[ol10_baseos_latest] ca-certificates-2026.2.92_v9.0.319-100.3.el10_2.noarch

Name:	ca-certificates
Version:	2026.2.92_v9.0.319
Release:	100.3.el10_2
Architecture:	noarch
Group:	Unspecified
Size:	2817437
License:	MIT AND GPL-2.0-or-later
RPM:	ca-certificates-2026.2.92_v9.0.319-100.3.el10_2.noarch.rpm
Source RPM:	ca-certificates-2026.2.92_v9.0.319-100.3.el10_2.src.rpm
Build Date:	Fri Oct 23 2026
Build Host:	build-ol10-x86_64.oracle.com
Vendor:	Oracle America
URL:	https://fedoraproject.org/wiki/CA-Certificates
Summary:	The Mozilla CA root certificate bundle
Description:	This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI.

Changelog (Show File list) (Show related packages)

Thu Oct 22 2026 Krenželok František <fkrenzel@redhat.com> - 2026.2.92_v9.0.319-100.3
```
- Fix malformed patch header in remove-emsign-root-cs-ca-g3.patch
```
Thu Oct 22 2026 Krenželok František <fkrenzel@redhat.com> - 2026.2.92_v9.0.319-100.2
```
- Removing: emSign Root CS CA - G3 from Microsoft Code Signing certificates
```

Wed Oct 21 2026 Krenželok František <fkrenzel@redhat.com> - 2026.2.92_v9.0.319-100.1

- Removing: AAA Certificate Services root CA
- Removing: emSign ECC Root CA - G3 from Microsoft Code Signing certificates

Wed Oct 21 2026 Krenželok František <fkrenzel@redhat.com> - 2026.2.92_v9.0.319-100.0

- Update to CKBI 2.92_v9.0.319 from NSS 3.131.1
  Removing:
  - emSign Root CA - C1
  
  Adding:
  - Actalis Code Signing ECC Root CA 2025
  - Actalis Code Signing RSA Root CA 2025
  - emSign Root CS CA - G2
  - emSign Root CS CA - G3
  - IdenTrust Commercial Root Code Signing RSA CA 2
  - e-Szigno CodeSigning Root CA 2024

Tue Aug 11 2026 Krenželok František <fkrenzel@redhat.com> - 2026.2.90_v9.0.316-100.0

- Update to CKBI 2.90_v9.0.316 from NSS 3.126
  Removing:
  - ePKI Root Certification Authority
  
  Adding:
  - SECOM TLS RSA Root CA 2024
  - SECOM TLS ECC Root CA 2024
  - SECOM SMIME RSA Root CA 2024
  - Telia EC Email Root CA v3
  - Telia EC TLS Root CA v3
  - Telia RSA Email Root CA v3
  - Telia RSA TLS Root CA v3
  - Chunghwa Telecom Co., Ltd.

Fri Aug 07 2026 Krenželok František <fkrenzel@redhat.com> - 2026.2.88_v9.0.316-100.0

- Update to CKBI 2.88_v9.0.316 from NSS 3.125
-    Removing:
-     # Certificate "XRamp Global CA Root"
-     # Certificate "certSIGN ROOT CA"
-     # Certificate "Explicitly Distrust DigiNotar Root CA"
-     # Certificate "CommScope Public Trust ECC Root-01"
-     # Certificate "CommScope Public Trust ECC Root-02"
-     # Certificate "CommScope Public Trust RSA Root-01"
-     # Certificate "CommScope Public Trust RSA Root-02"
-     # Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"
-     # Certificate "SecureSign Root CA12"
-    Adding:
-     # Certificate "OISTE Client Root ECC G1"
-     # Certificate "OISTE Client Root RSA G1"
-     # Certificate "OISTE Server Root ECC G1"
-     # Certificate "OISTE Server Root RSA G1"
-     # Certificate "e-Szigno TLS Root CA 2023"
-     # Certificate "SecureSign Root CA16"
-     # Certificate "certSIGN"
-     # Certificate "XRamp Global Certification Authority"

Wed Oct 29 2025 Frantisek Krenzelok <fkrenzel@redhat.com> - 2025.2.80_v9.0.305-102

- Remove /etc/pki/tls/certs/ca-certificates.crt symlink which was included by mistake

Fri Oct 10 2025 rhel-developer-toolbox <krenzelok.frantisek@gmail.com> - 2025.2.80_v9.0.305-101

- Update to CKBI 2.80_v9.0.305 from NSS 3.114
-    Adding:
-     # Certificate "TWCA CYBER Root CA"
-     # Certificate "TWCA Global Root CA G2"
-     # Certificate "SecureSign Root CA12"
-     # Certificate "SecureSign Root CA14"
-     # Certificate "SecureSign Root CA15"
-     # Certificate "D-TRUST BR Root CA 2 2023"
-     # Certificate "TrustAsia SMIME ECC Root CA"
-     # Certificate "TrustAsia SMIME RSA Root CA"
-     # Certificate "TrustAsia TLS ECC Root CA"
-     # Certificate "TrustAsia TLS RSA Root CA"
-     # Certificate "D-TRUST EV Root CA 2 2023"
-     # Certificate "SwissSign RSA SMIME Root CA 2022 - 1"
-     # Certificate "SwissSign RSA TLS Root CA 2022 - 1"
-     # Certificate "Sectigo Public Code Signing Root R46"
-     # Certificate "Sectigo Public Code Signing Root E46"

Mon Aug 18 2025 Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.303-102.5

- Bring back openssl trusted format bundle as well (Resolves: RHEL-109484)
- Restored the following symlinks:
	* /etc/pki/tls/cert.pem
	* /etc/pki/tls/certs/ca-certificates.crt
	* /etc/pki/tls/certs/ca-bundle.trust.crt
	* /etc/pki/tls/certs/ca-bundle.crt
	* /etc/ssl/cert.pem
	* /etc/ssl/certs/ca-certificates.crt
	* /etc/ssl/certs/ca-bundle.trust.crt
	* /etc/ssl/certs/ca-bundle.crt
- add libffi

Thu Mar 20 2025 Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.303-102.4
```
- Remove unused folder /etc/pki/ca-trust/extracted/openssl
```