igtf-policy-bundle (1.134-1~bpo12+1) bookworm-backports; urgency=medium
* Backport for bookworm
-- Dennis van Dok <dennisvd@nikhef.nl> Mon, 17 Mar 2025 11:43:22 +0100
igtf-policy-bundle (1.134-1) unstable; urgency=medium
* New upstream release:
* New ANSPGrid CA 2 roll-over for root-issuer key pair (BR)
* Withdrawn discontinued AC-GRID-FR series authorities (FR)
-- Dennis van Dok <dennisvd@nikhef.nl> Wed, 12 Mar 2025 12:30:08 +0100
igtf-policy-bundle (1.133-1~bpo12+1) bookworm-backports; urgency=medium
* Backport for bookworm
-- Dennis van Dok <dennisvd@nikhef.nl> Wed, 05 Mar 2025 11:33:49 +0100
igtf-policy-bundle (1.133-1) unstable; urgency=medium
* New upstream release:
* Updated re-issued GridCanada root with extended validity period (CA)
* Added GEANT TCS Generation 5 TLS and Auth ICAs and corresponding HARICA
and private trust roots (EU)
* updated SHA-256 root CA for RDIG mitigating EL9/FedoraCore deprication
* MARGI put on hold due to domainname resolution issues (MK)
-- Dennis van Dok <dennisvd@nikhef.nl> Mon, 17 Feb 2025 12:06:35 +0100
igtf-policy-bundle (1.132-1) unstable; urgency=medium
* New upstream release:
* added new trust anchor for TRGRID transition (TR)
-- Dennis van Dok <dennisvd@nikhef.nl> Tue, 17 Dec 2024 12:02:41 +0100
igtf-policy-bundle (1.131-2) unstable; urgency=medium
* Rebuild for source-only upload
-- Dennis van Dok <dennisvd@nikhef.nl> Tue, 29 Oct 2024 20:48:41 +0100
igtf-policy-bundle (1.131-1) unstable; urgency=medium
* New upstream release:
* removed discontinued HKU-CA-2 authority (HK)
* removed obsolete 3rd generation TCS intermediates (EU)
-- Dennis van Dok <dennisvd@nikhef.nl> Thu, 24 Oct 2024 10:49:44 +0200
igtf-policy-bundle (1.130-1) unstable; urgency=medium
* New upstream release:
* resolve subjnectDN nameformat compatibility issues trust anchor metadata
-- Dennis van Dok <dennisvd@nikhef.nl> Sat, 29 Jun 2024 13:01:44 +0200
igtf-policy-bundle (1.129-1) unstable; urgency=medium
* New upstream release:
* updated CRL URL location for MREN CA (ME)
* removed discontinued TSU-GE GRENA CA (GE)
* removed suspended BYGCA (BY)
* removed discontinued LIP CA (PT)
* removed obsolete DT transitional CAs (AE)
-- Dennis van Dok <dennisvd@nikhef.nl> Mon, 24 Jun 2024 13:46:11 +0200
igtf-policy-bundle (1.128-1~bpo12+1) bookworm-backports; urgency=medium
* Backport for bookworm
-- Dennis van Dok <dennisvd@nikhef.nl> Mon, 08 Apr 2024 11:51:46 +0200
igtf-policy-bundle (1.128-1) unstable; urgency=medium
* updated CRL download URL for ArmeSFo (AM)
-- Dennis van Dok <dennisvd@nikhef.nl> Wed, 13 Mar 2024 16:04:54 +0100
igtf-policy-bundle (1.127-1) unstable; urgency=medium
* added supplementary issuing CA Issuing CA IGTF - C5 - 1 for eMudhra (IN)
* removed discontinued QuoVadis CAs QuoVadis-Grid-ICA-G2 QuoVadis-Root-CA2G3
QuoVadis-Root-CA2 and QuoVadis-Root-CA3G3 (BM)
-- Dennis van Dok <dennisvd@nikhef.nl> Tue, 20 Feb 2024 10:22:09 +0100
igtf-policy-bundle (1.126-1) unstable; urgency=medium
* New upstream release:
* removed replaced InCommon IGTF Server CA and associated Comodo RSA CA (US)
* removed discontinued UNLPGrid CA (CL)
-- Dennis van Dok <dennisvd@nikhef.nl> Mon, 18 Dec 2023 15:21:47 +0100
igtf-policy-bundle (1.125-1) unstable; urgency=medium
* New upstream release:
* Updated root certificate ArmeSFo CA with extended validity (AM)
-- Dennis van Dok <dennisvd@nikhef.nl> Fri, 01 Dec 2023 09:38:33 +0100
igtf-policy-bundle (1.124-1) unstable; urgency=medium
* New upstream release:
* updated contact meta-data for ArmeSFo authority (AM)
* removed discontinued AEGIS authority (RS)
* removed suspended KENET Root and issuing CAs (KE)
* removed suspended SDG-G2 authority (CN)
* removed suspended CNIC authority (CN)
* removed all four discontinued DigitalTrust CAs operated by their issuer (AE)
-- Dennis van Dok <dennisvd@nikhef.nl> Mon, 30 Oct 2023 14:19:35 +0100
igtf-policy-bundle (1.123-1) unstable; urgency=medium
* New upstream release:
* Add ECC private trust hierarchy for GEANT (Research and Education) TCS (EU)
* Added accredited private trust eMudhra IGTF root and issuers (IN)
-- Dennis van Dok <dennisvd@nikhef.nl> Tue, 05 Sep 2023 13:23:44 +0200
igtf-policy-bundle (1.122-1) unstable; urgency=medium
* New Upstream release:
* Added private trust hierarchy for GEANT (Research and Education) TCS (EU)
* Added accredited eMudhra joint public trust root and issuing CAs (IN)
* Added private trust eMudhra IGTF root and issuers as experimental (IN, US)
* Closes: 1045502
-- Dennis van Dok <dennisvd@nikhef.nl> Mon, 14 Aug 2023 09:10:08 +0200
igtf-policy-bundle (1.121-1) unstable; urgency=medium
* New upstream release:
* Added accredited (classic) InCommon RSA IGTF Server CA 3 under the
Sectigo USERTrust RSA root, for which namespaces have been updated (US)
-- Dennis van Dok <dennisvd@nikhef.nl> Mon, 19 Jun 2023 09:15:22 +0200
igtf-policy-bundle (1.120-1) unstable; urgency=medium
* New upstream release:
* Added transitional CDP mirror URLs for retiring DigitalTrust CAs (AE)
* Removed discontinued NIIF-Root-CA-2 (HU)
* Removed expiring GermanGrid (GridKA CrossGrid) CA (DE)
-- Dennis van Dok <dennisvd@nikhef.nl> Fri, 26 May 2023 12:08:51 +0200
igtf-policy-bundle (1.119-1) unstable; urgency=medium
* New upstream release:
* Updated UKeScience Root (2007) with consistent string encodings (UK)
* Removed obsolete SHA1 subordinates DigiCertGridTrustCA-Classic
and DigiCertGridCA-1-Classic from DigiCert, reflected in RPDNC namespaces
* Experimental (non-accredited) new InCommon RSA IGTF Server CA 2 (ICA under
Sectigo USERTrust RSA root, for which namespaces have been updated) (US)
-- Dennis van Dok <dennisvd@nikhef.nl> Mon, 13 Mar 2023 12:15:46 +0100
igtf-policy-bundle (1.118-1) unstable; urgency=medium
* New upstream release:
* [Changes from 1.116 to 1.117 (27 February 2023)
* Updated GridCanada CA with re-issued SHA-2 based root (CA)
* Updated CILogon basic, silver, and openid with re-issued SHA-2 certs (US)
* Updated UKeScience Root (2007) re-issued with SHA-2, retired 2A ICA (UK)
* [Changes from 1.116 to 1.117 (29 August 2022)]
* Add new intermediate ICA DigiCert Grid-TLS (US)
* Add new intermediate ICA DigiCert Grid-Client-RSA2048-SHA256-2022-CA1 (US)
* Removed discontinued NCSA-slcs-2013 following end of XSEDE (US)
* Removed discontinued PSC-Myproxy-CA following end of XSEDE (US)
* RPM packaging: rpm packages are now signed using a SHA-256 digest, file
digests using algo 8 (SHA-256), and the yum/dnf listings are signed with
SHA-256 as well. This removes support for yum-based distributions <=EL5
(for which ELS ended in November 2020), but allows installation of
packages on EL9 (Rocky9, AlmaLinux9, &c) that require SHA-256.
-- Dennis van Dok <dennisvd@nikhef.nl> Mon, 27 Feb 2023 15:09:19 +0100
igtf-policy-bundle (1.116-1) unstable; urgency=medium
* New upstream release:
* Updated intermediate CERN Grid CA ICA with extended validity (CERN)
-- Dennis van Dok <dennisvd@nikhef.nl> Tue, 26 Apr 2022 09:11:28 +0200
igtf-policy-bundle (1.115-1) unstable; urgency=medium
* New upstream release:
* Removed obsolete CNRS2 CAs, superseded by AC-GRID-FR hierarchy (FR)
* Add supplementary BCDR download location for UGRID-G2 CRL (UA)
* Extended validity period of HPCI CA (JP)
-- Dennis van Dok <dennisvd@nikhef.nl> Tue, 29 Mar 2022 14:46:39 +0200
igtf-policy-bundle (1.114-2) unstable; urgency=medium
* Prevent erasing symbolic links on reconfigure. Closes: 1006410
-- Dennis van Dok <dennisvd@nikhef.nl> Fri, 25 Feb 2022 10:57:51 +0100
igtf-policy-bundle (1.114-1) unstable; urgency=medium
* New upstream release:
* Extended validity for SlovakGrid issuing CA (SK)
-- Dennis van Dok <dennisvd@nikhef.nl> Tue, 18 Jan 2022 17:32:21 +0100
igtf-policy-bundle (1.113-1) unstable; urgency=medium
* New upstream release:
* [Changes from 1.112 to 1.113 (4 October 2021)]
* Suspended MD-GRID CA due to network resolution issues (MD)
* [Changes from 1.111 to 1.112 (16 August 2021)]
* Updated ANSPGrid CA with extended validity date (BR)
* [Changes from 1.110 to 1.111 (24 May 2021)]
* Removed discontinued NERSC-SLCS CA (US)
* Removed discontinued MYIFAM CA (MY)
* [Changes from 1.109 to 1.110 (22 March 2021)]
* Removed INFN-CA-2015 that has disappeared operationally (IT)
-- Dennis van Dok <dennisvd@nikhef.nl> Thu, 30 Sep 2021 16:16:58 +0200
igtf-policy-bundle (1.109-1) unstable; urgency=medium
* New upstream release:
* Removed discontinued DM private IGTF classic CAs (AE)
* Removed obsolete QuoVadis-Root-CA1, under which no ICAs are left (BM)
* Updated QV Grid ICA G2 intermediary following its re-issuance (BM)
-- Dennis van Dok <dennisvd@nikhef.nl> Mon, 18 Jan 2021 11:27:53 +0100
igtf-policy-bundle (1.108-1) unstable; urgency=medium
* New upstream release:
* Added DigitalTrust classic IGTF specific and public trust IGTF CAs (AE)
* Updated PCS MyProxy SLCS CRL URL location (US)
-- Dennis van Dok <dennisvd@nikhef.nl> Thu, 17 Dec 2020 11:44:43 +0100
igtf-policy-bundle (1.107-1) unstable; urgency=medium
* New upstream release:
* retired DarkMatterSecureCA and DarkMatterAssuredCA (AE)
* removed superseded PolishGrid CA (PL)
* Added TCS G4 ECC trust anchors to accredited set (EU)
-- Dennis van Dok <dennisvd@nikhef.nl> Mon, 10 Aug 2020 16:39:42 +0200
igtf-policy-bundle (1.106-1) unstable; urgency=medium
* New upstream release:
* Removed expiring AddTrust External CA Root (US)
* Updated legacy DutchGrid (Nikhef MS) Root CA (NL)
* Removed discontinued NCSA-tfca-2013 CA (US)
* Added TCS G4 ECC trust anchors to experimental area (EU)
-- Dennis van Dok <dennisvd@nikhef.nl> Mon, 04 May 2020 09:19:08 +0200
igtf-policy-bundle (1.105-2) UNRELEASED; urgency=medium
* Trim trailing whitespace.
* Use secure copyright file specification URI.
* Merge upstream signing key files.
-- Debian Janitor <janitor@jelmer.uk> Tue, 28 Apr 2020 18:08:10 +0000
igtf-policy-bundle (1.105-1) unstable; urgency=medium
* New upstream release:
* Discontinued CERN-LCG-IOTA-CA following decommissioning by authority (CERN)
* Added new G4 intermediates for the GEANT TCS service and supporting
self-signed USERTrust RSA Root (EU)
* Updated AddTrust External CA Root signing policy to support legacy UTN
chains for GEANT TCS G4 (EU)
-- Dennis van Dok <dennisvd@nikhef.nl> Tue, 31 Mar 2020 13:07:52 +0200
igtf-policy-bundle (1.104-1) unstable; urgency=medium
* New upstream release:
* Reinstated AddTrust External CA Root in parallel to Comodo RSA CA
to ease transitionary period (US)
-- Dennis van Dok <dennisvd@nikhef.nl> Thu, 30 Jan 2020 11:10:00 +0100
igtf-policy-bundle (1.103-1) unstable; urgency=medium
* New upstream release:
* Updated contact addresses for DigiCert (US)
* Regrafted InCommon IGTF Server CA onto self-signed Comodo RSA CA (US)
* Discontinued superfluous AddTrust External CA Root (US)
* Discontinued AustrianGrid CA (AT)
-- Dennis van Dok <dennisvd@nikhef.nl> Mon, 27 Jan 2020 14:37:11 +0100
igtf-policy-bundle (1.102-1) unstable; urgency=medium
* New upstream release:
* Added CESNET-CA-4 ICA accredited classic CA for issuer roll-over (CZ)
-- Dennis van Dok <dennisvd@nikhef.nl> Mon, 14 Oct 2019 12:18:16 +0200
igtf-policy-bundle (1.101-2) unstable; urgency=medium
* Rebuild for a source-only upload
-- Dennis van Dok <dennisvd@nikhef.nl> Thu, 05 Sep 2019 10:48:50 +0200
igtf-policy-bundle (1.101-1) unstable; urgency=medium
* New upstream release:
* [Changes from 1.99 to 1.101 (24 June 2019, note: 1.100 was not issued)]
- added new trust anchor for PolishGrid (2019) for key roll-over (PL)
- withdrawn discontinued CILogon OSG CA (US)
* [Changes from 1.98 to 1.99 (27 May 2019)]
- withdrawn superseded HKU CA (HK)
- withdrawn discontinued CyGrid CA following migration to TCS (CY)
-- Dennis van Dok <dennisvd@nikhef.nl> Mon, 17 Jun 2019 16:38:17 +0200
igtf-policy-bundle (1.98-1) unstable; urgency=medium
* New upstream release:
- withdrawn superseded IRAN-GRID authority (IR)
-- Dennis van Dok <dennisvd@nikhef.nl> Mon, 29 Apr 2019 10:31:00 +0200
igtf-policy-bundle (1.97-1) unstable; urgency=medium
* New upstream release:
* [Changes from 1.96 to 1.97 (25 Mar 2019)]
- temporarily withdrawn EG-GRID 4a96b1ea for network availability
reasons (EG)
* [Changes from 1.95 to 1.96 (25 Feb 2019)]
- withdrawn superseded QuoVadis-Grid-ICA (1st gen) CA (BM)
- added new trust anchor MD-Grid-CA-T for rollover of existing CA (MD)
- discontinued expiring 2009 series MD-Grid-CA (MD)
-- Dennis van Dok <dennisvd@nikhef.nl> Tue, 26 Mar 2019 11:22:57 -0700
igtf-policy-bundle (1.95-1) unstable; urgency=medium
* New upstream release:
- Updated namespaces and signing_policy files for CILogon
Silver CA to permit DNs without "/C=US" (US)
-- Dennis van Dok <dennisvd@nikhef.nl> Wed, 28 Nov 2018 16:13:04 +0100
igtf-policy-bundle (1.94-1) unstable; urgency=medium
* New upstream release:
- extended validity period for the ArmeSFo CA (AM)
- withdrawn expiring DFN-SLCS CA (DE)
-- Dennis van Dok <dennisvd@nikhef.nl> Tue, 30 Oct 2018 10:07:06 +0100
igtf-policy-bundle (1.93-1) unstable; urgency=medium
* New upstream release:
- Updated contact information for HellasGrid-CA (GR)
- Removed superseded IGCA CA (IN)
-- Dennis van Dok <dennisvd@nikhef.nl> Wed, 24 Oct 2018 14:52:02 +0200
igtf-policy-bundle (1.92-1) unstable; urgency=medium
* New upstream release:
- Added HKU CA 2 trust anchor during transitioning period (HK)
-- Dennis van Dok <dennisvd@nikhef.nl> Fri, 29 Jun 2018 13:57:12 +0200
igtf-policy-bundle (1.91-1) unstable; urgency=medium
* New upstream release:
- Updated MREN CA with extended validity period (ME)
-- Dennis van Dok <dennisvd@nikhef.nl> Tue, 29 May 2018 11:47:37 +0200
igtf-policy-bundle (1.90-1) unstable; urgency=medium
* New upstream release:
- Added new Grid-FR hierarchy for Renater (AC-GRID-FR series) (FR)
- Added new GARUDAINDIA2 root for key roll-over IGCA (IN)
- Updated contact metadata for UNAM trust anchors (MX)
* [Debconf translation updates]
* Brazilian Portuguese (Adriano Rafael Gomes). Closes: #891164
-- Dennis van Dok <dennisvd@nikhef.nl> Wed, 04 Apr 2018 12:08:22 +0200
igtf-policy-bundle (1.89-1) unstable; urgency=medium
* New upstream release:
- Discontinued expiring UGRID (2008) root CA (UA)
-- Dennis van Dok <dennisvd@nikhef.nl> Tue, 30 Jan 2018 12:23:37 +0100
igtf-policy-bundle (1.88-1) unstable; urgency=medium
* New upstream releases:
- [1.88 update]
- updated UKeScience 2B ICA based on a SHA-2 family digest (UK)
- added new PKIUNAMgrid (2017) trust anchor for roll-over (MX)
- [1.87 update]
- added new accredited classic DarkMatter Private Root G4 and ICA (AE)
- updated PK-Grid-2007 trust anchor with extended validity period (PK)
- extended validity period for UNAMgrid-ca trust anchor (MX)
- [1.86 update]
- updated MaGrid CA with extended validity period (MA)
- removed discontinued pkIRISGrid CA (ES)
* Undo the integration with ca-certificates. Closes: #880419
* Reclaim ownership of /etc/grid-security/certificates. Closes: #875406
* [Debconf translation updates]
* German (Stefan Schroeder). Closes: #870397
* Czech (Michal Simunek). Closes: #871035
* Italian (Beatrice Torracca). Closes: #872750
-- Dennis van Dok <dennisvd@nikhef.nl> Tue, 28 Nov 2017 14:21:46 +0100
igtf-policy-bundle (1.85-1) unstable; urgency=medium
* New upstream release:
- Updated URL domain information for CyGrid (CY)
* Create relative symbolic links for hash files. Closes: #868776
* Make the installation location configurable. Closes: #820259
* [Debconf translation updates]
* Spanish (Isaac Quiroz)
* Portuguese (Américo Monteiro). Closes: #869689
* Russian (Yuri Kozlov). Closes: #869811
* Swedish (Martin Bagge). Closes: #869962
* Indonesian (Dio Oktarianos Putra). Closes: #870136
* French (Julien Patriarca). Closes: #870303
-- Dennis van Dok <dennisvd@nikhef.nl> Tue, 01 Aug 2017 14:39:31 +0200
igtf-policy-bundle (1.84-1) unstable; urgency=medium
* New upstream release:
- Updated ROSA root certificate with extended 20yr valitity (RO)
- Updated contact details for CyGrid CA following transition to CYNET (CY)
- Removed obsoleted KISTI-2007 trust anchor - replaced by KISTIv3 (KR)
- Removed expiring LACGrid trust anchor a9082267 (BR)
- Added UK Pathfinder AAAI CA 1 to unaccredited (misc) area (UK)
-- Dennis van Dok <dennisvd@nikhef.nl> Mon, 26 Jun 2017 12:38:55 +0200
igtf-policy-bundle (1.83-1) unstable; urgency=medium
* New upstream release:
- Added new trust anchor for accredited KISTI CA v3 (KR)
- Removed obsolete GEANT TCS G1 and G2 (old Comodo-backed) trust anchors:
UTN-USERFirst-Hardware TERENA-eScience-SSL-CA AAACertificateServices
UTNAAAClient TERENAeSciencePersonalCA UTN-USERTrust-RSA-CA
TERENA-eScience-SSL-CA-2 TERENAeSciencePersonalCA2 (EU)
-- Dennis van Dok <dennisvd@nikhef.nl> Mon, 29 May 2017 12:38:19 +0200
igtf-policy-bundle (1.82-1) unstable; urgency=medium
* New upstream release:
- Added new G2 UGrid trust anchor (UA)
- Extended validity for AEGIS CA (RS)
- Withdrawn discontinued FNAL KCA (US)
- Extended valitity for REUNA CA (CL)
-- Dennis van Dok <dennisvd@nikhef.nl> Mon, 27 Mar 2017 12:38:38 +0200
igtf-policy-bundle (1.81-1) unstable; urgency=medium
* New upstream release:
- Added accredited DarkMatter classic QV-intermediate ICAs (AE)
including QuoVadis Root CA 2 G3 and Root CA 3 G3 higher level CAs (BM)
- Updated contact information for EUN EG-GRID CA (EG)
- Withdrawn classic UKeScienceCA-2A in advance of repurposing (UK)
-- Dennis van Dok <dennisvd@nikhef.nl> Mon, 27 Feb 2017 12:23:46 +0100
igtf-policy-bundle (1.80-1) unstable; urgency=medium
* New upstream release:
- Discontinued BEGrid2008 (BELNET) classic authority (BE)
-- Dennis van Dok <dennisvd@nikhef.nl> Tue, 31 Jan 2017 09:56:25 +0100
igtf-policy-bundle (1.79-1) unstable; urgency=medium
* New upstream release:
- Updated UNLPGrid CA with extended validity period (AR)
- Fix regular expressions in CILogon and NCSA CA namespaces files (US)
- Included rollover CA IRAN-GRID-CGC-G2 (IR)
- Corrected an incorrect line in selected info files for DigiCert (US)
- Discontinued expiring NECTEC CA (TH)
- [1.78 update]
- Removed superseded INFN-CA-2006 CA (IT)
* [Debconf translation updates]
* Brazilian Portugese (Adriano Rafael Gomes). Closes: #844674
-- Dennis van Dok <dennisvd@nikhef.nl> Mon, 21 Nov 2016 10:57:56 +0100
igtf-policy-bundle (1.77-1) unstable; urgency=medium
* New upstream release:
- Updated namespaces and signing_policy files for CILogon Basic CA to
permit DNs without "/C=US" (US)
- Added G2 series (sha-2) QuoVadis Root 2 and Grid ICA G2 (BM)
- Removed discontinued UniandesCA (CO)
-- Dennis van Dok <dennisvd@nikhef.nl> Mon, 26 Sep 2016 12:00:12 +0200
igtf-policy-bundle (1.76-1) unstable; urgency=medium
* New upstream release:
- Added accredited RCauth.eu IOTA CA and associated root (EU)
- Added DutchGrid Root G1 (NL)
-- Dennis van Dok <dennisvd@nikhef.nl> Wed, 10 Aug 2016 11:15:20 +0200
igtf-policy-bundle (1.75-1) unstable; urgency=medium
* New upstream release:
- Discontinued expired UFF BrGrid CA (BR)
- Discontinued expired HellasGrid-2006 and associated Root (GR)
-- Dennis van Dok <dennisvd@nikhef.nl> Mon, 27 Jun 2016 10:46:12 +0200
igtf-policy-bundle (1.74-1) unstable; urgency=medium
* New upstream release:
- Removed superseded NorduGrid (2006) CA (DK)
- Added HellasGrid 2016 CA (GR)
-- Dennis van Dok <dennisvd@nikhef.nl> Tue, 17 May 2016 11:12:10 +0200
igtf-policy-bundle (1.73-1) unstable; urgency=medium
* New upstream release:
- Updated key pair for SDG CA G2 (CN)
- Revised URL to point to http endpoint for CERN IOTA ICA CRL (CERN)
- Added experimental DCA Root G1 and RCauth.eu Pilot ICA G1 (NL, EU)
-- Dennis van Dok <dennisvd@nikhef.nl> Tue, 29 Mar 2016 12:57:13 +0200
igtf-policy-bundle (1.72-1) unstable; urgency=medium
* New upstream release:
- Added roll-over subordinate for the SDG CA G2 (CN)
- Added CERN LCG IOTA CA (CERN)
- Updated PSC MyProxy CA with extended validity (US)
-- Dennis van Dok <dennisvd@nikhef.nl> Tue, 01 Mar 2016 13:47:09 +0100
igtf-policy-bundle (1.71-1) unstable; urgency=medium
* New upstream release:
- Added accredited classic KENET ICA and associated Root (KE)
- Added roll-over subordinate for the SDG CA G2 (CN)
- Removed expiring SDG CA (CN)
- Updated CyGrid Root CA with extended validity period (CY)
- Updated BG-ACAD-CA with extended validity period (BG)
-- Dennis van Dok <dennisvd@nikhef.nl> Mon, 25 Jan 2016 11:53:11 +0100
igtf-policy-bundle (1.70-1) unstable; urgency=medium
* New upstream release:
- Updated CRL URL hosted by KIT for ArmeSFO (AM)
- Added NorduGrid 2015 trust anchor (DK,NO,SE,FI,IS)
- Discontinued superseded DigiCertGridCA-1G2-Classic (US)
-- Dennis van Dok <dennisvd@nikhef.nl> Wed, 25 Nov 2015 17:30:24 +0100
igtf-policy-bundle (1.69-1) unstable; urgency=medium
* New upstream release:
- Added new INFN "2015" CA as roll-over of the 2006 instance (IT)
- Added new CILogon OSG CA (US)
- Discontinued BalticGrid CA (EE)
-- Dennis van Dok <dennisvd@nikhef.nl> Mon, 26 Oct 2015 15:00:25 +0100
igtf-policy-bundle (1.68-1) unstable; urgency=medium
* New upstream release:
- Discontinued CALG CA (LV)
- Added experimental KENET CAs (KE)
-- Dennis van Dok <dennisvd@nikhef.nl> Tue, 06 Oct 2015 09:50:00 +0200
igtf-policy-bundle (1.67-1) unstable; urgency=high
* New upstream release:
(31 August 2015 - release jump, skipping 1.66)
- Discontinued NCSA-mics CA (US)
- Withdrawn G2 root for IPM CA (IR)
-- Dennis van Dok <dennisvd@nikhef.nl> Mon, 31 Aug 2015 13:56:48 +0200
igtf-policy-bundle (1.65-1) unstable; urgency=low
* New upstream release:
- Discontinued NAREGI CA (JP)
- Added addition G2 root for IPM CA (IR)
- Added new subjectdn attribute to the trust anchor and profile
meta-data files to aid monitoring and authentication-profile based
access control mechanism use cases. See
http://wiki.eugridpma.org/Main/IGTFInfoFile (ALL)
-- Dennis van Dok <dennisvd@nikhef.nl> Mon, 22 Jun 2015 12:50:56 +0200
igtf-policy-bundle (1.64-1) unstable; urgency=medium
* New upstream release:
- Extended validity period of the BalticGrid CA (EE,LT,LV)
- Removed obsolete NICS-MyProxy CA (US)
- Added revised DigiCertGridCA-1G2-Classic-2015 Classic CA (US)
- Updated CRL URL information for TCS G3 by preferring secondary URI (EU)
- Updated RDIG CA with extended validity self-signed root (RU)
- Removed obsolete NCSA-slcs CA, replaced by NCSA-slcs-2013 (US)
-- Dennis van Dok <dennisvd@nikhef.nl> Tue, 26 May 2015 09:28:34 +0200
igtf-policy-bundle (1.63-1) unstable; urgency=low
* New upstream release:
- Removed obsoleted and replaced NIIF CA (HU)
- Extended validity period of the KEK CA (JP)
- Removed obsoleted d254cc30/CERN-Root 1d879c6c/CERN-TCA anchors (CERN)
- Updated RPDNC namespaces to permit DigiCert Grid Trust G2 ICAs for
DigiCert Assured ID Root CA (US)
- Updated RPDNC namespaces and signing_policy files for G2 series
DigiCert Grid CAs pending ICA reissuance for reverse RDN issue (US)
- Nomalised cond_subject syntax for multiple signing policy files
cilogon-basic cilogon-silver InCommon-IGTF-Server-CA NCSA-slcs-2013
NCSA-tfca-2013 Comodo-RSA-CA
-- Dennis van Dok <dennisvd@nikhef.nl> Wed, 25 Mar 2015 10:33:03 +0100
igtf-policy-bundle (1.62-1) unstable; urgency=low
* New upstream release:
- Added Root CA 2 for NIIF (HU)
- Extended validity period for pkIRISgrid CA (ES)
- Updated DigiCert root CA meta-data in preparation for TCS (US)
- Included GEANT TCS CA G3 trust anchors (EU)
- Temporarily suspended HIAST/74c6eaeb for operational reasons (SY)
- Discontinued ULAGrid-CA-2008 CA (VE)
- Discontinued NCHC CA (TW)
-- Dennis van Dok <dennisvd@nikhef.nl> Mon, 23 Feb 2015 09:27:47 +0100
igtf-policy-bundle (1.61-1) unstable; urgency=low
* New upstream release:
- Added new IPv6-capable crl_url entries for NCSA and CILogon CAs (US)
- Added accredited TSU (Georgia) CA (GE)
- Extended life time and updated digest function of AustrianGrid CA (AT)
* [Debconf translation updates]
* Swedish (Martin Bagge). Closes: #769872
-- Dennis van Dok <dennisvd@nikhef.nl> Tue, 25 Nov 2014 16:12:10 +0100
igtf-policy-bundle (1.60-1) unstable; urgency=low
* New upstream release:
- Added new SHA-2 hierarchies for TERENA Certificate Service (ed. 2009) (EU)
* Suggest fetch-crl rather than recommend it. Closes: #763404
* Use a HTTPS Git URL as the Vcs-Git tag for github.com
-- Dennis van Dok <dennisvd@nikhef.nl> Wed, 29 Oct 2014 15:58:42 +0100
igtf-policy-bundle (1.59-1) unstable; urgency=low
* New upstream release:
- Added accredited mics HPCI CA (JP)
- Updated crl_url for NCSA-slcs-2013 and NCSA-tfca-2013 (US)
- Renamed QuoVadis classic grid issuing CA to QuoVadis-Grid-ICA (CH, BM)
* take care of removal of /etc/grid-security/certificates
* [Debconf translation updates]
* Spanish (Matías Bellone). Closes: #752956
-- Dennis van Dok <dennisvd@nikhef.nl> Mon, 29 Sep 2014 15:36:07 +0200
igtf-policy-bundle (1.58-1) unstable; urgency=low
* New upstream release:
- Added accredited classic InCommon Server IGTF SSL CA and intermediate
Comodo RSA CA (SHA-2) (US)
- Extended permitted namespaces for AddTrust-External-CA-Root (EU, US)
- Updated CILogon Basic CA from experimental to accredited:iota (US)
- Updated certifcate URL for IHEP-CA-2013 39d30eba (CN)
- Discontinued expiring SEE-GRID '2004' CA - since replaced by
new SEEGRID-CA-2013 (GR)
- Discontinued retired PRAGMA-UCSD CA (US)
* [Debconf translation updates]
* Czech (Michal Simunek). Closes: #751434
-- Dennis van Dok <dennisvd@nikhef.nl> Tue, 24 Jun 2014 09:48:26 +0200
igtf-policy-bundle (1.57-1) unstable; urgency=low
* New upstream release:
- Discontinued obsoleted IHEP (2009) CA ba2f39ca (CN)
- Removed discontinued NCSA Two Factor CA following migration
to NCSA Two Factor CA 2013 (US)
* Debconf templates and debian/control reviewed by the debian-l10n-
english team as part of the Smith review project. Closes: #745761
* [Debconf translation updates]
* Russian (Yuri Kozlov). Closes: #748451
* Portuguese (Américo Monteiro). Closes: #748717
* Danish (Joe Hansen). Closes: #749151
* French (Julien Patriarca). Closes: #749219
* Polish (Michał Kułach). Closes: #750027
* Japanese (victory). Closes: #750055
* Finnish (Esko Arajärvi). Closes: #750061
* German (Stefan Schroeder). Closes: #750126
* Italian (Beatrice Torracca). Closes: #750130
-- Dennis van Dok <dennisvd@nikhef.nl> Tue, 03 Jun 2014 17:43:49 +0200
igtf-policy-bundle (1.56-3) unstable; urgency=low
* Bug fixes in the maintainer scripts.
- Wrong shell parameter expansion could cause CRL files to be
left behind.
- Shell globbing for CRLs with no matches caused postinst to fail.
Closes: #745677.
* Expand README.Debian to explain the use of fetch-crl.
-- Dennis van Dok <dennisvd@nikhef.nl> Thu, 24 Apr 2014 14:31:24 +0200
igtf-policy-bundle (1.56-2) unstable; urgency=low
* Update debian/copyright according to the upstream license.
Use CC-BY-3.0 and MPL-1.1.
-- Dennis van Dok <dennisvd@nikhef.nl> Wed, 16 Apr 2014 17:31:09 +0200
igtf-policy-bundle (1.56-1) unstable; urgency=low
* New upstream release:
- Removed discontinued SWITCHslcs2011 and associated Root (CH)
- Removed discontinued APAC CA (AU)
- Removed discontinued DoEGrids CA and ESnet root (US)
- Add reference to CA website for AustrianGrid CA (AT)
- Add new subordinates for DigiCert: 1cdf1cd9/DigiCertGridCA-1G2-Classic
and 5d9ea26d/DigiCertGridTrustCAG2-Classic (US)
-- Dennis van Dok <dennisvd@nikhef.nl> Tue, 08 Apr 2014 16:26:53 +0200
igtf-policy-bundle (1.55-1) unstable; urgency=low
* New upstream release:
- New root certificate with extended life time for
NorduGrid CA 1f0e8352 (DK)
- Updated contact metadata for all RENATER Grid-FR related CAs (FR)
- Updated CRL URL and metadata for IHEP 2013 CA 39d30eba (CN)
- New root certificates for NCSA CA re-key: MyProxy CA 2013
c36f6349/7aa2b7bd and Two Factor CA 2013 ca157cee/48c8f10a (US)
- New root certificate for EGI catch-all CA "SEEGRID-CA-2013" 772dbd1c (GR)
- Removed AIST Grid CA (JP)
- Discontinued IUCC CA (6fee79b0) following migration to TCS (IL)
- Suspended JUnet-CA (b3222f9e) (JO)
- Removed expired unaccredited CAs (misc)
- Added unaccredited worthless NL e-Infra Zero tutorial CA 338a3561 (NL)
-- Dennis van Dok <dennisvd@nikhef.nl> Wed, 04 Dec 2013 09:16:00 +0100
igtf-policy-bundle (1.54-1) unstable; urgency=low
* New upstream release:
- Extended life time of Grid-KA CA (dd4b34ea) (DE)
- Added new CERN hierarchy for CERN IT/IS CA (SHA2 migration) (CH)
- Updated metadata for GridGermany DFN-CERT CAs (DE)
- Updated contact metadata for KEK (JP)
- Updated contact metadata for HKU (HK)
- Updated contact metadata for AIST (JP)
-- Dennis van Dok <dennisvd@nikhef.nl> Wed, 26 Jun 2013 12:42:30 +0200
igtf-policy-bundle (1.53-1) unstable; urgency=low
* New upstream version
-- Dennis van Dok <dennisvd@nikhef.nl> Thu, 20 Jun 2013 10:35:30 +0200
igtf-policy-bundle (1.52-1) unstable; urgency=low
* New upstream version
-- Dennis van Dok <dennisvd@nikhef.nl> Wed, 30 Jan 2013 16:30:14 +0100
igtf-policy-bundle (1.50-2) unstable; urgency=low
* Install CHANGES as changelog.gz
-- Dennis van Dok <dennisvd@nikhef.nl> Wed, 31 Oct 2012 15:56:19 +0100
igtf-policy-bundle (1.50-1) unstable; urgency=low
* New upstream version
* Include CHANGES file from website
* Include a README.source file
* Update maintainer identity
-- Dennis van Dok <dennisvd@nikhef.nl> Wed, 31 Oct 2012 15:37:31 +0100
igtf-policy-bundle (1.46-1) unstable; urgency=low
* Initial release (Closes: #666229)
-- Dennis van Dok (Software Engineer) <dennisvd@nikhef.nl> Wed, 28 Mar 2012 01:42:49 +0200