Skip to content

Update root certs to NSS 3.71

Rodrigo Muino Tomonari requested to merge github/fork/richardlau/certs into master

Update the root certs as per the instructions in https://github.com/nodejs/node/blob/master/doc/guides/maintaining-root-certs.md.

tools: update certdata.txt

This is the certdata.txt[0] from NSS 3.71, released on 2021-09-30.

This is the version of NSS that will ship in Firefox 94 on 2021-11-02.

[0] https://hg.mozilla.org/projects/nss/raw-file/NSS_3_71_RTM/lib/ckfw/builtins/certdata.txt

crypto: update root certificates

Update the list of root certificates in src/node_root_certs.h with tools/mk-ca-bundle.pl.

Certificates added:

  • Trustwave Global Certification Authority
  • Trustwave Global ECC P256 Certification Authority
  • Trustwave Global ECC P384 Certification Authority
  • NAVER Global Root Certification Authority
  • AC RAIZ FNMT-RCM SERVIDORES SEGUROS
  • GlobalSign Root R46
  • GlobalSign Root E46
  • GLOBALTRUST 2020
  • ANF Secure Server Root CA
  • Certum EC-384 CA
  • Certum Trusted Root CA
  • TunTrust Root CA
  • HARICA TLS RSA Root CA 2021
  • HARICA TLS ECC Root CA 2021

Certificates removed:

  • GeoTrust Global CA
  • GeoTrust Universal CA
  • GeoTrust Universal CA 2
  • QuoVadis Root CA
  • Sonera Class 2 Root CA
  • Taiwan GRCA
  • GeoTrust Primary Certification Authority
  • thawte Primary Root CA
  • VeriSign Class 3 Public Primary Certification Authority - G5
  • OISTE WISeKey Global Root GA CA
  • GeoTrust Primary Certification Authority - G3
  • thawte Primary Root CA - G2
  • thawte Primary Root CA - G3
  • GeoTrust Primary Certification Authority - G2
  • VeriSign Universal Root Certification Authority
  • VeriSign Class 3 Public Primary Certification Authority - G4
  • Chambers of Commerce Root - 2008
  • Global Chambersign Root - 2008
  • Trustis FPS Root CA
  • EE Certification Centre Root CA
  • Staat der Nederlanden Root CA - G3

Merge request reports