From 4023193aac8706830d99720de6628cc0d8eabd84 Mon Sep 17 00:00:00 2001 From: Max Rees Date: Tue, 2 Jun 2020 18:47:03 -0500 Subject: blacklist: distrust Symantec Root CAs https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=911289 --- blacklist.txt | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) diff --git a/blacklist.txt b/blacklist.txt index 88940c0..6ddc6b9 100644 --- a/blacklist.txt +++ b/blacklist.txt @@ -12,3 +12,27 @@ "MITM subCA 2 issued by Trustwave" "TURKTRUST Mis-issued Intermediate CA 1" "TURKTRUST Mis-issued Intermediate CA 2" + +# Distrusted Symantec Root CAs: +# https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=911289 +"GeoTrust Global CA" +"GeoTrust Primary Certification Authority" +"GeoTrust Primary Certification Authority - G2" +"GeoTrust Primary Certification Authority - G3" +"GeoTrust Universal CA" +"Thawte Premium Server CA" +"thawte Primary Root CA" +"thawte Primary Root CA - G2" +"thawte Primary Root CA - G3" +"Symantec Class 1 Public Primary Certification Authority - G4" +"Symantec Class 1 Public Primary Certification Authority - G6" +"Symantec Class 2 Public Primary Certification Authority - G4" +"Symantec Class 2 Public Primary Certification Authority - G6" +"Symantec Class 3 Public Primary Certification Authority - G4" +"Symantec Class 3 Public Primary Certification Authority - G6" +"VeriSign Class 1 Public Primary Certification Authority - G3" +"VeriSign Class 2 Public Primary Certification Authority - G3" +"VeriSign Class 3 Public Primary Certification Authority - G3" +"VeriSign Class 3 Public Primary Certification Authority - G4" +"VeriSign Class 3 Public Primary Certification Authority - G5" +"VeriSign Universal Root Certification Authority" -- cgit v1.2.3-70-g09d2