Sync ca-certificates 20090701 (main) from Debian unstable (main).

[Philipp Kern]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 affects ubuntu/ca-certificates
 status new
 importance wishlist
 subscribe ubuntu-main-sponsors

Please sync ca-certificates 20090701 (main) from Debian unstable (main).

Changelog since current karmic version 20090624build2:

ca-certificates (20090701) unstable; urgency=low

  * Reactivated "Equifax Secure Global eBusiness CA". (Closes: #534674)
    Rationale: The rogue collision CA has its validity period in the past.
    Thus it does not impose a risk upon us at the moment.
  * Restrict search for local certificates to add on files ending with '.crt'.
  * Canonicalize PEM names by applying the same set of substitions to
    local and other certificates like the Mozilla certdata dumper does.

 -- Philipp Kern <email address hidden> Wed, 01 Jul 2009 14:50:00 +0200

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkpMgAQACgkQ7Ro5M7LPzdghogCfTHENtbqMh/eWZOXMsGUa0jRO
OrwAoM1X+U8X///mTQf0OD7PpHuaY/qj
=vl3s
-----END PGP SIGNATURE-----

[Philipp Kern (pkern)]

I am upstream in Debian. The missing Equifax certificate breaks software in the archive (like Twitter clients), so this should really be pulled into Karmic.

[Daniel Holbach (dholbach)]

ACKed.

[Steve Langasek (vorlon)]

[Updating] ca-certificates (20090624build2 [Ubuntu] < 20090701 [Debian])
 * Trying to add ca-certificates...
  - <ca-certificates_20090701.tar.gz: downloading from http://ftp.debian.org/debian/>
  - <ca-certificates_20090701.dsc: downloading from http://ftp.debian.org/debian/>
I: ca-certificates [main] -> ca-certificates_20090624build2 [main].
Connection to cocoplum.canonical.com closed.