificates-4023193aac8706830d99720de6628cc0d8eabd84.tar.xz
ca-certificates-4023193aac8706830d99720de6628cc0d8eabd84.zip
blacklist: distrust Symantec Root CAs
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=911289
-rw-r--r--blacklist.txt24
1 files changed, 24 insertions, 0 deletions
diff --git a/blacklist.txt b/blacklist.txt
index 88940c0..6ddc6b9 100644
--- a/blacklist.txt
+++ b/blacklist.txt
@@ -12,3 +12,27 @@
"MITM subCA 2 issued by Trustwave"
"TURKTRUST Mis-issued Intermediate CA 1"
"TURKTRUST Mis-issued Intermediate CA 2"
+
+# Distrusted Symantec Root CAs:
+# https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=911289
+"GeoTrust Global CA"
+"GeoTrust Primary Certification Authority"
+"GeoTrust Primary Certification Authority - G2"
+"GeoTrust Primary Certification Authority - G3"
+"GeoTrust Universal CA"
+"Thawte Premium Server CA"
+"thawte Primary Root CA"
+"thawte Primary Root CA - G2"
+"thawte Primary Root CA - G3"
+"Symantec Class 1 Public Primary Certification Authority - G4"
+"Symantec Class 1 Public Primary Certification Authority - G6"
+"Symantec Class 2 Public Primary Certification Authority - G4"
+"Symantec Class 2 Public Primary Certification Authority - G6"
+"Symantec Class 3 Public Primary Certification Authority - G4"
+"Symantec Class 3 Public Primary Certification Authority - G6"
+"VeriSign Class 1 Public Primary Certification Authority - G3"
+"VeriSign Class 2 Public Primary Certification Authority - G3"
+"VeriSign Class 3 Public Primary Certification Authority - G3"
+"VeriSign Class 3 Public Primary Certification Authority - G4"
+"VeriSign Class 3 Public Primary Certification Authority - G5"
+"VeriSign Universal Root Certification Authority"