[arch-commits] Commit in nss/repos (16 files)
Jan Steffens
heftig at archlinux.org
Sat Aug 6 20:55:44 UTC 2016
Date: Saturday, August 6, 2016 @ 20:55:44
Author: heftig
Revision: 273429
archrelease: copy trunk to testing-i686, testing-x86_64
Added:
nss/repos/testing-i686/
nss/repos/testing-i686/PKGBUILD
(from rev 273428, nss/trunk/PKGBUILD)
nss/repos/testing-i686/bundle.sh
(from rev 273428, nss/trunk/bundle.sh)
nss/repos/testing-i686/certdata2pem.py
(from rev 273428, nss/trunk/certdata2pem.py)
nss/repos/testing-i686/legacy-certs.patch
(from rev 273428, nss/trunk/legacy-certs.patch)
nss/repos/testing-i686/nss-config.in
(from rev 273428, nss/trunk/nss-config.in)
nss/repos/testing-i686/nss-config.xml
(from rev 273428, nss/trunk/nss-config.xml)
nss/repos/testing-i686/nss.pc.in
(from rev 273428, nss/trunk/nss.pc.in)
nss/repos/testing-x86_64/
nss/repos/testing-x86_64/PKGBUILD
(from rev 273428, nss/trunk/PKGBUILD)
nss/repos/testing-x86_64/bundle.sh
(from rev 273428, nss/trunk/bundle.sh)
nss/repos/testing-x86_64/certdata2pem.py
(from rev 273428, nss/trunk/certdata2pem.py)
nss/repos/testing-x86_64/legacy-certs.patch
(from rev 273428, nss/trunk/legacy-certs.patch)
nss/repos/testing-x86_64/nss-config.in
(from rev 273428, nss/trunk/nss-config.in)
nss/repos/testing-x86_64/nss-config.xml
(from rev 273428, nss/trunk/nss-config.xml)
nss/repos/testing-x86_64/nss.pc.in
(from rev 273428, nss/trunk/nss.pc.in)
-----------------------------------+
testing-i686/PKGBUILD | 127 ++++
testing-i686/bundle.sh | 54 +
testing-i686/certdata2pem.py | 200 ++++++
testing-i686/legacy-certs.patch | 1089 ++++++++++++++++++++++++++++++++++++
testing-i686/nss-config.in | 145 ++++
testing-i686/nss-config.xml | 132 ++++
testing-i686/nss.pc.in | 11
testing-x86_64/PKGBUILD | 127 ++++
testing-x86_64/bundle.sh | 54 +
testing-x86_64/certdata2pem.py | 200 ++++++
testing-x86_64/legacy-certs.patch | 1089 ++++++++++++++++++++++++++++++++++++
testing-x86_64/nss-config.in | 145 ++++
testing-x86_64/nss-config.xml | 132 ++++
testing-x86_64/nss.pc.in | 11
14 files changed, 3516 insertions(+)
Copied: nss/repos/testing-i686/PKGBUILD (from rev 273428, nss/trunk/PKGBUILD)
===================================================================
--- testing-i686/PKGBUILD (rev 0)
+++ testing-i686/PKGBUILD 2016-08-06 20:55:44 UTC (rev 273429)
@@ -0,0 +1,127 @@
+# $Id$
+# Maintainer: Jan de Groot <jgc at archlinux.org>
+
+pkgbase=nss
+pkgname=(nss ca-certificates-mozilla)
+pkgver=3.26
+pkgrel=1
+pkgdesc="Network Security Services"
+url="https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS"
+arch=(i686 x86_64)
+license=('MPL' 'GPL')
+_nsprver=4.12
+depends=("nspr>=${_nsprver}" 'sqlite' 'zlib' 'sh' 'p11-kit')
+makedepends=('perl' 'python2' 'xmlto' 'docbook-xsl')
+options=('!strip' '!makeflags' 'staticlibs')
+source=("https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_${pkgver//./_}_RTM/src/${pkgbase}-${pkgver}.tar.gz"
+ certdata2pem.py bundle.sh nss.pc.in nss-config.in nss-config.xml legacy-certs.patch)
+sha256sums=('91783a570ab953693eb977ce47c501f04c104cec287fa011c91bcc8970d1c564'
+ '2a2ff9131c21fa3b23ad7c7a2f069eabc783e56c6eb05419ac5f365f48dea0fc'
+ '045f520403f715a4cc7f3607b4e2c9bcc88fee5bce58d462fddaa2fdb0e4c180'
+ 'f2208c4f70373ff9b60f53d733f8071d4e390c384b776dfc04bf26c306882faf'
+ 'e44ac5095b4d88f24ec7b2e6a9f1581560bd3ad41a3d198596d67ef22f67adb9'
+ '98ace873c63e8e870286bce3ed53249aa2655cc1f53e7049061476e650ab06f1'
+ '5f793af9c8558324e4188163862e0e70a5b069a44ad9e7817e0767093739f2a0')
+
+prepare() {
+ mkdir certs
+
+ echo -n "$(date +"%e %B %Y")" >date.xml
+ echo -n "$pkgver" >version.xml
+
+ cd nss-$pkgver
+
+ # Still needed - Evolution (Camel) and Telepathy-Gabble (Wocky) use
+ # their own validation which doesn't work with trusted intermediates
+ patch nss/lib/ckfw/builtins/certdata.txt ../legacy-certs.patch
+
+ # Respect LDFLAGS
+ sed -e 's/\$(MKSHLIB) -o/\$(MKSHLIB) \$(LDFLAGS) -o/' \
+ -i nss/coreconf/rules.mk
+
+ ln -sr nss/lib/ckfw/builtins/certdata.txt ../certs/
+ ln -sr nss/lib/ckfw/builtins/nssckbi.h ../certs/
+}
+
+
+build() {
+ xmlto man nss-config.xml
+
+ cd certs
+ python2 ../certdata2pem.py
+
+ cd ..
+ sh bundle.sh
+
+ cd nss-$pkgver/nss
+ export BUILD_OPT=1
+ export NSS_USE_SYSTEM_SQLITE=1
+ export NSS_ALLOW_SSLKEYLOGFILE=1
+ export NSS_ENABLE_ECC=1
+ export NSPR_INCLUDE_DIR="`nspr-config --includedir`"
+ export NSPR_LIB_DIR="`nspr-config --libdir`"
+ export XCFLAGS="${CFLAGS}"
+
+ [[ $CARCH == x86_64 ]] && export USE_64=1
+
+ make -C coreconf
+ make -C lib/dbm
+ make
+ make clean_docs build_docs
+}
+
+package_nss() {
+ cd nss-$pkgver
+
+ install -d "$pkgdir"/usr/{bin,include/nss,lib/pkgconfig,share/man/man1}
+
+ NSS_VMAJOR=$(grep '#define.*NSS_VMAJOR' nss/lib/nss/nss.h | awk '{print $3}')
+ NSS_VMINOR=$(grep '#define.*NSS_VMINOR' nss/lib/nss/nss.h | awk '{print $3}')
+ NSS_VPATCH=$(grep '#define.*NSS_VPATCH' nss/lib/nss/nss.h | awk '{print $3}')
+
+ sed ../nss.pc.in \
+ -e "s,%libdir%,/usr/lib,g" \
+ -e "s,%prefix%,/usr,g" \
+ -e "s,%exec_prefix%,/usr/bin,g" \
+ -e "s,%includedir%,/usr/include/nss,g" \
+ -e "s,%NSPR_VERSION%,${_nsprver},g" \
+ -e "s,%NSS_VERSION%,${pkgver},g" \
+ > "$pkgdir/usr/lib/pkgconfig/nss.pc"
+ ln -s nss.pc "$pkgdir/usr/lib/pkgconfig/mozilla-nss.pc"
+
+ sed ../nss-config.in \
+ -e "s, at libdir@,/usr/lib,g" \
+ -e "s, at prefix@,/usr/bin,g" \
+ -e "s, at exec_prefix@,/usr/bin,g" \
+ -e "s, at includedir@,/usr/include/nss,g" \
+ -e "s, at MOD_MAJOR_VERSION@,${NSS_VMAJOR},g" \
+ -e "s, at MOD_MINOR_VERSION@,${NSS_VMINOR},g" \
+ -e "s, at MOD_PATCH_VERSION@,${NSS_VPATCH},g" \
+ > "$pkgdir/usr/bin/nss-config"
+ chmod 755 "$pkgdir/usr/bin/nss-config"
+
+ install -t "$pkgdir/usr/share/man/man1" -m644 nss/doc/nroff/*.1 ../nss-config.1
+
+ cd dist
+ install -t "$pkgdir/usr/include/nss" -m644 public/nss/*.h
+
+ cd *.OBJ/bin
+ install -t "$pkgdir/usr/bin" *util derdump pp shlibsign signtool signver ssltap vfychain vfyserv
+
+ cd ../lib
+ install -t "$pkgdir/usr/lib" *.so
+ install -t "$pkgdir/usr/lib" -m644 *.chk libcrmf.a
+
+ rm "$pkgdir/usr/lib/libnssckbi.so"
+ ln -s libnssckbi-p11-kit.so "$pkgdir/usr/lib/libnssckbi.so"
+}
+
+package_ca-certificates-mozilla() {
+ pkgdesc="Mozilla's set of trusted CA certificates"
+ depends=(ca-certificates-utils)
+
+ local _certdir="$pkgdir/usr/share/ca-certificates/trust-source"
+ install -Dm644 ca-bundle.trust.crt "$_certdir/mozilla.trust.crt"
+ install -Dm644 ca-bundle.neutral-trust.crt "$_certdir/mozilla.neutral-trust.crt"
+ install -Dm644 ca-bundle.supplement.p11-kit "$_certdir/mozilla.supplement.p11-kit"
+}
Copied: nss/repos/testing-i686/bundle.sh (from rev 273428, nss/trunk/bundle.sh)
===================================================================
--- testing-i686/bundle.sh (rev 0)
+++ testing-i686/bundle.sh 2016-08-06 20:55:44 UTC (rev 273429)
@@ -0,0 +1,54 @@
+#!/bin/sh
+# From Fedora's ca-certificates.spec
+
+(
+ cat <<EOF
+# This is a bundle of X.509 certificates of public Certificate
+# Authorities. It was generated from the Mozilla root CA list.
+# These certificates are in the OpenSSL "TRUSTED CERTIFICATE"
+# format and have trust bits set accordingly.
+# An exception are auxiliary certificates, without positive or negative
+# trust, but are used to assist in finding a preferred trust path.
+# Those neutral certificates use the plain BEGIN CERTIFICATE format.
+#
+# Source: nss/lib/ckfw/builtins/certdata.txt
+# Source: nss/lib/ckfw/builtins/nssckbi.h
+#
+# Generated from:
+EOF
+ cat certs/nssckbi.h | grep -w NSS_BUILTINS_LIBRARY_VERSION | awk '{print "# " $2 " " $3}'
+ echo '#'
+) > ca-bundle.trust.crt
+for f in certs/*.crt; do
+ echo "processing $f"
+ tbits=`sed -n '/^# openssl-trust/{s/^.*=//;p;}' $f`
+ distbits=`sed -n '/^# openssl-distrust/{s/^.*=//;p;}' $f`
+ alias=`sed -n '/^# alias=/{s/^.*=//;p;q;}' $f | sed "s/'//g" | sed 's/"//g'`
+ targs=""
+ if [ -n "$tbits" ]; then
+ for t in $tbits; do
+ targs="${targs} -addtrust $t"
+ done
+ fi
+ if [ -n "$distbits" ]; then
+ for t in $distbits; do
+ targs="${targs} -addreject $t"
+ done
+ fi
+ if [ -n "$targs" ]; then
+ echo "trust flags $targs for $f" >> info.trust
+ openssl x509 -text -in "$f" -trustout $targs -setalias "$alias" >> ca-bundle.trust.crt
+ else
+ echo "no trust flags for $f" >> info.notrust
+ # p11-kit-trust defines empty trust lists as "rejected for all purposes".
+ # That's why we use the simple file format
+ # (BEGIN CERTIFICATE, no trust information)
+ # because p11-kit-trust will treat it as a certificate with neutral trust.
+ # This means we cannot use the -setalias feature for neutral trust certs.
+ openssl x509 -text -in "$f" >> ca-bundle.neutral-trust.crt
+ fi
+done
+
+for p in certs/*.p11-kit; do
+ cat "$p" >> ca-bundle.supplement.p11-kit
+done
Copied: nss/repos/testing-i686/certdata2pem.py (from rev 273428, nss/trunk/certdata2pem.py)
===================================================================
--- testing-i686/certdata2pem.py (rev 0)
+++ testing-i686/certdata2pem.py 2016-08-06 20:55:44 UTC (rev 273429)
@@ -0,0 +1,200 @@
+#!/usr/bin/python
+# vim:set et sw=4:
+#
+# certdata2pem.py - splits certdata.txt into multiple files
+#
+# Copyright (C) 2009 Philipp Kern <pkern at debian.org>
+# Copyright (C) 2013 Kai Engert <kaie at redhat.com>
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301,
+# USA.
+
+import base64
+import os.path
+import re
+import sys
+import textwrap
+import urllib
+
+objects = []
+
+def printable_serial(obj):
+ return ".".join(map(lambda x:str(ord(x)), obj['CKA_SERIAL_NUMBER']))
+
+# Dirty file parser.
+in_data, in_multiline, in_obj = False, False, False
+field, type, value, obj = None, None, None, dict()
+for line in open('certdata.txt', 'r'):
+ # Ignore the file header.
+ if not in_data:
+ if line.startswith('BEGINDATA'):
+ in_data = True
+ continue
+ # Ignore comment lines.
+ if line.startswith('#'):
+ continue
+ # Empty lines are significant if we are inside an object.
+ if in_obj and len(line.strip()) == 0:
+ objects.append(obj)
+ obj = dict()
+ in_obj = False
+ continue
+ if len(line.strip()) == 0:
+ continue
+ if in_multiline:
+ if not line.startswith('END'):
+ if type == 'MULTILINE_OCTAL':
+ line = line.strip()
+ for i in re.finditer(r'\\([0-3][0-7][0-7])', line):
+ value += chr(int(i.group(1), 8))
+ else:
+ value += line
+ continue
+ obj[field] = value
+ in_multiline = False
+ continue
+ if line.startswith('CKA_CLASS'):
+ in_obj = True
+ line_parts = line.strip().split(' ', 2)
+ if len(line_parts) > 2:
+ field, type = line_parts[0:2]
+ value = ' '.join(line_parts[2:])
+ elif len(line_parts) == 2:
+ field, type = line_parts
+ value = None
+ else:
+ raise NotImplementedError, 'line_parts < 2 not supported.\n' + line
+ if type == 'MULTILINE_OCTAL':
+ in_multiline = True
+ value = ""
+ continue
+ obj[field] = value
+if len(obj.items()) > 0:
+ objects.append(obj)
+
+# Build up trust database.
+trustmap = dict()
+for obj in objects:
+ if obj['CKA_CLASS'] != 'CKO_NSS_TRUST':
+ continue
+ key = obj['CKA_LABEL'] + printable_serial(obj)
+ trustmap[key] = obj
+ print " added trust", key
+
+# Build up cert database.
+certmap = dict()
+for obj in objects:
+ if obj['CKA_CLASS'] != 'CKO_CERTIFICATE':
+ continue
+ key = obj['CKA_LABEL'] + printable_serial(obj)
+ certmap[key] = obj
+ print " added cert", key
+
+def obj_to_filename(obj):
+ label = obj['CKA_LABEL'][1:-1]
+ label = label.replace('/', '_')\
+ .replace(' ', '_')\
+ .replace('(', '=')\
+ .replace(')', '=')\
+ .replace(',', '_')
+ label = re.sub(r'\\x[0-9a-fA-F]{2}', lambda m:chr(int(m.group(0)[2:], 16)), label)
+ serial = printable_serial(obj)
+ return label + ":" + serial
+
+trust_types = {
+ "CKA_TRUST_DIGITAL_SIGNATURE": "digital-signature",
+ "CKA_TRUST_NON_REPUDIATION": "non-repudiation",
+ "CKA_TRUST_KEY_ENCIPHERMENT": "key-encipherment",
+ "CKA_TRUST_DATA_ENCIPHERMENT": "data-encipherment",
+ "CKA_TRUST_KEY_AGREEMENT": "key-agreement",
+ "CKA_TRUST_KEY_CERT_SIGN": "cert-sign",
+ "CKA_TRUST_CRL_SIGN": "crl-sign",
+ "CKA_TRUST_SERVER_AUTH": "server-auth",
+ "CKA_TRUST_CLIENT_AUTH": "client-auth",
+ "CKA_TRUST_CODE_SIGNING": "code-signing",
+ "CKA_TRUST_EMAIL_PROTECTION": "email-protection",
+ "CKA_TRUST_IPSEC_END_SYSTEM": "ipsec-end-system",
+ "CKA_TRUST_IPSEC_TUNNEL": "ipsec-tunnel",
+ "CKA_TRUST_IPSEC_USER": "ipsec-user",
+ "CKA_TRUST_TIME_STAMPING": "time-stamping",
+ "CKA_TRUST_STEP_UP_APPROVED": "step-up-approved",
+}
+
+openssl_trust = {
+ "CKA_TRUST_SERVER_AUTH": "serverAuth",
+ "CKA_TRUST_CLIENT_AUTH": "clientAuth",
+ "CKA_TRUST_CODE_SIGNING": "codeSigning",
+ "CKA_TRUST_EMAIL_PROTECTION": "emailProtection",
+}
+
+for tobj in objects:
+ if tobj['CKA_CLASS'] == 'CKO_NSS_TRUST':
+ key = tobj['CKA_LABEL'] + printable_serial(tobj)
+ print "producing trust for " + key
+ trustbits = []
+ distrustbits = []
+ openssl_trustflags = []
+ openssl_distrustflags = []
+ for t in trust_types.keys():
+ if tobj.has_key(t) and tobj[t] == 'CKT_NSS_TRUSTED_DELEGATOR':
+ trustbits.append(t)
+ if t in openssl_trust:
+ openssl_trustflags.append(openssl_trust[t])
+ if tobj.has_key(t) and tobj[t] == 'CKT_NSS_NOT_TRUSTED':
+ distrustbits.append(t)
+ if t in openssl_trust:
+ openssl_distrustflags.append(openssl_trust[t])
+
+ fname = obj_to_filename(tobj)
+ try:
+ obj = certmap[key]
+ except:
+ obj = None
+
+ if obj != None:
+ fname += ".crt"
+ else:
+ fname += ".p11-kit"
+
+ f = open(fname, 'w')
+ if obj != None:
+ f.write("# alias=%s\n"%tobj['CKA_LABEL'])
+ f.write("# trust=" + " ".join(trustbits) + "\n")
+ f.write("# distrust=" + " ".join(distrustbits) + "\n")
+ if openssl_trustflags:
+ f.write("# openssl-trust=" + " ".join(openssl_trustflags) + "\n")
+ if openssl_distrustflags:
+ f.write("# openssl-distrust=" + " ".join(openssl_distrustflags) + "\n")
+ f.write("-----BEGIN CERTIFICATE-----\n")
+ f.write("\n".join(textwrap.wrap(base64.b64encode(obj['CKA_VALUE']), 64)))
+ f.write("\n-----END CERTIFICATE-----\n")
+ else:
+ f.write("[p11-kit-object-v1]\n")
+ f.write("label: ");
+ f.write(tobj['CKA_LABEL']);
+ f.write("\n")
+ f.write("class: certificate\n")
+ f.write("certificate-type: x-509\n")
+ f.write("issuer: \"");
+ f.write(urllib.quote(tobj['CKA_ISSUER']));
+ f.write("\"\n")
+ f.write("serial-number: \"");
+ f.write(urllib.quote(tobj['CKA_SERIAL_NUMBER']));
+ f.write("\"\n")
+ if (tobj['CKA_TRUST_SERVER_AUTH'] == 'CKT_NSS_NOT_TRUSTED') or (tobj['CKA_TRUST_EMAIL_PROTECTION'] == 'CKT_NSS_NOT_TRUSTED') or (tobj['CKA_TRUST_CODE_SIGNING'] == 'CKT_NSS_NOT_TRUSTED'):
+ f.write("x-distrusted: true\n")
+ f.write("\n\n")
+ f.close()
+ print " -> written as '%s', trust = %s, openssl-trust = %s, distrust = %s, openssl-distrust = %s" % (fname, trustbits, openssl_trustflags, distrustbits, openssl_distrustflags)
Copied: nss/repos/testing-i686/legacy-certs.patch (from rev 273428, nss/trunk/legacy-certs.patch)
===================================================================
--- testing-i686/legacy-certs.patch (rev 0)
+++ testing-i686/legacy-certs.patch 2016-08-06 20:55:44 UTC (rev 273429)
@@ -0,0 +1,1089 @@
+--- certdata.txt 2016-02-26 22:21:17.016942918 +0100
++++ certdata-legacy.txt 2016-03-21 10:47:41.022763306 +0100
+@@ -70,6 +70,421 @@
+ CKA_LABEL UTF8 "Mozilla Builtin Roots"
+
+ #
++# Certificate "GTE CyberTrust Global Root"
++#
++# Issuer: CN=GTE CyberTrust Global Root,OU="GTE CyberTrust Solutions, Inc.",O=GTE Corporation,C=US
++# Serial Number: 421 (0x1a5)
++# Subject: CN=GTE CyberTrust Global Root,OU="GTE CyberTrust Solutions, Inc.",O=GTE Corporation,C=US
++# Not Valid Before: Thu Aug 13 00:29:00 1998
++# Not Valid After : Mon Aug 13 23:59:00 2018
++# Fingerprint (MD5): CA:3D:D3:68:F1:03:5C:D0:32:FA:B8:2B:59:E8:5A:DB
++# Fingerprint (SHA1): 97:81:79:50:D8:1C:96:70:CC:34:D8:09:CF:79:44:31:36:7E:F4:74
++CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
++CKA_TOKEN CK_BBOOL CK_TRUE
++CKA_PRIVATE CK_BBOOL CK_FALSE
++CKA_MODIFIABLE CK_BBOOL CK_FALSE
++CKA_LABEL UTF8 "GTE CyberTrust Global Root"
++CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509
++CKA_SUBJECT MULTILINE_OCTAL
++\060\165\061\013\060\011\006\003\125\004\006\023\002\125\123\061
++\030\060\026\006\003\125\004\012\023\017\107\124\105\040\103\157
++\162\160\157\162\141\164\151\157\156\061\047\060\045\006\003\125
++\004\013\023\036\107\124\105\040\103\171\142\145\162\124\162\165
++\163\164\040\123\157\154\165\164\151\157\156\163\054\040\111\156
++\143\056\061\043\060\041\006\003\125\004\003\023\032\107\124\105
++\040\103\171\142\145\162\124\162\165\163\164\040\107\154\157\142
++\141\154\040\122\157\157\164
++END
++CKA_ID UTF8 "0"
++CKA_ISSUER MULTILINE_OCTAL
++\060\165\061\013\060\011\006\003\125\004\006\023\002\125\123\061
++\030\060\026\006\003\125\004\012\023\017\107\124\105\040\103\157
++\162\160\157\162\141\164\151\157\156\061\047\060\045\006\003\125
++\004\013\023\036\107\124\105\040\103\171\142\145\162\124\162\165
++\163\164\040\123\157\154\165\164\151\157\156\163\054\040\111\156
++\143\056\061\043\060\041\006\003\125\004\003\023\032\107\124\105
++\040\103\171\142\145\162\124\162\165\163\164\040\107\154\157\142
++\141\154\040\122\157\157\164
++END
++CKA_SERIAL_NUMBER MULTILINE_OCTAL
++\002\002\001\245
++END
++CKA_VALUE MULTILINE_OCTAL
++\060\202\002\132\060\202\001\303\002\002\001\245\060\015\006\011
++\052\206\110\206\367\015\001\001\004\005\000\060\165\061\013\060
++\011\006\003\125\004\006\023\002\125\123\061\030\060\026\006\003
++\125\004\012\023\017\107\124\105\040\103\157\162\160\157\162\141
++\164\151\157\156\061\047\060\045\006\003\125\004\013\023\036\107
++\124\105\040\103\171\142\145\162\124\162\165\163\164\040\123\157
++\154\165\164\151\157\156\163\054\040\111\156\143\056\061\043\060
++\041\006\003\125\004\003\023\032\107\124\105\040\103\171\142\145
++\162\124\162\165\163\164\040\107\154\157\142\141\154\040\122\157
++\157\164\060\036\027\015\071\070\060\070\061\063\060\060\062\071
++\060\060\132\027\015\061\070\060\070\061\063\062\063\065\071\060
++\060\132\060\165\061\013\060\011\006\003\125\004\006\023\002\125
++\123\061\030\060\026\006\003\125\004\012\023\017\107\124\105\040
++\103\157\162\160\157\162\141\164\151\157\156\061\047\060\045\006
++\003\125\004\013\023\036\107\124\105\040\103\171\142\145\162\124
++\162\165\163\164\040\123\157\154\165\164\151\157\156\163\054\040
++\111\156\143\056\061\043\060\041\006\003\125\004\003\023\032\107
++\124\105\040\103\171\142\145\162\124\162\165\163\164\040\107\154
++\157\142\141\154\040\122\157\157\164\060\201\237\060\015\006\011
++\052\206\110\206\367\015\001\001\001\005\000\003\201\215\000\060
++\201\211\002\201\201\000\225\017\240\266\360\120\234\350\172\307
++\210\315\335\027\016\056\260\224\320\033\075\016\366\224\300\212
++\224\307\006\310\220\227\310\270\144\032\172\176\154\074\123\341
++\067\050\163\140\177\262\227\123\007\237\123\371\155\130\224\322
++\257\215\155\210\147\200\346\355\262\225\317\162\061\312\245\034
++\162\272\134\002\347\144\102\347\371\251\054\326\072\015\254\215
++\102\252\044\001\071\346\234\077\001\205\127\015\130\207\105\370
++\323\205\252\223\151\046\205\160\110\200\077\022\025\307\171\264
++\037\005\057\073\142\231\002\003\001\000\001\060\015\006\011\052
++\206\110\206\367\015\001\001\004\005\000\003\201\201\000\155\353
++\033\011\351\136\331\121\333\147\042\141\244\052\074\110\167\343
++\240\174\246\336\163\242\024\003\205\075\373\253\016\060\305\203
++\026\063\201\023\010\236\173\064\116\337\100\310\164\327\271\175
++\334\364\166\125\175\233\143\124\030\351\360\352\363\134\261\331
++\213\102\036\271\300\225\116\272\372\325\342\174\365\150\141\277
++\216\354\005\227\137\133\260\327\243\205\064\304\044\247\015\017
++\225\223\357\313\224\330\236\037\235\134\205\155\307\252\256\117
++\037\042\265\315\225\255\272\247\314\371\253\013\172\177
++END
++
++# Trust for Certificate "GTE CyberTrust Global Root"
++# Issuer: CN=GTE CyberTrust Global Root,OU="GTE CyberTrust Solutions, Inc.",O=GTE Corporation,C=US
++# Serial Number: 421 (0x1a5)
++# Subject: CN=GTE CyberTrust Global Root,OU="GTE CyberTrust Solutions, Inc.",O=GTE Corporation,C=US
++# Not Valid Before: Thu Aug 13 00:29:00 1998
++# Not Valid After : Mon Aug 13 23:59:00 2018
++# Fingerprint (MD5): CA:3D:D3:68:F1:03:5C:D0:32:FA:B8:2B:59:E8:5A:DB
++# Fingerprint (SHA1): 97:81:79:50:D8:1C:96:70:CC:34:D8:09:CF:79:44:31:36:7E:F4:74
++CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST
++CKA_TOKEN CK_BBOOL CK_TRUE
++CKA_PRIVATE CK_BBOOL CK_FALSE
++CKA_MODIFIABLE CK_BBOOL CK_FALSE
++CKA_LABEL UTF8 "GTE CyberTrust Global Root"
++CKA_CERT_SHA1_HASH MULTILINE_OCTAL
++\227\201\171\120\330\034\226\160\314\064\330\011\317\171\104\061
++\066\176\364\164
++END
++CKA_CERT_MD5_HASH MULTILINE_OCTAL
++\312\075\323\150\361\003\134\320\062\372\270\053\131\350\132\333
++END
++CKA_ISSUER MULTILINE_OCTAL
++\060\165\061\013\060\011\006\003\125\004\006\023\002\125\123\061
++\030\060\026\006\003\125\004\012\023\017\107\124\105\040\103\157
++\162\160\157\162\141\164\151\157\156\061\047\060\045\006\003\125
++\004\013\023\036\107\124\105\040\103\171\142\145\162\124\162\165
++\163\164\040\123\157\154\165\164\151\157\156\163\054\040\111\156
++\143\056\061\043\060\041\006\003\125\004\003\023\032\107\124\105
++\040\103\171\142\145\162\124\162\165\163\164\040\107\154\157\142
++\141\154\040\122\157\157\164
++END
++CKA_SERIAL_NUMBER MULTILINE_OCTAL
++\002\002\001\245
++END
++CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
++
++#
++# Certificate "Thawte Server CA"
++#
++# Issuer: E=server-certs at thawte.com,CN=Thawte Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA
++# Serial Number: 1 (0x1)
++# Subject: E=server-certs at thawte.com,CN=Thawte Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA
++# Not Valid Before: Thu Aug 01 00:00:00 1996
++# Not Valid After : Thu Dec 31 23:59:59 2020
++# Fingerprint (MD5): C5:70:C4:A2:ED:53:78:0C:C8:10:53:81:64:CB:D0:1D
++# Fingerprint (SHA1): 23:E5:94:94:51:95:F2:41:48:03:B4:D5:64:D2:A3:A3:F5:D8:8B:8C
++CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
++CKA_TOKEN CK_BBOOL CK_TRUE
++CKA_PRIVATE CK_BBOOL CK_FALSE
++CKA_MODIFIABLE CK_BBOOL CK_FALSE
++CKA_LABEL UTF8 "Thawte Server CA"
++CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509
++CKA_SUBJECT MULTILINE_OCTAL
++\060\201\304\061\013\060\011\006\003\125\004\006\023\002\132\101
++\061\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145
++\162\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007
++\023\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006
++\003\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156
++\163\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003
++\125\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151
++\157\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151
++\163\151\157\156\061\031\060\027\006\003\125\004\003\023\020\124
++\150\141\167\164\145\040\123\145\162\166\145\162\040\103\101\061
++\046\060\044\006\011\052\206\110\206\367\015\001\011\001\026\027
++\163\145\162\166\145\162\055\143\145\162\164\163\100\164\150\141
++\167\164\145\056\143\157\155
++END
++CKA_ID UTF8 "0"
++CKA_ISSUER MULTILINE_OCTAL
++\060\201\304\061\013\060\011\006\003\125\004\006\023\002\132\101
++\061\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145
++\162\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007
++\023\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006
++\003\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156
++\163\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003
++\125\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151
++\157\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151
++\163\151\157\156\061\031\060\027\006\003\125\004\003\023\020\124
++\150\141\167\164\145\040\123\145\162\166\145\162\040\103\101\061
++\046\060\044\006\011\052\206\110\206\367\015\001\011\001\026\027
++\163\145\162\166\145\162\055\143\145\162\164\163\100\164\150\141
++\167\164\145\056\143\157\155
++END
++CKA_SERIAL_NUMBER MULTILINE_OCTAL
++\002\001\001
++END
++CKA_VALUE MULTILINE_OCTAL
++\060\202\003\023\060\202\002\174\240\003\002\001\002\002\001\001
++\060\015\006\011\052\206\110\206\367\015\001\001\004\005\000\060
++\201\304\061\013\060\011\006\003\125\004\006\023\002\132\101\061
++\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145\162
++\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007\023
++\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006\003
++\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156\163
++\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003\125
++\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151\157
++\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151\163
++\151\157\156\061\031\060\027\006\003\125\004\003\023\020\124\150
++\141\167\164\145\040\123\145\162\166\145\162\040\103\101\061\046
++\060\044\006\011\052\206\110\206\367\015\001\011\001\026\027\163
++\145\162\166\145\162\055\143\145\162\164\163\100\164\150\141\167
++\164\145\056\143\157\155\060\036\027\015\071\066\060\070\060\061
++\060\060\060\060\060\060\132\027\015\062\060\061\062\063\061\062
++\063\065\071\065\071\132\060\201\304\061\013\060\011\006\003\125
++\004\006\023\002\132\101\061\025\060\023\006\003\125\004\010\023
++\014\127\145\163\164\145\162\156\040\103\141\160\145\061\022\060
++\020\006\003\125\004\007\023\011\103\141\160\145\040\124\157\167
++\156\061\035\060\033\006\003\125\004\012\023\024\124\150\141\167
++\164\145\040\103\157\156\163\165\154\164\151\156\147\040\143\143
++\061\050\060\046\006\003\125\004\013\023\037\103\145\162\164\151
++\146\151\143\141\164\151\157\156\040\123\145\162\166\151\143\145
++\163\040\104\151\166\151\163\151\157\156\061\031\060\027\006\003
++\125\004\003\023\020\124\150\141\167\164\145\040\123\145\162\166
++\145\162\040\103\101\061\046\060\044\006\011\052\206\110\206\367
++\015\001\011\001\026\027\163\145\162\166\145\162\055\143\145\162
++\164\163\100\164\150\141\167\164\145\056\143\157\155\060\201\237
++\060\015\006\011\052\206\110\206\367\015\001\001\001\005\000\003
++\201\215\000\060\201\211\002\201\201\000\323\244\120\156\310\377
++\126\153\346\317\135\266\352\014\150\165\107\242\252\302\332\204
++\045\374\250\364\107\121\332\205\265\040\164\224\206\036\017\165
++\311\351\010\141\365\006\155\060\156\025\031\002\351\122\300\142
++\333\115\231\236\342\152\014\104\070\315\376\276\343\144\011\160
++\305\376\261\153\051\266\057\111\310\073\324\047\004\045\020\227
++\057\347\220\155\300\050\102\231\327\114\103\336\303\365\041\155
++\124\237\135\303\130\341\300\344\331\133\260\270\334\264\173\337
++\066\072\302\265\146\042\022\326\207\015\002\003\001\000\001\243
++\023\060\021\060\017\006\003\125\035\023\001\001\377\004\005\060
++\003\001\001\377\060\015\006\011\052\206\110\206\367\015\001\001
++\004\005\000\003\201\201\000\007\372\114\151\134\373\225\314\106
++\356\205\203\115\041\060\216\312\331\250\157\111\032\346\332\121
++\343\140\160\154\204\141\021\241\032\310\110\076\131\103\175\117
++\225\075\241\213\267\013\142\230\172\165\212\335\210\116\116\236
++\100\333\250\314\062\164\271\157\015\306\343\263\104\013\331\212
++\157\232\051\233\231\030\050\073\321\343\100\050\232\132\074\325
++\265\347\040\033\213\312\244\253\215\351\121\331\342\114\054\131
++\251\332\271\262\165\033\366\102\362\357\307\362\030\371\211\274
++\243\377\212\043\056\160\107
++END
++
++# Trust for Certificate "Thawte Server CA"
++# Issuer: E=server-certs at thawte.com,CN=Thawte Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA
++# Serial Number: 1 (0x1)
++# Subject: E=server-certs at thawte.com,CN=Thawte Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA
++# Not Valid Before: Thu Aug 01 00:00:00 1996
++# Not Valid After : Thu Dec 31 23:59:59 2020
++# Fingerprint (MD5): C5:70:C4:A2:ED:53:78:0C:C8:10:53:81:64:CB:D0:1D
++# Fingerprint (SHA1): 23:E5:94:94:51:95:F2:41:48:03:B4:D5:64:D2:A3:A3:F5:D8:8B:8C
++CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST
++CKA_TOKEN CK_BBOOL CK_TRUE
++CKA_PRIVATE CK_BBOOL CK_FALSE
++CKA_MODIFIABLE CK_BBOOL CK_FALSE
++CKA_LABEL UTF8 "Thawte Server CA"
++CKA_CERT_SHA1_HASH MULTILINE_OCTAL
++\043\345\224\224\121\225\362\101\110\003\264\325\144\322\243\243
++\365\330\213\214
++END
++CKA_CERT_MD5_HASH MULTILINE_OCTAL
++\305\160\304\242\355\123\170\014\310\020\123\201\144\313\320\035
++END
++CKA_ISSUER MULTILINE_OCTAL
++\060\201\304\061\013\060\011\006\003\125\004\006\023\002\132\101
++\061\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145
++\162\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007
++\023\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006
++\003\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156
++\163\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003
++\125\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151
++\157\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151
++\163\151\157\156\061\031\060\027\006\003\125\004\003\023\020\124
++\150\141\167\164\145\040\123\145\162\166\145\162\040\103\101\061
++\046\060\044\006\011\052\206\110\206\367\015\001\011\001\026\027
++\163\145\162\166\145\162\055\143\145\162\164\163\100\164\150\141
++\167\164\145\056\143\157\155
++END
++CKA_SERIAL_NUMBER MULTILINE_OCTAL
++\002\001\001
++END
++CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
++CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
++
++#
++# Certificate "Thawte Premium Server CA"
++#
++# Issuer: E=premium-server at thawte.com,CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA
++# Serial Number: 1 (0x1)
++# Subject: E=premium-server at thawte.com,CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA
++# Not Valid Before: Thu Aug 01 00:00:00 1996
++# Not Valid After : Thu Dec 31 23:59:59 2020
++# Fingerprint (MD5): 06:9F:69:79:16:66:90:02:1B:8C:8C:A2:C3:07:6F:3A
++# Fingerprint (SHA1): 62:7F:8D:78:27:65:63:99:D2:7D:7F:90:44:C9:FE:B3:F3:3E:FA:9A
++CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
++CKA_TOKEN CK_BBOOL CK_TRUE
++CKA_PRIVATE CK_BBOOL CK_FALSE
++CKA_MODIFIABLE CK_BBOOL CK_FALSE
++CKA_LABEL UTF8 "Thawte Premium Server CA"
++CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509
++CKA_SUBJECT MULTILINE_OCTAL
++\060\201\316\061\013\060\011\006\003\125\004\006\023\002\132\101
++\061\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145
++\162\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007
++\023\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006
++\003\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156
++\163\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003
++\125\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151
++\157\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151
++\163\151\157\156\061\041\060\037\006\003\125\004\003\023\030\124
++\150\141\167\164\145\040\120\162\145\155\151\165\155\040\123\145
++\162\166\145\162\040\103\101\061\050\060\046\006\011\052\206\110
++\206\367\015\001\011\001\026\031\160\162\145\155\151\165\155\055
++\163\145\162\166\145\162\100\164\150\141\167\164\145\056\143\157
++\155
++END
++CKA_ID UTF8 "0"
++CKA_ISSUER MULTILINE_OCTAL
++\060\201\316\061\013\060\011\006\003\125\004\006\023\002\132\101
++\061\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145
++\162\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007
++\023\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006
++\003\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156
++\163\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003
++\125\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151
++\157\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151
++\163\151\157\156\061\041\060\037\006\003\125\004\003\023\030\124
++\150\141\167\164\145\040\120\162\145\155\151\165\155\040\123\145
++\162\166\145\162\040\103\101\061\050\060\046\006\011\052\206\110
++\206\367\015\001\011\001\026\031\160\162\145\155\151\165\155\055
++\163\145\162\166\145\162\100\164\150\141\167\164\145\056\143\157
++\155
++END
++CKA_SERIAL_NUMBER MULTILINE_OCTAL
++\002\001\001
++END
++CKA_VALUE MULTILINE_OCTAL
++\060\202\003\047\060\202\002\220\240\003\002\001\002\002\001\001
++\060\015\006\011\052\206\110\206\367\015\001\001\004\005\000\060
++\201\316\061\013\060\011\006\003\125\004\006\023\002\132\101\061
++\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145\162
++\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007\023
++\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006\003
++\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156\163
++\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003\125
++\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151\157
++\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151\163
++\151\157\156\061\041\060\037\006\003\125\004\003\023\030\124\150
++\141\167\164\145\040\120\162\145\155\151\165\155\040\123\145\162
++\166\145\162\040\103\101\061\050\060\046\006\011\052\206\110\206
++\367\015\001\011\001\026\031\160\162\145\155\151\165\155\055\163
++\145\162\166\145\162\100\164\150\141\167\164\145\056\143\157\155
++\060\036\027\015\071\066\060\070\060\061\060\060\060\060\060\060
++\132\027\015\062\060\061\062\063\061\062\063\065\071\065\071\132
++\060\201\316\061\013\060\011\006\003\125\004\006\023\002\132\101
++\061\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145
++\162\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007
++\023\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006
++\003\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156
++\163\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003
++\125\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151
++\157\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151
++\163\151\157\156\061\041\060\037\006\003\125\004\003\023\030\124
++\150\141\167\164\145\040\120\162\145\155\151\165\155\040\123\145
++\162\166\145\162\040\103\101\061\050\060\046\006\011\052\206\110
++\206\367\015\001\011\001\026\031\160\162\145\155\151\165\155\055
++\163\145\162\166\145\162\100\164\150\141\167\164\145\056\143\157
++\155\060\201\237\060\015\006\011\052\206\110\206\367\015\001\001
++\001\005\000\003\201\215\000\060\201\211\002\201\201\000\322\066
++\066\152\213\327\302\133\236\332\201\101\142\217\070\356\111\004
++\125\326\320\357\034\033\225\026\107\357\030\110\065\072\122\364
++\053\152\006\217\073\057\352\126\343\257\206\215\236\027\367\236
++\264\145\165\002\115\357\313\011\242\041\121\330\233\320\147\320
++\272\015\222\006\024\163\324\223\313\227\052\000\234\134\116\014
++\274\372\025\122\374\362\104\156\332\021\112\156\010\237\057\055
++\343\371\252\072\206\163\266\106\123\130\310\211\005\275\203\021
++\270\163\077\252\007\215\364\102\115\347\100\235\034\067\002\003
++\001\000\001\243\023\060\021\060\017\006\003\125\035\023\001\001
++\377\004\005\060\003\001\001\377\060\015\006\011\052\206\110\206
++\367\015\001\001\004\005\000\003\201\201\000\046\110\054\026\302
++\130\372\350\026\164\014\252\252\137\124\077\362\327\311\170\140
++\136\136\156\067\143\042\167\066\176\262\027\304\064\271\365\010
++\205\374\311\001\070\377\115\276\362\026\102\103\347\273\132\106
++\373\301\306\021\037\361\112\260\050\106\311\303\304\102\175\274
++\372\253\131\156\325\267\121\210\021\343\244\205\031\153\202\114
++\244\014\022\255\351\244\256\077\361\303\111\145\232\214\305\310
++\076\045\267\224\231\273\222\062\161\007\360\206\136\355\120\047
++\246\015\246\043\371\273\313\246\007\024\102
++END
++
++# Trust for Certificate "Thawte Premium Server CA"
++# Issuer: E=premium-server at thawte.com,CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA
++# Serial Number: 1 (0x1)
++# Subject: E=premium-server at thawte.com,CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA
++# Not Valid Before: Thu Aug 01 00:00:00 1996
++# Not Valid After : Thu Dec 31 23:59:59 2020
++# Fingerprint (MD5): 06:9F:69:79:16:66:90:02:1B:8C:8C:A2:C3:07:6F:3A
++# Fingerprint (SHA1): 62:7F:8D:78:27:65:63:99:D2:7D:7F:90:44:C9:FE:B3:F3:3E:FA:9A
++CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST
++CKA_TOKEN CK_BBOOL CK_TRUE
++CKA_PRIVATE CK_BBOOL CK_FALSE
++CKA_MODIFIABLE CK_BBOOL CK_FALSE
++CKA_LABEL UTF8 "Thawte Premium Server CA"
++CKA_CERT_SHA1_HASH MULTILINE_OCTAL
++\142\177\215\170\047\145\143\231\322\175\177\220\104\311\376\263
++\363\076\372\232
++END
++CKA_CERT_MD5_HASH MULTILINE_OCTAL
++\006\237\151\171\026\146\220\002\033\214\214\242\303\007\157\072
++END
++CKA_ISSUER MULTILINE_OCTAL
++\060\201\316\061\013\060\011\006\003\125\004\006\023\002\132\101
++\061\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145
++\162\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007
++\023\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006
++\003\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156
++\163\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003
++\125\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151
++\157\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151
++\163\151\157\156\061\041\060\037\006\003\125\004\003\023\030\124
++\150\141\167\164\145\040\120\162\145\155\151\165\155\040\123\145
++\162\166\145\162\040\103\101\061\050\060\046\006\011\052\206\110
++\206\367\015\001\011\001\026\031\160\162\145\155\151\165\155\055
++\163\145\162\166\145\162\100\164\150\141\167\164\145\056\143\157
++\155
++END
++CKA_SERIAL_NUMBER MULTILINE_OCTAL
++\002\001\001
++END
++CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
++CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
++
++#
+ # Certificate "Equifax Secure CA"
+ #
+ # Issuer: OU=Equifax Secure Certificate Authority,O=Equifax,C=US
+@@ -187,9 +602,9 @@
+ CKA_SERIAL_NUMBER MULTILINE_OCTAL
+ \002\004\065\336\364\317
+ END
+-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
++CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+ CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
++CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+ CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
+
+ # Distrust "Distrust a pb.com certificate that does not comply with the baseline requirements."
+@@ -331,9 +746,9 @@
+ \002\020\160\272\344\035\020\331\051\064\266\070\312\173\003\314
+ \272\277
+ END
+-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
++CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+ CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
++CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+ CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
+
+ #
+@@ -480,7 +895,7 @@
+ END
+ CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
+ CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
++CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+ CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
+
+ #
+@@ -747,6 +1162,426 @@
+ CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
+
+ #
++# Certificate "ValiCert Class 1 VA"
++#
++# Issuer: E=info at valicert.com,CN=http://www.valicert.com/,OU=ValiCert Class 1 Policy Validation Authority,O="ValiCert, Inc.",L=ValiCert Validation Network
++# Serial Number: 1 (0x1)
++# Subject: E=info at valicert.com,CN=http://www.valicert.com/,OU=ValiCert Class 1 Policy Validation Authority,O="ValiCert, Inc.",L=ValiCert Validation Network
++# Not Valid Before: Fri Jun 25 22:23:48 1999
++# Not Valid After : Tue Jun 25 22:23:48 2019
++# Fingerprint (MD5): 65:58:AB:15:AD:57:6C:1E:A8:A7:B5:69:AC:BF:FF:EB
++# Fingerprint (SHA1): E5:DF:74:3C:B6:01:C4:9B:98:43:DC:AB:8C:E8:6A:81:10:9F:E4:8E
++CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
++CKA_TOKEN CK_BBOOL CK_TRUE
++CKA_PRIVATE CK_BBOOL CK_FALSE
++CKA_MODIFIABLE CK_BBOOL CK_FALSE
++CKA_LABEL UTF8 "ValiCert Class 1 VA"
++CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509
++CKA_SUBJECT MULTILINE_OCTAL
++\060\201\273\061\044\060\042\006\003\125\004\007\023\033\126\141
++\154\151\103\145\162\164\040\126\141\154\151\144\141\164\151\157
++\156\040\116\145\164\167\157\162\153\061\027\060\025\006\003\125
++\004\012\023\016\126\141\154\151\103\145\162\164\054\040\111\156
++\143\056\061\065\060\063\006\003\125\004\013\023\054\126\141\154
++\151\103\145\162\164\040\103\154\141\163\163\040\061\040\120\157
++\154\151\143\171\040\126\141\154\151\144\141\164\151\157\156\040
++\101\165\164\150\157\162\151\164\171\061\041\060\037\006\003\125
++\004\003\023\030\150\164\164\160\072\057\057\167\167\167\056\166
++\141\154\151\143\145\162\164\056\143\157\155\057\061\040\060\036
++\006\011\052\206\110\206\367\015\001\011\001\026\021\151\156\146
++\157\100\166\141\154\151\143\145\162\164\056\143\157\155
++END
++CKA_ID UTF8 "0"
++CKA_ISSUER MULTILINE_OCTAL
++\060\201\273\061\044\060\042\006\003\125\004\007\023\033\126\141
++\154\151\103\145\162\164\040\126\141\154\151\144\141\164\151\157
++\156\040\116\145\164\167\157\162\153\061\027\060\025\006\003\125
++\004\012\023\016\126\141\154\151\103\145\162\164\054\040\111\156
++\143\056\061\065\060\063\006\003\125\004\013\023\054\126\141\154
++\151\103\145\162\164\040\103\154\141\163\163\040\061\040\120\157
++\154\151\143\171\040\126\141\154\151\144\141\164\151\157\156\040
++\101\165\164\150\157\162\151\164\171\061\041\060\037\006\003\125
++\004\003\023\030\150\164\164\160\072\057\057\167\167\167\056\166
++\141\154\151\143\145\162\164\056\143\157\155\057\061\040\060\036
++\006\011\052\206\110\206\367\015\001\011\001\026\021\151\156\146
++\157\100\166\141\154\151\143\145\162\164\056\143\157\155
++END
++CKA_SERIAL_NUMBER MULTILINE_OCTAL
++\002\001\001
++END
++CKA_VALUE MULTILINE_OCTAL
++\060\202\002\347\060\202\002\120\002\001\001\060\015\006\011\052
++\206\110\206\367\015\001\001\005\005\000\060\201\273\061\044\060
++\042\006\003\125\004\007\023\033\126\141\154\151\103\145\162\164
++\040\126\141\154\151\144\141\164\151\157\156\040\116\145\164\167
++\157\162\153\061\027\060\025\006\003\125\004\012\023\016\126\141
++\154\151\103\145\162\164\054\040\111\156\143\056\061\065\060\063
++\006\003\125\004\013\023\054\126\141\154\151\103\145\162\164\040
++\103\154\141\163\163\040\061\040\120\157\154\151\143\171\040\126
++\141\154\151\144\141\164\151\157\156\040\101\165\164\150\157\162
++\151\164\171\061\041\060\037\006\003\125\004\003\023\030\150\164
++\164\160\072\057\057\167\167\167\056\166\141\154\151\143\145\162
++\164\056\143\157\155\057\061\040\060\036\006\011\052\206\110\206
++\367\015\001\011\001\026\021\151\156\146\157\100\166\141\154\151
++\143\145\162\164\056\143\157\155\060\036\027\015\071\071\060\066
++\062\065\062\062\062\063\064\070\132\027\015\061\071\060\066\062
++\065\062\062\062\063\064\070\132\060\201\273\061\044\060\042\006
++\003\125\004\007\023\033\126\141\154\151\103\145\162\164\040\126
++\141\154\151\144\141\164\151\157\156\040\116\145\164\167\157\162
++\153\061\027\060\025\006\003\125\004\012\023\016\126\141\154\151
++\103\145\162\164\054\040\111\156\143\056\061\065\060\063\006\003
++\125\004\013\023\054\126\141\154\151\103\145\162\164\040\103\154
++\141\163\163\040\061\040\120\157\154\151\143\171\040\126\141\154
++\151\144\141\164\151\157\156\040\101\165\164\150\157\162\151\164
++\171\061\041\060\037\006\003\125\004\003\023\030\150\164\164\160
++\072\057\057\167\167\167\056\166\141\154\151\143\145\162\164\056
++\143\157\155\057\061\040\060\036\006\011\052\206\110\206\367\015
++\001\011\001\026\021\151\156\146\157\100\166\141\154\151\143\145
++\162\164\056\143\157\155\060\201\237\060\015\006\011\052\206\110
++\206\367\015\001\001\001\005\000\003\201\215\000\060\201\211\002
++\201\201\000\330\131\202\172\211\270\226\272\246\057\150\157\130
++\056\247\124\034\006\156\364\352\215\110\274\061\224\027\360\363
++\116\274\262\270\065\222\166\260\320\245\245\001\327\000\003\022
++\042\031\010\370\377\021\043\233\316\007\365\277\151\032\046\376
++\116\351\321\177\235\054\100\035\131\150\156\246\370\130\260\235
++\032\217\323\077\361\334\031\006\201\250\016\340\072\335\310\123
++\105\011\006\346\017\160\303\372\100\246\016\342\126\005\017\030
++\115\374\040\202\321\163\125\164\215\166\162\240\035\235\035\300
++\335\077\161\002\003\001\000\001\060\015\006\011\052\206\110\206
++\367\015\001\001\005\005\000\003\201\201\000\120\150\075\111\364
++\054\034\006\224\337\225\140\177\226\173\027\376\117\161\255\144
++\310\335\167\322\357\131\125\350\077\350\216\005\052\041\362\007
++\322\265\247\122\376\234\261\266\342\133\167\027\100\352\162\326
++\043\313\050\201\062\303\000\171\030\354\131\027\211\311\306\152
++\036\161\311\375\267\164\245\045\105\151\305\110\253\031\341\105
++\212\045\153\031\356\345\273\022\365\177\367\246\215\121\303\360
++\235\164\267\251\076\240\245\377\266\111\003\023\332\042\314\355
++\161\202\053\231\317\072\267\365\055\162\310
++END
++
++# Trust for Certificate "ValiCert Class 1 VA"
++# Issuer: E=info at valicert.com,CN=http://www.valicert.com/,OU=ValiCert Class 1 Policy Validation Authority,O="ValiCert, Inc.",L=ValiCert Validation Network
++# Serial Number: 1 (0x1)
++# Subject: E=info at valicert.com,CN=http://www.valicert.com/,OU=ValiCert Class 1 Policy Validation Authority,O="ValiCert, Inc.",L=ValiCert Validation Network
++# Not Valid Before: Fri Jun 25 22:23:48 1999
++# Not Valid After : Tue Jun 25 22:23:48 2019
++# Fingerprint (MD5): 65:58:AB:15:AD:57:6C:1E:A8:A7:B5:69:AC:BF:FF:EB
++# Fingerprint (SHA1): E5:DF:74:3C:B6:01:C4:9B:98:43:DC:AB:8C:E8:6A:81:10:9F:E4:8E
++CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST
++CKA_TOKEN CK_BBOOL CK_TRUE
++CKA_PRIVATE CK_BBOOL CK_FALSE
++CKA_MODIFIABLE CK_BBOOL CK_FALSE
++CKA_LABEL UTF8 "ValiCert Class 1 VA"
++CKA_CERT_SHA1_HASH MULTILINE_OCTAL
++\345\337\164\074\266\001\304\233\230\103\334\253\214\350\152\201
++\020\237\344\216
++END
++CKA_CERT_MD5_HASH MULTILINE_OCTAL
++\145\130\253\025\255\127\154\036\250\247\265\151\254\277\377\353
++END
++CKA_ISSUER MULTILINE_OCTAL
++\060\201\273\061\044\060\042\006\003\125\004\007\023\033\126\141
++\154\151\103\145\162\164\040\126\141\154\151\144\141\164\151\157
++\156\040\116\145\164\167\157\162\153\061\027\060\025\006\003\125
++\004\012\023\016\126\141\154\151\103\145\162\164\054\040\111\156
++\143\056\061\065\060\063\006\003\125\004\013\023\054\126\141\154
++\151\103\145\162\164\040\103\154\141\163\163\040\061\040\120\157
++\154\151\143\171\040\126\141\154\151\144\141\164\151\157\156\040
++\101\165\164\150\157\162\151\164\171\061\041\060\037\006\003\125
++\004\003\023\030\150\164\164\160\072\057\057\167\167\167\056\166
++\141\154\151\143\145\162\164\056\143\157\155\057\061\040\060\036
++\006\011\052\206\110\206\367\015\001\011\001\026\021\151\156\146
++\157\100\166\141\154\151\143\145\162\164\056\143\157\155
++END
++CKA_SERIAL_NUMBER MULTILINE_OCTAL
++\002\001\001
++END
++CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
++
++#
++# Certificate "ValiCert Class 2 VA"
++#
++# Issuer: E=info at valicert.com,CN=http://www.valicert.com/,OU=ValiCert Class 2 Policy Validation Authority,O="ValiCert, Inc.",L=ValiCert Validation Network
++# Serial Number: 1 (0x1)
++# Subject: E=info at valicert.com,CN=http://www.valicert.com/,OU=ValiCert Class 2 Policy Validation Authority,O="ValiCert, Inc.",L=ValiCert Validation Network
++# Not Valid Before: Sat Jun 26 00:19:54 1999
++# Not Valid After : Wed Jun 26 00:19:54 2019
++# Fingerprint (MD5): A9:23:75:9B:BA:49:36:6E:31:C2:DB:F2:E7:66:BA:87
++# Fingerprint (SHA1): 31:7A:2A:D0:7F:2B:33:5E:F5:A1:C3:4E:4B:57:E8:B7:D8:F1:FC:A6
++CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
++CKA_TOKEN CK_BBOOL CK_TRUE
++CKA_PRIVATE CK_BBOOL CK_FALSE
++CKA_MODIFIABLE CK_BBOOL CK_FALSE
++CKA_LABEL UTF8 "ValiCert Class 2 VA"
++CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509
++CKA_SUBJECT MULTILINE_OCTAL
++\060\201\273\061\044\060\042\006\003\125\004\007\023\033\126\141
++\154\151\103\145\162\164\040\126\141\154\151\144\141\164\151\157
++\156\040\116\145\164\167\157\162\153\061\027\060\025\006\003\125
++\004\012\023\016\126\141\154\151\103\145\162\164\054\040\111\156
++\143\056\061\065\060\063\006\003\125\004\013\023\054\126\141\154
++\151\103\145\162\164\040\103\154\141\163\163\040\062\040\120\157
++\154\151\143\171\040\126\141\154\151\144\141\164\151\157\156\040
++\101\165\164\150\157\162\151\164\171\061\041\060\037\006\003\125
++\004\003\023\030\150\164\164\160\072\057\057\167\167\167\056\166
++\141\154\151\143\145\162\164\056\143\157\155\057\061\040\060\036
++\006\011\052\206\110\206\367\015\001\011\001\026\021\151\156\146
++\157\100\166\141\154\151\143\145\162\164\056\143\157\155
++END
++CKA_ID UTF8 "0"
++CKA_ISSUER MULTILINE_OCTAL
++\060\201\273\061\044\060\042\006\003\125\004\007\023\033\126\141
++\154\151\103\145\162\164\040\126\141\154\151\144\141\164\151\157
++\156\040\116\145\164\167\157\162\153\061\027\060\025\006\003\125
++\004\012\023\016\126\141\154\151\103\145\162\164\054\040\111\156
++\143\056\061\065\060\063\006\003\125\004\013\023\054\126\141\154
++\151\103\145\162\164\040\103\154\141\163\163\040\062\040\120\157
++\154\151\143\171\040\126\141\154\151\144\141\164\151\157\156\040
++\101\165\164\150\157\162\151\164\171\061\041\060\037\006\003\125
++\004\003\023\030\150\164\164\160\072\057\057\167\167\167\056\166
++\141\154\151\143\145\162\164\056\143\157\155\057\061\040\060\036
++\006\011\052\206\110\206\367\015\001\011\001\026\021\151\156\146
++\157\100\166\141\154\151\143\145\162\164\056\143\157\155
++END
++CKA_SERIAL_NUMBER MULTILINE_OCTAL
++\002\001\001
++END
++CKA_VALUE MULTILINE_OCTAL
++\060\202\002\347\060\202\002\120\002\001\001\060\015\006\011\052
++\206\110\206\367\015\001\001\005\005\000\060\201\273\061\044\060
++\042\006\003\125\004\007\023\033\126\141\154\151\103\145\162\164
++\040\126\141\154\151\144\141\164\151\157\156\040\116\145\164\167
++\157\162\153\061\027\060\025\006\003\125\004\012\023\016\126\141
++\154\151\103\145\162\164\054\040\111\156\143\056\061\065\060\063
++\006\003\125\004\013\023\054\126\141\154\151\103\145\162\164\040
++\103\154\141\163\163\040\062\040\120\157\154\151\143\171\040\126
++\141\154\151\144\141\164\151\157\156\040\101\165\164\150\157\162
++\151\164\171\061\041\060\037\006\003\125\004\003\023\030\150\164
++\164\160\072\057\057\167\167\167\056\166\141\154\151\143\145\162
++\164\056\143\157\155\057\061\040\060\036\006\011\052\206\110\206
++\367\015\001\011\001\026\021\151\156\146\157\100\166\141\154\151
++\143\145\162\164\056\143\157\155\060\036\027\015\071\071\060\066
++\062\066\060\060\061\071\065\064\132\027\015\061\071\060\066\062
++\066\060\060\061\071\065\064\132\060\201\273\061\044\060\042\006
++\003\125\004\007\023\033\126\141\154\151\103\145\162\164\040\126
++\141\154\151\144\141\164\151\157\156\040\116\145\164\167\157\162
++\153\061\027\060\025\006\003\125\004\012\023\016\126\141\154\151
++\103\145\162\164\054\040\111\156\143\056\061\065\060\063\006\003
++\125\004\013\023\054\126\141\154\151\103\145\162\164\040\103\154
++\141\163\163\040\062\040\120\157\154\151\143\171\040\126\141\154
++\151\144\141\164\151\157\156\040\101\165\164\150\157\162\151\164
++\171\061\041\060\037\006\003\125\004\003\023\030\150\164\164\160
++\072\057\057\167\167\167\056\166\141\154\151\143\145\162\164\056
++\143\157\155\057\061\040\060\036\006\011\052\206\110\206\367\015
++\001\011\001\026\021\151\156\146\157\100\166\141\154\151\143\145
++\162\164\056\143\157\155\060\201\237\060\015\006\011\052\206\110
++\206\367\015\001\001\001\005\000\003\201\215\000\060\201\211\002
++\201\201\000\316\072\161\312\345\253\310\131\222\125\327\253\330
++\164\016\371\356\331\366\125\107\131\145\107\016\005\125\334\353
++\230\066\074\134\123\135\323\060\317\070\354\275\101\211\355\045
++\102\011\044\153\012\136\263\174\335\122\055\114\346\324\326\175
++\132\131\251\145\324\111\023\055\044\115\034\120\157\265\301\205
++\124\073\376\161\344\323\134\102\371\200\340\221\032\012\133\071
++\066\147\363\077\125\174\033\077\264\137\144\163\064\343\264\022
++\277\207\144\370\332\022\377\067\047\301\263\103\273\357\173\156
++\056\151\367\002\003\001\000\001\060\015\006\011\052\206\110\206
++\367\015\001\001\005\005\000\003\201\201\000\073\177\120\157\157
++\120\224\231\111\142\070\070\037\113\370\245\310\076\247\202\201
++\366\053\307\350\305\316\350\072\020\202\313\030\000\216\115\275
++\250\130\177\241\171\000\265\273\351\215\257\101\331\017\064\356
++\041\201\031\240\062\111\050\364\304\216\126\325\122\063\375\120
++\325\176\231\154\003\344\311\114\374\313\154\253\146\263\112\041
++\214\345\265\014\062\076\020\262\314\154\241\334\232\230\114\002
++\133\363\316\271\236\245\162\016\112\267\077\074\346\026\150\370
++\276\355\164\114\274\133\325\142\037\103\335
++END
++
++# Trust for Certificate "ValiCert Class 2 VA"
++# Issuer: E=info at valicert.com,CN=http://www.valicert.com/,OU=ValiCert Class 2 Policy Validation Authority,O="ValiCert, Inc.",L=ValiCert Validation Network
++# Serial Number: 1 (0x1)
++# Subject: E=info at valicert.com,CN=http://www.valicert.com/,OU=ValiCert Class 2 Policy Validation Authority,O="ValiCert, Inc.",L=ValiCert Validation Network
++# Not Valid Before: Sat Jun 26 00:19:54 1999
++# Not Valid After : Wed Jun 26 00:19:54 2019
++# Fingerprint (MD5): A9:23:75:9B:BA:49:36:6E:31:C2:DB:F2:E7:66:BA:87
++# Fingerprint (SHA1): 31:7A:2A:D0:7F:2B:33:5E:F5:A1:C3:4E:4B:57:E8:B7:D8:F1:FC:A6
++CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST
++CKA_TOKEN CK_BBOOL CK_TRUE
++CKA_PRIVATE CK_BBOOL CK_FALSE
++CKA_MODIFIABLE CK_BBOOL CK_FALSE
++CKA_LABEL UTF8 "ValiCert Class 2 VA"
++CKA_CERT_SHA1_HASH MULTILINE_OCTAL
++\061\172\052\320\177\053\063\136\365\241\303\116\113\127\350\267
++\330\361\374\246
++END
++CKA_CERT_MD5_HASH MULTILINE_OCTAL
++\251\043\165\233\272\111\066\156\061\302\333\362\347\146\272\207
++END
++CKA_ISSUER MULTILINE_OCTAL
++\060\201\273\061\044\060\042\006\003\125\004\007\023\033\126\141
++\154\151\103\145\162\164\040\126\141\154\151\144\141\164\151\157
++\156\040\116\145\164\167\157\162\153\061\027\060\025\006\003\125
++\004\012\023\016\126\141\154\151\103\145\162\164\054\040\111\156
++\143\056\061\065\060\063\006\003\125\004\013\023\054\126\141\154
++\151\103\145\162\164\040\103\154\141\163\163\040\062\040\120\157
++\154\151\143\171\040\126\141\154\151\144\141\164\151\157\156\040
++\101\165\164\150\157\162\151\164\171\061\041\060\037\006\003\125
++\004\003\023\030\150\164\164\160\072\057\057\167\167\167\056\166
++\141\154\151\143\145\162\164\056\143\157\155\057\061\040\060\036
++\006\011\052\206\110\206\367\015\001\011\001\026\021\151\156\146
++\157\100\166\141\154\151\143\145\162\164\056\143\157\155
++END
++CKA_SERIAL_NUMBER MULTILINE_OCTAL
++\002\001\001
++END
++CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
++
++#
++# Certificate "RSA Root Certificate 1"
++#
++# Issuer: E=info at valicert.com,CN=http://www.valicert.com/,OU=ValiCert Class 3 Policy Validation Authority,O="ValiCert, Inc.",L=ValiCert Validation Network
++# Serial Number: 1 (0x1)
++# Subject: E=info at valicert.com,CN=http://www.valicert.com/,OU=ValiCert Class 3 Policy Validation Authority,O="ValiCert, Inc.",L=ValiCert Validation Network
++# Not Valid Before: Sat Jun 26 00:22:33 1999
++# Not Valid After : Wed Jun 26 00:22:33 2019
++# Fingerprint (MD5): A2:6F:53:B7:EE:40:DB:4A:68:E7:FA:18:D9:10:4B:72
++# Fingerprint (SHA1): 69:BD:8C:F4:9C:D3:00:FB:59:2E:17:93:CA:55:6A:F3:EC:AA:35:FB
++CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
++CKA_TOKEN CK_BBOOL CK_TRUE
++CKA_PRIVATE CK_BBOOL CK_FALSE
++CKA_MODIFIABLE CK_BBOOL CK_FALSE
++CKA_LABEL UTF8 "RSA Root Certificate 1"
++CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509
++CKA_SUBJECT MULTILINE_OCTAL
++\060\201\273\061\044\060\042\006\003\125\004\007\023\033\126\141
++\154\151\103\145\162\164\040\126\141\154\151\144\141\164\151\157
++\156\040\116\145\164\167\157\162\153\061\027\060\025\006\003\125
++\004\012\023\016\126\141\154\151\103\145\162\164\054\040\111\156
++\143\056\061\065\060\063\006\003\125\004\013\023\054\126\141\154
++\151\103\145\162\164\040\103\154\141\163\163\040\063\040\120\157
++\154\151\143\171\040\126\141\154\151\144\141\164\151\157\156\040
++\101\165\164\150\157\162\151\164\171\061\041\060\037\006\003\125
++\004\003\023\030\150\164\164\160\072\057\057\167\167\167\056\166
++\141\154\151\143\145\162\164\056\143\157\155\057\061\040\060\036
++\006\011\052\206\110\206\367\015\001\011\001\026\021\151\156\146
++\157\100\166\141\154\151\143\145\162\164\056\143\157\155
++END
++CKA_ID UTF8 "0"
++CKA_ISSUER MULTILINE_OCTAL
++\060\201\273\061\044\060\042\006\003\125\004\007\023\033\126\141
++\154\151\103\145\162\164\040\126\141\154\151\144\141\164\151\157
++\156\040\116\145\164\167\157\162\153\061\027\060\025\006\003\125
++\004\012\023\016\126\141\154\151\103\145\162\164\054\040\111\156
++\143\056\061\065\060\063\006\003\125\004\013\023\054\126\141\154
++\151\103\145\162\164\040\103\154\141\163\163\040\063\040\120\157
++\154\151\143\171\040\126\141\154\151\144\141\164\151\157\156\040
++\101\165\164\150\157\162\151\164\171\061\041\060\037\006\003\125
++\004\003\023\030\150\164\164\160\072\057\057\167\167\167\056\166
++\141\154\151\143\145\162\164\056\143\157\155\057\061\040\060\036
++\006\011\052\206\110\206\367\015\001\011\001\026\021\151\156\146
++\157\100\166\141\154\151\143\145\162\164\056\143\157\155
++END
++CKA_SERIAL_NUMBER MULTILINE_OCTAL
++\002\001\001
++END
++CKA_VALUE MULTILINE_OCTAL
++\060\202\002\347\060\202\002\120\002\001\001\060\015\006\011\052
++\206\110\206\367\015\001\001\005\005\000\060\201\273\061\044\060
++\042\006\003\125\004\007\023\033\126\141\154\151\103\145\162\164
++\040\126\141\154\151\144\141\164\151\157\156\040\116\145\164\167
++\157\162\153\061\027\060\025\006\003\125\004\012\023\016\126\141
++\154\151\103\145\162\164\054\040\111\156\143\056\061\065\060\063
++\006\003\125\004\013\023\054\126\141\154\151\103\145\162\164\040
++\103\154\141\163\163\040\063\040\120\157\154\151\143\171\040\126
++\141\154\151\144\141\164\151\157\156\040\101\165\164\150\157\162
++\151\164\171\061\041\060\037\006\003\125\004\003\023\030\150\164
++\164\160\072\057\057\167\167\167\056\166\141\154\151\143\145\162
++\164\056\143\157\155\057\061\040\060\036\006\011\052\206\110\206
++\367\015\001\011\001\026\021\151\156\146\157\100\166\141\154\151
++\143\145\162\164\056\143\157\155\060\036\027\015\071\071\060\066
++\062\066\060\060\062\062\063\063\132\027\015\061\071\060\066\062
++\066\060\060\062\062\063\063\132\060\201\273\061\044\060\042\006
++\003\125\004\007\023\033\126\141\154\151\103\145\162\164\040\126
++\141\154\151\144\141\164\151\157\156\040\116\145\164\167\157\162
++\153\061\027\060\025\006\003\125\004\012\023\016\126\141\154\151
++\103\145\162\164\054\040\111\156\143\056\061\065\060\063\006\003
++\125\004\013\023\054\126\141\154\151\103\145\162\164\040\103\154
++\141\163\163\040\063\040\120\157\154\151\143\171\040\126\141\154
++\151\144\141\164\151\157\156\040\101\165\164\150\157\162\151\164
++\171\061\041\060\037\006\003\125\004\003\023\030\150\164\164\160
++\072\057\057\167\167\167\056\166\141\154\151\143\145\162\164\056
++\143\157\155\057\061\040\060\036\006\011\052\206\110\206\367\015
++\001\011\001\026\021\151\156\146\157\100\166\141\154\151\143\145
++\162\164\056\143\157\155\060\201\237\060\015\006\011\052\206\110
++\206\367\015\001\001\001\005\000\003\201\215\000\060\201\211\002
++\201\201\000\343\230\121\226\034\350\325\261\006\201\152\127\303
++\162\165\223\253\317\236\246\374\363\026\122\326\055\115\237\065
++\104\250\056\004\115\007\111\212\070\051\365\167\067\347\267\253
++\135\337\066\161\024\231\217\334\302\222\361\347\140\222\227\354
++\330\110\334\277\301\002\040\306\044\244\050\114\060\132\166\155
++\261\134\363\335\336\236\020\161\241\210\307\133\233\101\155\312
++\260\270\216\025\356\255\063\053\317\107\004\134\165\161\012\230
++\044\230\051\247\111\131\245\335\370\267\103\142\141\363\323\342
++\320\125\077\002\003\001\000\001\060\015\006\011\052\206\110\206
++\367\015\001\001\005\005\000\003\201\201\000\126\273\002\130\204
++\147\010\054\337\037\333\173\111\063\365\323\147\235\364\264\012
++\020\263\311\305\054\342\222\152\161\170\047\362\160\203\102\323
++\076\317\251\124\364\361\330\222\026\214\321\004\313\113\253\311
++\237\105\256\074\212\251\260\161\063\135\310\305\127\337\257\250
++\065\263\177\211\207\351\350\045\222\270\177\205\172\256\326\274
++\036\067\130\052\147\311\221\317\052\201\076\355\306\071\337\300
++\076\031\234\031\314\023\115\202\101\265\214\336\340\075\140\010
++\040\017\105\176\153\242\177\243\214\025\356
++END
++
++# Trust for Certificate "RSA Root Certificate 1"
++# Issuer: E=info at valicert.com,CN=http://www.valicert.com/,OU=ValiCert Class 3 Policy Validation Authority,O="ValiCert, Inc.",L=ValiCert Validation Network
++# Serial Number: 1 (0x1)
++# Subject: E=info at valicert.com,CN=http://www.valicert.com/,OU=ValiCert Class 3 Policy Validation Authority,O="ValiCert, Inc.",L=ValiCert Validation Network
++# Not Valid Before: Sat Jun 26 00:22:33 1999
++# Not Valid After : Wed Jun 26 00:22:33 2019
++# Fingerprint (MD5): A2:6F:53:B7:EE:40:DB:4A:68:E7:FA:18:D9:10:4B:72
++# Fingerprint (SHA1): 69:BD:8C:F4:9C:D3:00:FB:59:2E:17:93:CA:55:6A:F3:EC:AA:35:FB
++CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST
++CKA_TOKEN CK_BBOOL CK_TRUE
++CKA_PRIVATE CK_BBOOL CK_FALSE
++CKA_MODIFIABLE CK_BBOOL CK_FALSE
++CKA_LABEL UTF8 "RSA Root Certificate 1"
++CKA_CERT_SHA1_HASH MULTILINE_OCTAL
++\151\275\214\364\234\323\000\373\131\056\027\223\312\125\152\363
++\354\252\065\373
++END
++CKA_CERT_MD5_HASH MULTILINE_OCTAL
++\242\157\123\267\356\100\333\112\150\347\372\030\331\020\113\162
++END
++CKA_ISSUER MULTILINE_OCTAL
++\060\201\273\061\044\060\042\006\003\125\004\007\023\033\126\141
++\154\151\103\145\162\164\040\126\141\154\151\144\141\164\151\157
++\156\040\116\145\164\167\157\162\153\061\027\060\025\006\003\125
++\004\012\023\016\126\141\154\151\103\145\162\164\054\040\111\156
++\143\056\061\065\060\063\006\003\125\004\013\023\054\126\141\154
++\151\103\145\162\164\040\103\154\141\163\163\040\063\040\120\157
++\154\151\143\171\040\126\141\154\151\144\141\164\151\157\156\040
++\101\165\164\150\157\162\151\164\171\061\041\060\037\006\003\125
++\004\003\023\030\150\164\164\160\072\057\057\167\167\167\056\166
++\141\154\151\143\145\162\164\056\143\157\155\057\061\040\060\036
++\006\011\052\206\110\206\367\015\001\011\001\026\021\151\156\146
++\157\100\166\141\154\151\143\145\162\164\056\143\157\155
++END
++CKA_SERIAL_NUMBER MULTILINE_OCTAL
++\002\001\001
++END
++CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
++
++#
+ # Certificate "Verisign Class 1 Public Primary Certification Authority - G3"
+ #
+ # Issuer: CN=VeriSign Class 1 Public Primary Certification Authority - G3,OU="(c) 1999 VeriSign, Inc. - For authorized use only",OU=VeriSign Trust Network,O="VeriSign, Inc.",C=US
+@@ -1351,6 +2186,180 @@
+ CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
+
+ #
++# Certificate "Entrust.net Secure Server CA"
++#
++# Issuer: CN=Entrust.net Secure Server Certification Authority,OU=(c) 1999 Entrust.net Limited,OU=www.entrust.net/CPS incorp. by ref. (limits liab.),O=Entrust.net,C=US
++# Serial Number: 927650371 (0x374ad243)
++# Subject: CN=Entrust.net Secure Server Certification Authority,OU=(c) 1999 Entrust.net Limited,OU=www.entrust.net/CPS incorp. by ref. (limits liab.),O=Entrust.net,C=US
++# Not Valid Before: Tue May 25 16:09:40 1999
++# Not Valid After : Sat May 25 16:39:40 2019
++# Fingerprint (MD5): DF:F2:80:73:CC:F1:E6:61:73:FC:F5:42:E9:C5:7C:EE
++# Fingerprint (SHA1): 99:A6:9B:E6:1A:FE:88:6B:4D:2B:82:00:7C:B8:54:FC:31:7E:15:39
++CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
++CKA_TOKEN CK_BBOOL CK_TRUE
++CKA_PRIVATE CK_BBOOL CK_FALSE
++CKA_MODIFIABLE CK_BBOOL CK_FALSE
++CKA_LABEL UTF8 "Entrust.net Secure Server CA"
++CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509
++CKA_SUBJECT MULTILINE_OCTAL
++\060\201\303\061\013\060\011\006\003\125\004\006\023\002\125\123
++\061\024\060\022\006\003\125\004\012\023\013\105\156\164\162\165
++\163\164\056\156\145\164\061\073\060\071\006\003\125\004\013\023
++\062\167\167\167\056\145\156\164\162\165\163\164\056\156\145\164
++\057\103\120\123\040\151\156\143\157\162\160\056\040\142\171\040
++\162\145\146\056\040\050\154\151\155\151\164\163\040\154\151\141
++\142\056\051\061\045\060\043\006\003\125\004\013\023\034\050\143
++\051\040\061\071\071\071\040\105\156\164\162\165\163\164\056\156
++\145\164\040\114\151\155\151\164\145\144\061\072\060\070\006\003
++\125\004\003\023\061\105\156\164\162\165\163\164\056\156\145\164
++\040\123\145\143\165\162\145\040\123\145\162\166\145\162\040\103
++\145\162\164\151\146\151\143\141\164\151\157\156\040\101\165\164
++\150\157\162\151\164\171
++END
++CKA_ID UTF8 "0"
++CKA_ISSUER MULTILINE_OCTAL
++\060\201\303\061\013\060\011\006\003\125\004\006\023\002\125\123
++\061\024\060\022\006\003\125\004\012\023\013\105\156\164\162\165
++\163\164\056\156\145\164\061\073\060\071\006\003\125\004\013\023
++\062\167\167\167\056\145\156\164\162\165\163\164\056\156\145\164
++\057\103\120\123\040\151\156\143\157\162\160\056\040\142\171\040
++\162\145\146\056\040\050\154\151\155\151\164\163\040\154\151\141
++\142\056\051\061\045\060\043\006\003\125\004\013\023\034\050\143
++\051\040\061\071\071\071\040\105\156\164\162\165\163\164\056\156
++\145\164\040\114\151\155\151\164\145\144\061\072\060\070\006\003
++\125\004\003\023\061\105\156\164\162\165\163\164\056\156\145\164
++\040\123\145\143\165\162\145\040\123\145\162\166\145\162\040\103
++\145\162\164\151\146\151\143\141\164\151\157\156\040\101\165\164
++\150\157\162\151\164\171
++END
++CKA_SERIAL_NUMBER MULTILINE_OCTAL
++\002\004\067\112\322\103
++END
++CKA_VALUE MULTILINE_OCTAL
++\060\202\004\330\060\202\004\101\240\003\002\001\002\002\004\067
++\112\322\103\060\015\006\011\052\206\110\206\367\015\001\001\005
++\005\000\060\201\303\061\013\060\011\006\003\125\004\006\023\002
++\125\123\061\024\060\022\006\003\125\004\012\023\013\105\156\164
++\162\165\163\164\056\156\145\164\061\073\060\071\006\003\125\004
++\013\023\062\167\167\167\056\145\156\164\162\165\163\164\056\156
++\145\164\057\103\120\123\040\151\156\143\157\162\160\056\040\142
++\171\040\162\145\146\056\040\050\154\151\155\151\164\163\040\154
++\151\141\142\056\051\061\045\060\043\006\003\125\004\013\023\034
++\050\143\051\040\061\071\071\071\040\105\156\164\162\165\163\164
++\056\156\145\164\040\114\151\155\151\164\145\144\061\072\060\070
++\006\003\125\004\003\023\061\105\156\164\162\165\163\164\056\156
++\145\164\040\123\145\143\165\162\145\040\123\145\162\166\145\162
++\040\103\145\162\164\151\146\151\143\141\164\151\157\156\040\101
++\165\164\150\157\162\151\164\171\060\036\027\015\071\071\060\065
++\062\065\061\066\060\071\064\060\132\027\015\061\071\060\065\062
++\065\061\066\063\071\064\060\132\060\201\303\061\013\060\011\006
++\003\125\004\006\023\002\125\123\061\024\060\022\006\003\125\004
++\012\023\013\105\156\164\162\165\163\164\056\156\145\164\061\073
++\060\071\006\003\125\004\013\023\062\167\167\167\056\145\156\164
++\162\165\163\164\056\156\145\164\057\103\120\123\040\151\156\143
++\157\162\160\056\040\142\171\040\162\145\146\056\040\050\154\151
++\155\151\164\163\040\154\151\141\142\056\051\061\045\060\043\006
++\003\125\004\013\023\034\050\143\051\040\061\071\071\071\040\105
++\156\164\162\165\163\164\056\156\145\164\040\114\151\155\151\164
++\145\144\061\072\060\070\006\003\125\004\003\023\061\105\156\164
++\162\165\163\164\056\156\145\164\040\123\145\143\165\162\145\040
++\123\145\162\166\145\162\040\103\145\162\164\151\146\151\143\141
++\164\151\157\156\040\101\165\164\150\157\162\151\164\171\060\201
++\235\060\015\006\011\052\206\110\206\367\015\001\001\001\005\000
++\003\201\213\000\060\201\207\002\201\201\000\315\050\203\064\124
++\033\211\363\017\257\067\221\061\377\257\061\140\311\250\350\262
++\020\150\355\237\347\223\066\361\012\144\273\107\365\004\027\077
++\043\107\115\305\047\031\201\046\014\124\162\015\210\055\331\037
++\232\022\237\274\263\161\323\200\031\077\107\146\173\214\065\050
++\322\271\012\337\044\332\234\326\120\171\201\172\132\323\067\367
++\302\112\330\051\222\046\144\321\344\230\154\072\000\212\365\064
++\233\145\370\355\343\020\377\375\270\111\130\334\240\336\202\071
++\153\201\261\026\031\141\271\124\266\346\103\002\001\003\243\202
++\001\327\060\202\001\323\060\021\006\011\140\206\110\001\206\370
++\102\001\001\004\004\003\002\000\007\060\202\001\031\006\003\125
++\035\037\004\202\001\020\060\202\001\014\060\201\336\240\201\333
++\240\201\330\244\201\325\060\201\322\061\013\060\011\006\003\125
++\004\006\023\002\125\123\061\024\060\022\006\003\125\004\012\023
++\013\105\156\164\162\165\163\164\056\156\145\164\061\073\060\071
++\006\003\125\004\013\023\062\167\167\167\056\145\156\164\162\165
++\163\164\056\156\145\164\057\103\120\123\040\151\156\143\157\162
++\160\056\040\142\171\040\162\145\146\056\040\050\154\151\155\151
++\164\163\040\154\151\141\142\056\051\061\045\060\043\006\003\125
++\004\013\023\034\050\143\051\040\061\071\071\071\040\105\156\164
++\162\165\163\164\056\156\145\164\040\114\151\155\151\164\145\144
++\061\072\060\070\006\003\125\004\003\023\061\105\156\164\162\165
++\163\164\056\156\145\164\040\123\145\143\165\162\145\040\123\145
++\162\166\145\162\040\103\145\162\164\151\146\151\143\141\164\151
++\157\156\040\101\165\164\150\157\162\151\164\171\061\015\060\013
++\006\003\125\004\003\023\004\103\122\114\061\060\051\240\047\240
++\045\206\043\150\164\164\160\072\057\057\167\167\167\056\145\156
++\164\162\165\163\164\056\156\145\164\057\103\122\114\057\156\145
++\164\061\056\143\162\154\060\053\006\003\125\035\020\004\044\060
++\042\200\017\061\071\071\071\060\065\062\065\061\066\060\071\064
++\060\132\201\017\062\060\061\071\060\065\062\065\061\066\060\071
++\064\060\132\060\013\006\003\125\035\017\004\004\003\002\001\006
++\060\037\006\003\125\035\043\004\030\060\026\200\024\360\027\142
++\023\125\075\263\377\012\000\153\373\120\204\227\363\355\142\320
++\032\060\035\006\003\125\035\016\004\026\004\024\360\027\142\023
++\125\075\263\377\012\000\153\373\120\204\227\363\355\142\320\032
++\060\014\006\003\125\035\023\004\005\060\003\001\001\377\060\031
++\006\011\052\206\110\206\366\175\007\101\000\004\014\060\012\033
++\004\126\064\056\060\003\002\004\220\060\015\006\011\052\206\110
++\206\367\015\001\001\005\005\000\003\201\201\000\220\334\060\002
++\372\144\164\302\247\012\245\174\041\215\064\027\250\373\107\016
++\377\045\174\215\023\012\373\344\230\265\357\214\370\305\020\015
++\367\222\276\361\303\325\325\225\152\004\273\054\316\046\066\145
++\310\061\306\347\356\077\343\127\165\204\172\021\357\106\117\030
++\364\323\230\273\250\207\062\272\162\366\074\342\075\237\327\035
++\331\303\140\103\214\130\016\042\226\057\142\243\054\037\272\255
++\005\357\253\062\170\207\240\124\163\031\265\134\005\371\122\076
++\155\055\105\013\367\012\223\352\355\006\371\262
++END
++
++# Trust for Certificate "Entrust.net Secure Server CA"
++# Issuer: CN=Entrust.net Secure Server Certification Authority,OU=(c) 1999 Entrust.net Limited,OU=www.entrust.net/CPS incorp. by ref. (limits liab.),O=Entrust.net,C=US
++# Serial Number: 927650371 (0x374ad243)
++# Subject: CN=Entrust.net Secure Server Certification Authority,OU=(c) 1999 Entrust.net Limited,OU=www.entrust.net/CPS incorp. by ref. (limits liab.),O=Entrust.net,C=US
++# Not Valid Before: Tue May 25 16:09:40 1999
++# Not Valid After : Sat May 25 16:39:40 2019
++# Fingerprint (MD5): DF:F2:80:73:CC:F1:E6:61:73:FC:F5:42:E9:C5:7C:EE
++# Fingerprint (SHA1): 99:A6:9B:E6:1A:FE:88:6B:4D:2B:82:00:7C:B8:54:FC:31:7E:15:39
++CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST
++CKA_TOKEN CK_BBOOL CK_TRUE
++CKA_PRIVATE CK_BBOOL CK_FALSE
++CKA_MODIFIABLE CK_BBOOL CK_FALSE
++CKA_LABEL UTF8 "Entrust.net Secure Server CA"
++CKA_CERT_SHA1_HASH MULTILINE_OCTAL
++\231\246\233\346\032\376\210\153\115\053\202\000\174\270\124\374
++\061\176\025\071
++END
++CKA_CERT_MD5_HASH MULTILINE_OCTAL
++\337\362\200\163\314\361\346\141\163\374\365\102\351\305\174\356
++END
++CKA_ISSUER MULTILINE_OCTAL
++\060\201\303\061\013\060\011\006\003\125\004\006\023\002\125\123
++\061\024\060\022\006\003\125\004\012\023\013\105\156\164\162\165
++\163\164\056\156\145\164\061\073\060\071\006\003\125\004\013\023
++\062\167\167\167\056\145\156\164\162\165\163\164\056\156\145\164
++\057\103\120\123\040\151\156\143\157\162\160\056\040\142\171\040
++\162\145\146\056\040\050\154\151\155\151\164\163\040\154\151\141
++\142\056\051\061\045\060\043\006\003\125\004\013\023\034\050\143
++\051\040\061\071\071\071\040\105\156\164\162\165\163\164\056\156
++\145\164\040\114\151\155\151\164\145\144\061\072\060\070\006\003
++\125\004\003\023\061\105\156\164\162\165\163\164\056\156\145\164
++\040\123\145\143\165\162\145\040\123\145\162\166\145\162\040\103
++\145\162\164\151\146\151\143\141\164\151\157\156\040\101\165\164
++\150\157\162\151\164\171
++END
++CKA_SERIAL_NUMBER MULTILINE_OCTAL
++\002\004\067\112\322\103
++END
++CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
++
++#
+ # Certificate "Entrust.net Premium 2048 Secure Server CA"
+ #
+ # Issuer: CN=Entrust.net Certification Authority (2048),OU=(c) 1999 Entrust.net Limited,OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.),O=Entrust.net
+@@ -1753,9 +2762,9 @@
+ CKA_SERIAL_NUMBER MULTILINE_OCTAL
+ \002\001\001
+ END
+-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
++CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+ CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
++CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+ CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
+
+ #
+@@ -1869,9 +2878,9 @@
+ CKA_SERIAL_NUMBER MULTILINE_OCTAL
+ \002\001\004
+ END
+-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
++CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+ CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
++CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+ CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
+
+ #
Copied: nss/repos/testing-i686/nss-config.in (from rev 273428, nss/trunk/nss-config.in)
===================================================================
--- testing-i686/nss-config.in (rev 0)
+++ testing-i686/nss-config.in 2016-08-06 20:55:44 UTC (rev 273429)
@@ -0,0 +1,145 @@
+#!/bin/sh
+
+prefix=@prefix@
+
+major_version=@MOD_MAJOR_VERSION@
+minor_version=@MOD_MINOR_VERSION@
+patch_version=@MOD_PATCH_VERSION@
+
+usage()
+{
+ cat <<EOF
+Usage: nss-config [OPTIONS] [LIBRARIES]
+Options:
+ [--prefix[=DIR]]
+ [--exec-prefix[=DIR]]
+ [--includedir[=DIR]]
+ [--libdir[=DIR]]
+ [--version]
+ [--libs]
+ [--cflags]
+Dynamic Libraries:
+ nss
+ nssutil
+ ssl
+ smime
+EOF
+ exit $1
+}
+
+if test $# -eq 0; then
+ usage 1 1>&2
+fi
+
+lib_ssl=yes
+lib_smime=yes
+lib_nss=yes
+lib_nssutil=yes
+
+while test $# -gt 0; do
+ case "$1" in
+ -*=*) optarg=`echo "$1" | sed 's/[-_a-zA-Z0-9]*=//'` ;;
+ *) optarg= ;;
+ esac
+
+ case $1 in
+ --prefix=*)
+ prefix=$optarg
+ ;;
+ --prefix)
+ echo_prefix=yes
+ ;;
+ --exec-prefix=*)
+ exec_prefix=$optarg
+ ;;
+ --exec-prefix)
+ echo_exec_prefix=yes
+ ;;
+ --includedir=*)
+ includedir=$optarg
+ ;;
+ --includedir)
+ echo_includedir=yes
+ ;;
+ --libdir=*)
+ libdir=$optarg
+ ;;
+ --libdir)
+ echo_libdir=yes
+ ;;
+ --version)
+ echo ${major_version}.${minor_version}.${patch_version}
+ ;;
+ --cflags)
+ echo_cflags=yes
+ ;;
+ --libs)
+ echo_libs=yes
+ ;;
+ ssl)
+ lib_ssl=yes
+ ;;
+ smime)
+ lib_smime=yes
+ ;;
+ nss)
+ lib_nss=yes
+ ;;
+ nssutil)
+ lib_nssutil=yes
+ ;;
+ *)
+ usage 1 1>&2
+ ;;
+ esac
+ shift
+done
+
+# Set variables that may be dependent upon other variables
+if test -z "$exec_prefix"; then
+ exec_prefix=`pkg-config --variable=exec_prefix nss`
+fi
+if test -z "$includedir"; then
+ includedir=`pkg-config --variable=includedir nss`
+fi
+if test -z "$libdir"; then
+ libdir=`pkg-config --variable=libdir nss`
+fi
+
+if test "$echo_prefix" = "yes"; then
+ echo $prefix
+fi
+
+if test "$echo_exec_prefix" = "yes"; then
+ echo $exec_prefix
+fi
+
+if test "$echo_includedir" = "yes"; then
+ echo $includedir
+fi
+
+if test "$echo_libdir" = "yes"; then
+ echo $libdir
+fi
+
+if test "$echo_cflags" = "yes"; then
+ echo -I$includedir
+fi
+
+if test "$echo_libs" = "yes"; then
+ libdirs="-Wl,-rpath-link,$libdir -L$libdir"
+ if test -n "$lib_ssl"; then
+ libdirs="$libdirs -lssl${major_version}"
+ fi
+ if test -n "$lib_smime"; then
+ libdirs="$libdirs -lsmime${major_version}"
+ fi
+ if test -n "$lib_nss"; then
+ libdirs="$libdirs -lnss${major_version}"
+ fi
+ if test -n "$lib_nssutil"; then
+ libdirs="$libdirs -lnssutil${major_version}"
+ fi
+ echo $libdirs
+fi
+
Copied: nss/repos/testing-i686/nss-config.xml (from rev 273428, nss/trunk/nss-config.xml)
===================================================================
--- testing-i686/nss-config.xml (rev 0)
+++ testing-i686/nss-config.xml 2016-08-06 20:55:44 UTC (rev 273429)
@@ -0,0 +1,132 @@
+<?xml version='1.0' encoding='utf-8'?>
+<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
+ "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd" [
+<!ENTITY date SYSTEM "date.xml">
+<!ENTITY version SYSTEM "version.xml">
+]>
+
+<refentry id="nss-config">
+
+ <refentryinfo>
+ <date>&date;</date>
+ <title>Network Security Services</title>
+ <productname>nss</productname>
+ <productnumber>&version;</productnumber>
+ </refentryinfo>
+
+ <refmeta>
+ <refentrytitle>nss-config</refentrytitle>
+ <manvolnum>1</manvolnum>
+ </refmeta>
+
+ <refnamediv>
+ <refname>nss-config</refname>
+ <refpurpose>Return meta information about nss libraries</refpurpose>
+ </refnamediv>
+
+ <refsynopsisdiv>
+ <cmdsynopsis>
+ <command>nss-config</command>
+ <arg><option>--prefix</option></arg>
+ <arg><option>--exec-prefix</option></arg>
+ <arg><option>--includedir</option></arg>
+ <arg><option>--libs</option></arg>
+ <arg><option>--cflags</option></arg>
+ <arg><option>--libdir</option></arg>
+ <arg><option>--version</option></arg>
+ </cmdsynopsis>
+ </refsynopsisdiv>
+
+<refsection id="description">
+ <title>Description</title>
+
+ <para><command>nss-config</command> is a shell scrip
+ tool which can be used to obtain gcc options for building client pacakges of nspt. </para>
+
+ </refsection>
+
+ <refsection>
+ <title>Options</title>
+
+ <variablelist>
+ <varlistentry>
+ <term><option>--prefix</option></term>
+ <listitem><simpara>Returns the top level system directory under which the nss libraries are installed.</simpara></listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>--exec-prefix</option></term>
+ <listitem><simpara>returns the top level system directory under which any nss binaries would be installed.</simpara></listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>--includedir</option> <replaceable>count</replaceable></term>
+ <listitem><simpara>returns the path to the directory were the nss libraries are installed.</simpara></listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>--version</option></term>
+ <listitem><simpara>returns the upstream version of nss in the form major_version-minor_version-patch_version.</simpara></listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>--libs</option></term>
+ <listitem><simpara>returns the compiler linking flags.</simpara></listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>--cflags</option></term>
+ <listitem><simpara>returns the compiler include flags.</simpara></listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>--libdir</option></term>
+ <listitem><simpara>returns the path to the directory were the nss libraries are installed.</simpara></listitem>
+ </varlistentry>
+
+ </variablelist>
+ </refsection>
+
+ <refsection>
+ <title>Examples</title>
+
+ <para>The following example will query for both include path and linkage flags:
+
+ <programlisting>
+ /usr/bin/nss-config --cflags --libs
+ </programlisting>
+
+ </para>
+
+
+ </refsection>
+
+ <refsection>
+ <title>Files</title>
+
+ <para><filename>/usr/bin/nss-config</filename></para>
+
+ </refsection>
+
+ <refsection>
+ <title>See also</title>
+ <para>pkg-config(1)</para>
+ </refsection>
+
+ <refsection id="authors">
+ <title>Authors</title>
+ <para>The nss liraries were written and maintained by developers with Netscape, Red Hat, Sun, Oracle, Mozilla, and Google.</para>
+ <para>
+ Authors: Elio Maldonado <emaldona at redhat.com>.
+ </para>
+ </refsection>
+
+<!-- don't change -->
+ <refsection id="license">
+ <title>LICENSE</title>
+ <para>Licensed under the Mozilla Public License, v. 2.0. If a copy of the MPL was not distributed with this file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ </para>
+ </refsection>
+
+</refentry>
+
Copied: nss/repos/testing-i686/nss.pc.in (from rev 273428, nss/trunk/nss.pc.in)
===================================================================
--- testing-i686/nss.pc.in (rev 0)
+++ testing-i686/nss.pc.in 2016-08-06 20:55:44 UTC (rev 273429)
@@ -0,0 +1,11 @@
+prefix=%prefix%
+exec_prefix=%exec_prefix%
+libdir=%libdir%
+includedir=%includedir%
+
+Name: NSS
+Description: Network Security Services
+Version: %NSS_VERSION%
+Requires: nspr >= %NSPR_VERSION%
+Libs: -L${libdir} -lssl3 -lsmime3 -lnss3 -lnssutil3
+Cflags: -I${includedir}
Copied: nss/repos/testing-x86_64/PKGBUILD (from rev 273428, nss/trunk/PKGBUILD)
===================================================================
--- testing-x86_64/PKGBUILD (rev 0)
+++ testing-x86_64/PKGBUILD 2016-08-06 20:55:44 UTC (rev 273429)
@@ -0,0 +1,127 @@
+# $Id$
+# Maintainer: Jan de Groot <jgc at archlinux.org>
+
+pkgbase=nss
+pkgname=(nss ca-certificates-mozilla)
+pkgver=3.26
+pkgrel=1
+pkgdesc="Network Security Services"
+url="https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS"
+arch=(i686 x86_64)
+license=('MPL' 'GPL')
+_nsprver=4.12
+depends=("nspr>=${_nsprver}" 'sqlite' 'zlib' 'sh' 'p11-kit')
+makedepends=('perl' 'python2' 'xmlto' 'docbook-xsl')
+options=('!strip' '!makeflags' 'staticlibs')
+source=("https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_${pkgver//./_}_RTM/src/${pkgbase}-${pkgver}.tar.gz"
+ certdata2pem.py bundle.sh nss.pc.in nss-config.in nss-config.xml legacy-certs.patch)
+sha256sums=('91783a570ab953693eb977ce47c501f04c104cec287fa011c91bcc8970d1c564'
+ '2a2ff9131c21fa3b23ad7c7a2f069eabc783e56c6eb05419ac5f365f48dea0fc'
+ '045f520403f715a4cc7f3607b4e2c9bcc88fee5bce58d462fddaa2fdb0e4c180'
+ 'f2208c4f70373ff9b60f53d733f8071d4e390c384b776dfc04bf26c306882faf'
+ 'e44ac5095b4d88f24ec7b2e6a9f1581560bd3ad41a3d198596d67ef22f67adb9'
+ '98ace873c63e8e870286bce3ed53249aa2655cc1f53e7049061476e650ab06f1'
+ '5f793af9c8558324e4188163862e0e70a5b069a44ad9e7817e0767093739f2a0')
+
+prepare() {
+ mkdir certs
+
+ echo -n "$(date +"%e %B %Y")" >date.xml
+ echo -n "$pkgver" >version.xml
+
+ cd nss-$pkgver
+
+ # Still needed - Evolution (Camel) and Telepathy-Gabble (Wocky) use
+ # their own validation which doesn't work with trusted intermediates
+ patch nss/lib/ckfw/builtins/certdata.txt ../legacy-certs.patch
+
+ # Respect LDFLAGS
+ sed -e 's/\$(MKSHLIB) -o/\$(MKSHLIB) \$(LDFLAGS) -o/' \
+ -i nss/coreconf/rules.mk
+
+ ln -sr nss/lib/ckfw/builtins/certdata.txt ../certs/
+ ln -sr nss/lib/ckfw/builtins/nssckbi.h ../certs/
+}
+
+
+build() {
+ xmlto man nss-config.xml
+
+ cd certs
+ python2 ../certdata2pem.py
+
+ cd ..
+ sh bundle.sh
+
+ cd nss-$pkgver/nss
+ export BUILD_OPT=1
+ export NSS_USE_SYSTEM_SQLITE=1
+ export NSS_ALLOW_SSLKEYLOGFILE=1
+ export NSS_ENABLE_ECC=1
+ export NSPR_INCLUDE_DIR="`nspr-config --includedir`"
+ export NSPR_LIB_DIR="`nspr-config --libdir`"
+ export XCFLAGS="${CFLAGS}"
+
+ [[ $CARCH == x86_64 ]] && export USE_64=1
+
+ make -C coreconf
+ make -C lib/dbm
+ make
+ make clean_docs build_docs
+}
+
+package_nss() {
+ cd nss-$pkgver
+
+ install -d "$pkgdir"/usr/{bin,include/nss,lib/pkgconfig,share/man/man1}
+
+ NSS_VMAJOR=$(grep '#define.*NSS_VMAJOR' nss/lib/nss/nss.h | awk '{print $3}')
+ NSS_VMINOR=$(grep '#define.*NSS_VMINOR' nss/lib/nss/nss.h | awk '{print $3}')
+ NSS_VPATCH=$(grep '#define.*NSS_VPATCH' nss/lib/nss/nss.h | awk '{print $3}')
+
+ sed ../nss.pc.in \
+ -e "s,%libdir%,/usr/lib,g" \
+ -e "s,%prefix%,/usr,g" \
+ -e "s,%exec_prefix%,/usr/bin,g" \
+ -e "s,%includedir%,/usr/include/nss,g" \
+ -e "s,%NSPR_VERSION%,${_nsprver},g" \
+ -e "s,%NSS_VERSION%,${pkgver},g" \
+ > "$pkgdir/usr/lib/pkgconfig/nss.pc"
+ ln -s nss.pc "$pkgdir/usr/lib/pkgconfig/mozilla-nss.pc"
+
+ sed ../nss-config.in \
+ -e "s, at libdir@,/usr/lib,g" \
+ -e "s, at prefix@,/usr/bin,g" \
+ -e "s, at exec_prefix@,/usr/bin,g" \
+ -e "s, at includedir@,/usr/include/nss,g" \
+ -e "s, at MOD_MAJOR_VERSION@,${NSS_VMAJOR},g" \
+ -e "s, at MOD_MINOR_VERSION@,${NSS_VMINOR},g" \
+ -e "s, at MOD_PATCH_VERSION@,${NSS_VPATCH},g" \
+ > "$pkgdir/usr/bin/nss-config"
+ chmod 755 "$pkgdir/usr/bin/nss-config"
+
+ install -t "$pkgdir/usr/share/man/man1" -m644 nss/doc/nroff/*.1 ../nss-config.1
+
+ cd dist
+ install -t "$pkgdir/usr/include/nss" -m644 public/nss/*.h
+
+ cd *.OBJ/bin
+ install -t "$pkgdir/usr/bin" *util derdump pp shlibsign signtool signver ssltap vfychain vfyserv
+
+ cd ../lib
+ install -t "$pkgdir/usr/lib" *.so
+ install -t "$pkgdir/usr/lib" -m644 *.chk libcrmf.a
+
+ rm "$pkgdir/usr/lib/libnssckbi.so"
+ ln -s libnssckbi-p11-kit.so "$pkgdir/usr/lib/libnssckbi.so"
+}
+
+package_ca-certificates-mozilla() {
+ pkgdesc="Mozilla's set of trusted CA certificates"
+ depends=(ca-certificates-utils)
+
+ local _certdir="$pkgdir/usr/share/ca-certificates/trust-source"
+ install -Dm644 ca-bundle.trust.crt "$_certdir/mozilla.trust.crt"
+ install -Dm644 ca-bundle.neutral-trust.crt "$_certdir/mozilla.neutral-trust.crt"
+ install -Dm644 ca-bundle.supplement.p11-kit "$_certdir/mozilla.supplement.p11-kit"
+}
Copied: nss/repos/testing-x86_64/bundle.sh (from rev 273428, nss/trunk/bundle.sh)
===================================================================
--- testing-x86_64/bundle.sh (rev 0)
+++ testing-x86_64/bundle.sh 2016-08-06 20:55:44 UTC (rev 273429)
@@ -0,0 +1,54 @@
+#!/bin/sh
+# From Fedora's ca-certificates.spec
+
+(
+ cat <<EOF
+# This is a bundle of X.509 certificates of public Certificate
+# Authorities. It was generated from the Mozilla root CA list.
+# These certificates are in the OpenSSL "TRUSTED CERTIFICATE"
+# format and have trust bits set accordingly.
+# An exception are auxiliary certificates, without positive or negative
+# trust, but are used to assist in finding a preferred trust path.
+# Those neutral certificates use the plain BEGIN CERTIFICATE format.
+#
+# Source: nss/lib/ckfw/builtins/certdata.txt
+# Source: nss/lib/ckfw/builtins/nssckbi.h
+#
+# Generated from:
+EOF
+ cat certs/nssckbi.h | grep -w NSS_BUILTINS_LIBRARY_VERSION | awk '{print "# " $2 " " $3}'
+ echo '#'
+) > ca-bundle.trust.crt
+for f in certs/*.crt; do
+ echo "processing $f"
+ tbits=`sed -n '/^# openssl-trust/{s/^.*=//;p;}' $f`
+ distbits=`sed -n '/^# openssl-distrust/{s/^.*=//;p;}' $f`
+ alias=`sed -n '/^# alias=/{s/^.*=//;p;q;}' $f | sed "s/'//g" | sed 's/"//g'`
+ targs=""
+ if [ -n "$tbits" ]; then
+ for t in $tbits; do
+ targs="${targs} -addtrust $t"
+ done
+ fi
+ if [ -n "$distbits" ]; then
+ for t in $distbits; do
+ targs="${targs} -addreject $t"
+ done
+ fi
+ if [ -n "$targs" ]; then
+ echo "trust flags $targs for $f" >> info.trust
+ openssl x509 -text -in "$f" -trustout $targs -setalias "$alias" >> ca-bundle.trust.crt
+ else
+ echo "no trust flags for $f" >> info.notrust
+ # p11-kit-trust defines empty trust lists as "rejected for all purposes".
+ # That's why we use the simple file format
+ # (BEGIN CERTIFICATE, no trust information)
+ # because p11-kit-trust will treat it as a certificate with neutral trust.
+ # This means we cannot use the -setalias feature for neutral trust certs.
+ openssl x509 -text -in "$f" >> ca-bundle.neutral-trust.crt
+ fi
+done
+
+for p in certs/*.p11-kit; do
+ cat "$p" >> ca-bundle.supplement.p11-kit
+done
Copied: nss/repos/testing-x86_64/certdata2pem.py (from rev 273428, nss/trunk/certdata2pem.py)
===================================================================
--- testing-x86_64/certdata2pem.py (rev 0)
+++ testing-x86_64/certdata2pem.py 2016-08-06 20:55:44 UTC (rev 273429)
@@ -0,0 +1,200 @@
+#!/usr/bin/python
+# vim:set et sw=4:
+#
+# certdata2pem.py - splits certdata.txt into multiple files
+#
+# Copyright (C) 2009 Philipp Kern <pkern at debian.org>
+# Copyright (C) 2013 Kai Engert <kaie at redhat.com>
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301,
+# USA.
+
+import base64
+import os.path
+import re
+import sys
+import textwrap
+import urllib
+
+objects = []
+
+def printable_serial(obj):
+ return ".".join(map(lambda x:str(ord(x)), obj['CKA_SERIAL_NUMBER']))
+
+# Dirty file parser.
+in_data, in_multiline, in_obj = False, False, False
+field, type, value, obj = None, None, None, dict()
+for line in open('certdata.txt', 'r'):
+ # Ignore the file header.
+ if not in_data:
+ if line.startswith('BEGINDATA'):
+ in_data = True
+ continue
+ # Ignore comment lines.
+ if line.startswith('#'):
+ continue
+ # Empty lines are significant if we are inside an object.
+ if in_obj and len(line.strip()) == 0:
+ objects.append(obj)
+ obj = dict()
+ in_obj = False
+ continue
+ if len(line.strip()) == 0:
+ continue
+ if in_multiline:
+ if not line.startswith('END'):
+ if type == 'MULTILINE_OCTAL':
+ line = line.strip()
+ for i in re.finditer(r'\\([0-3][0-7][0-7])', line):
+ value += chr(int(i.group(1), 8))
+ else:
+ value += line
+ continue
+ obj[field] = value
+ in_multiline = False
+ continue
+ if line.startswith('CKA_CLASS'):
+ in_obj = True
+ line_parts = line.strip().split(' ', 2)
+ if len(line_parts) > 2:
+ field, type = line_parts[0:2]
+ value = ' '.join(line_parts[2:])
+ elif len(line_parts) == 2:
+ field, type = line_parts
+ value = None
+ else:
+ raise NotImplementedError, 'line_parts < 2 not supported.\n' + line
+ if type == 'MULTILINE_OCTAL':
+ in_multiline = True
+ value = ""
+ continue
+ obj[field] = value
+if len(obj.items()) > 0:
+ objects.append(obj)
+
+# Build up trust database.
+trustmap = dict()
+for obj in objects:
+ if obj['CKA_CLASS'] != 'CKO_NSS_TRUST':
+ continue
+ key = obj['CKA_LABEL'] + printable_serial(obj)
+ trustmap[key] = obj
+ print " added trust", key
+
+# Build up cert database.
+certmap = dict()
+for obj in objects:
+ if obj['CKA_CLASS'] != 'CKO_CERTIFICATE':
+ continue
+ key = obj['CKA_LABEL'] + printable_serial(obj)
+ certmap[key] = obj
+ print " added cert", key
+
+def obj_to_filename(obj):
+ label = obj['CKA_LABEL'][1:-1]
+ label = label.replace('/', '_')\
+ .replace(' ', '_')\
+ .replace('(', '=')\
+ .replace(')', '=')\
+ .replace(',', '_')
+ label = re.sub(r'\\x[0-9a-fA-F]{2}', lambda m:chr(int(m.group(0)[2:], 16)), label)
+ serial = printable_serial(obj)
+ return label + ":" + serial
+
+trust_types = {
+ "CKA_TRUST_DIGITAL_SIGNATURE": "digital-signature",
+ "CKA_TRUST_NON_REPUDIATION": "non-repudiation",
+ "CKA_TRUST_KEY_ENCIPHERMENT": "key-encipherment",
+ "CKA_TRUST_DATA_ENCIPHERMENT": "data-encipherment",
+ "CKA_TRUST_KEY_AGREEMENT": "key-agreement",
+ "CKA_TRUST_KEY_CERT_SIGN": "cert-sign",
+ "CKA_TRUST_CRL_SIGN": "crl-sign",
+ "CKA_TRUST_SERVER_AUTH": "server-auth",
+ "CKA_TRUST_CLIENT_AUTH": "client-auth",
+ "CKA_TRUST_CODE_SIGNING": "code-signing",
+ "CKA_TRUST_EMAIL_PROTECTION": "email-protection",
+ "CKA_TRUST_IPSEC_END_SYSTEM": "ipsec-end-system",
+ "CKA_TRUST_IPSEC_TUNNEL": "ipsec-tunnel",
+ "CKA_TRUST_IPSEC_USER": "ipsec-user",
+ "CKA_TRUST_TIME_STAMPING": "time-stamping",
+ "CKA_TRUST_STEP_UP_APPROVED": "step-up-approved",
+}
+
+openssl_trust = {
+ "CKA_TRUST_SERVER_AUTH": "serverAuth",
+ "CKA_TRUST_CLIENT_AUTH": "clientAuth",
+ "CKA_TRUST_CODE_SIGNING": "codeSigning",
+ "CKA_TRUST_EMAIL_PROTECTION": "emailProtection",
+}
+
+for tobj in objects:
+ if tobj['CKA_CLASS'] == 'CKO_NSS_TRUST':
+ key = tobj['CKA_LABEL'] + printable_serial(tobj)
+ print "producing trust for " + key
+ trustbits = []
+ distrustbits = []
+ openssl_trustflags = []
+ openssl_distrustflags = []
+ for t in trust_types.keys():
+ if tobj.has_key(t) and tobj[t] == 'CKT_NSS_TRUSTED_DELEGATOR':
+ trustbits.append(t)
+ if t in openssl_trust:
+ openssl_trustflags.append(openssl_trust[t])
+ if tobj.has_key(t) and tobj[t] == 'CKT_NSS_NOT_TRUSTED':
+ distrustbits.append(t)
+ if t in openssl_trust:
+ openssl_distrustflags.append(openssl_trust[t])
+
+ fname = obj_to_filename(tobj)
+ try:
+ obj = certmap[key]
+ except:
+ obj = None
+
+ if obj != None:
+ fname += ".crt"
+ else:
+ fname += ".p11-kit"
+
+ f = open(fname, 'w')
+ if obj != None:
+ f.write("# alias=%s\n"%tobj['CKA_LABEL'])
+ f.write("# trust=" + " ".join(trustbits) + "\n")
+ f.write("# distrust=" + " ".join(distrustbits) + "\n")
+ if openssl_trustflags:
+ f.write("# openssl-trust=" + " ".join(openssl_trustflags) + "\n")
+ if openssl_distrustflags:
+ f.write("# openssl-distrust=" + " ".join(openssl_distrustflags) + "\n")
+ f.write("-----BEGIN CERTIFICATE-----\n")
+ f.write("\n".join(textwrap.wrap(base64.b64encode(obj['CKA_VALUE']), 64)))
+ f.write("\n-----END CERTIFICATE-----\n")
+ else:
+ f.write("[p11-kit-object-v1]\n")
+ f.write("label: ");
+ f.write(tobj['CKA_LABEL']);
+ f.write("\n")
+ f.write("class: certificate\n")
+ f.write("certificate-type: x-509\n")
+ f.write("issuer: \"");
+ f.write(urllib.quote(tobj['CKA_ISSUER']));
+ f.write("\"\n")
+ f.write("serial-number: \"");
+ f.write(urllib.quote(tobj['CKA_SERIAL_NUMBER']));
+ f.write("\"\n")
+ if (tobj['CKA_TRUST_SERVER_AUTH'] == 'CKT_NSS_NOT_TRUSTED') or (tobj['CKA_TRUST_EMAIL_PROTECTION'] == 'CKT_NSS_NOT_TRUSTED') or (tobj['CKA_TRUST_CODE_SIGNING'] == 'CKT_NSS_NOT_TRUSTED'):
+ f.write("x-distrusted: true\n")
+ f.write("\n\n")
+ f.close()
+ print " -> written as '%s', trust = %s, openssl-trust = %s, distrust = %s, openssl-distrust = %s" % (fname, trustbits, openssl_trustflags, distrustbits, openssl_distrustflags)
Copied: nss/repos/testing-x86_64/legacy-certs.patch (from rev 273428, nss/trunk/legacy-certs.patch)
===================================================================
--- testing-x86_64/legacy-certs.patch (rev 0)
+++ testing-x86_64/legacy-certs.patch 2016-08-06 20:55:44 UTC (rev 273429)
@@ -0,0 +1,1089 @@
+--- certdata.txt 2016-02-26 22:21:17.016942918 +0100
++++ certdata-legacy.txt 2016-03-21 10:47:41.022763306 +0100
+@@ -70,6 +70,421 @@
+ CKA_LABEL UTF8 "Mozilla Builtin Roots"
+
+ #
++# Certificate "GTE CyberTrust Global Root"
++#
++# Issuer: CN=GTE CyberTrust Global Root,OU="GTE CyberTrust Solutions, Inc.",O=GTE Corporation,C=US
++# Serial Number: 421 (0x1a5)
++# Subject: CN=GTE CyberTrust Global Root,OU="GTE CyberTrust Solutions, Inc.",O=GTE Corporation,C=US
++# Not Valid Before: Thu Aug 13 00:29:00 1998
++# Not Valid After : Mon Aug 13 23:59:00 2018
++# Fingerprint (MD5): CA:3D:D3:68:F1:03:5C:D0:32:FA:B8:2B:59:E8:5A:DB
++# Fingerprint (SHA1): 97:81:79:50:D8:1C:96:70:CC:34:D8:09:CF:79:44:31:36:7E:F4:74
++CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
++CKA_TOKEN CK_BBOOL CK_TRUE
++CKA_PRIVATE CK_BBOOL CK_FALSE
++CKA_MODIFIABLE CK_BBOOL CK_FALSE
++CKA_LABEL UTF8 "GTE CyberTrust Global Root"
++CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509
++CKA_SUBJECT MULTILINE_OCTAL
++\060\165\061\013\060\011\006\003\125\004\006\023\002\125\123\061
++\030\060\026\006\003\125\004\012\023\017\107\124\105\040\103\157
++\162\160\157\162\141\164\151\157\156\061\047\060\045\006\003\125
++\004\013\023\036\107\124\105\040\103\171\142\145\162\124\162\165
++\163\164\040\123\157\154\165\164\151\157\156\163\054\040\111\156
++\143\056\061\043\060\041\006\003\125\004\003\023\032\107\124\105
++\040\103\171\142\145\162\124\162\165\163\164\040\107\154\157\142
++\141\154\040\122\157\157\164
++END
++CKA_ID UTF8 "0"
++CKA_ISSUER MULTILINE_OCTAL
++\060\165\061\013\060\011\006\003\125\004\006\023\002\125\123\061
++\030\060\026\006\003\125\004\012\023\017\107\124\105\040\103\157
++\162\160\157\162\141\164\151\157\156\061\047\060\045\006\003\125
++\004\013\023\036\107\124\105\040\103\171\142\145\162\124\162\165
++\163\164\040\123\157\154\165\164\151\157\156\163\054\040\111\156
++\143\056\061\043\060\041\006\003\125\004\003\023\032\107\124\105
++\040\103\171\142\145\162\124\162\165\163\164\040\107\154\157\142
++\141\154\040\122\157\157\164
++END
++CKA_SERIAL_NUMBER MULTILINE_OCTAL
++\002\002\001\245
++END
++CKA_VALUE MULTILINE_OCTAL
++\060\202\002\132\060\202\001\303\002\002\001\245\060\015\006\011
++\052\206\110\206\367\015\001\001\004\005\000\060\165\061\013\060
++\011\006\003\125\004\006\023\002\125\123\061\030\060\026\006\003
++\125\004\012\023\017\107\124\105\040\103\157\162\160\157\162\141
++\164\151\157\156\061\047\060\045\006\003\125\004\013\023\036\107
++\124\105\040\103\171\142\145\162\124\162\165\163\164\040\123\157
++\154\165\164\151\157\156\163\054\040\111\156\143\056\061\043\060
++\041\006\003\125\004\003\023\032\107\124\105\040\103\171\142\145
++\162\124\162\165\163\164\040\107\154\157\142\141\154\040\122\157
++\157\164\060\036\027\015\071\070\060\070\061\063\060\060\062\071
++\060\060\132\027\015\061\070\060\070\061\063\062\063\065\071\060
++\060\132\060\165\061\013\060\011\006\003\125\004\006\023\002\125
++\123\061\030\060\026\006\003\125\004\012\023\017\107\124\105\040
++\103\157\162\160\157\162\141\164\151\157\156\061\047\060\045\006
++\003\125\004\013\023\036\107\124\105\040\103\171\142\145\162\124
++\162\165\163\164\040\123\157\154\165\164\151\157\156\163\054\040
++\111\156\143\056\061\043\060\041\006\003\125\004\003\023\032\107
++\124\105\040\103\171\142\145\162\124\162\165\163\164\040\107\154
++\157\142\141\154\040\122\157\157\164\060\201\237\060\015\006\011
++\052\206\110\206\367\015\001\001\001\005\000\003\201\215\000\060
++\201\211\002\201\201\000\225\017\240\266\360\120\234\350\172\307
++\210\315\335\027\016\056\260\224\320\033\075\016\366\224\300\212
++\224\307\006\310\220\227\310\270\144\032\172\176\154\074\123\341
++\067\050\163\140\177\262\227\123\007\237\123\371\155\130\224\322
++\257\215\155\210\147\200\346\355\262\225\317\162\061\312\245\034
++\162\272\134\002\347\144\102\347\371\251\054\326\072\015\254\215
++\102\252\044\001\071\346\234\077\001\205\127\015\130\207\105\370
++\323\205\252\223\151\046\205\160\110\200\077\022\025\307\171\264
++\037\005\057\073\142\231\002\003\001\000\001\060\015\006\011\052
++\206\110\206\367\015\001\001\004\005\000\003\201\201\000\155\353
++\033\011\351\136\331\121\333\147\042\141\244\052\074\110\167\343
++\240\174\246\336\163\242\024\003\205\075\373\253\016\060\305\203
++\026\063\201\023\010\236\173\064\116\337\100\310\164\327\271\175
++\334\364\166\125\175\233\143\124\030\351\360\352\363\134\261\331
++\213\102\036\271\300\225\116\272\372\325\342\174\365\150\141\277
++\216\354\005\227\137\133\260\327\243\205\064\304\044\247\015\017
++\225\223\357\313\224\330\236\037\235\134\205\155\307\252\256\117
++\037\042\265\315\225\255\272\247\314\371\253\013\172\177
++END
++
++# Trust for Certificate "GTE CyberTrust Global Root"
++# Issuer: CN=GTE CyberTrust Global Root,OU="GTE CyberTrust Solutions, Inc.",O=GTE Corporation,C=US
++# Serial Number: 421 (0x1a5)
++# Subject: CN=GTE CyberTrust Global Root,OU="GTE CyberTrust Solutions, Inc.",O=GTE Corporation,C=US
++# Not Valid Before: Thu Aug 13 00:29:00 1998
++# Not Valid After : Mon Aug 13 23:59:00 2018
++# Fingerprint (MD5): CA:3D:D3:68:F1:03:5C:D0:32:FA:B8:2B:59:E8:5A:DB
++# Fingerprint (SHA1): 97:81:79:50:D8:1C:96:70:CC:34:D8:09:CF:79:44:31:36:7E:F4:74
++CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST
++CKA_TOKEN CK_BBOOL CK_TRUE
++CKA_PRIVATE CK_BBOOL CK_FALSE
++CKA_MODIFIABLE CK_BBOOL CK_FALSE
++CKA_LABEL UTF8 "GTE CyberTrust Global Root"
++CKA_CERT_SHA1_HASH MULTILINE_OCTAL
++\227\201\171\120\330\034\226\160\314\064\330\011\317\171\104\061
++\066\176\364\164
++END
++CKA_CERT_MD5_HASH MULTILINE_OCTAL
++\312\075\323\150\361\003\134\320\062\372\270\053\131\350\132\333
++END
++CKA_ISSUER MULTILINE_OCTAL
++\060\165\061\013\060\011\006\003\125\004\006\023\002\125\123\061
++\030\060\026\006\003\125\004\012\023\017\107\124\105\040\103\157
++\162\160\157\162\141\164\151\157\156\061\047\060\045\006\003\125
++\004\013\023\036\107\124\105\040\103\171\142\145\162\124\162\165
++\163\164\040\123\157\154\165\164\151\157\156\163\054\040\111\156
++\143\056\061\043\060\041\006\003\125\004\003\023\032\107\124\105
++\040\103\171\142\145\162\124\162\165\163\164\040\107\154\157\142
++\141\154\040\122\157\157\164
++END
++CKA_SERIAL_NUMBER MULTILINE_OCTAL
++\002\002\001\245
++END
++CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
++
++#
++# Certificate "Thawte Server CA"
++#
++# Issuer: E=server-certs at thawte.com,CN=Thawte Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA
++# Serial Number: 1 (0x1)
++# Subject: E=server-certs at thawte.com,CN=Thawte Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA
++# Not Valid Before: Thu Aug 01 00:00:00 1996
++# Not Valid After : Thu Dec 31 23:59:59 2020
++# Fingerprint (MD5): C5:70:C4:A2:ED:53:78:0C:C8:10:53:81:64:CB:D0:1D
++# Fingerprint (SHA1): 23:E5:94:94:51:95:F2:41:48:03:B4:D5:64:D2:A3:A3:F5:D8:8B:8C
++CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
++CKA_TOKEN CK_BBOOL CK_TRUE
++CKA_PRIVATE CK_BBOOL CK_FALSE
++CKA_MODIFIABLE CK_BBOOL CK_FALSE
++CKA_LABEL UTF8 "Thawte Server CA"
++CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509
++CKA_SUBJECT MULTILINE_OCTAL
++\060\201\304\061\013\060\011\006\003\125\004\006\023\002\132\101
++\061\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145
++\162\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007
++\023\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006
++\003\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156
++\163\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003
++\125\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151
++\157\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151
++\163\151\157\156\061\031\060\027\006\003\125\004\003\023\020\124
++\150\141\167\164\145\040\123\145\162\166\145\162\040\103\101\061
++\046\060\044\006\011\052\206\110\206\367\015\001\011\001\026\027
++\163\145\162\166\145\162\055\143\145\162\164\163\100\164\150\141
++\167\164\145\056\143\157\155
++END
++CKA_ID UTF8 "0"
++CKA_ISSUER MULTILINE_OCTAL
++\060\201\304\061\013\060\011\006\003\125\004\006\023\002\132\101
++\061\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145
++\162\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007
++\023\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006
++\003\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156
++\163\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003
++\125\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151
++\157\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151
++\163\151\157\156\061\031\060\027\006\003\125\004\003\023\020\124
++\150\141\167\164\145\040\123\145\162\166\145\162\040\103\101\061
++\046\060\044\006\011\052\206\110\206\367\015\001\011\001\026\027
++\163\145\162\166\145\162\055\143\145\162\164\163\100\164\150\141
++\167\164\145\056\143\157\155
++END
++CKA_SERIAL_NUMBER MULTILINE_OCTAL
++\002\001\001
++END
++CKA_VALUE MULTILINE_OCTAL
++\060\202\003\023\060\202\002\174\240\003\002\001\002\002\001\001
++\060\015\006\011\052\206\110\206\367\015\001\001\004\005\000\060
++\201\304\061\013\060\011\006\003\125\004\006\023\002\132\101\061
++\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145\162
++\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007\023
++\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006\003
++\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156\163
++\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003\125
++\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151\157
++\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151\163
++\151\157\156\061\031\060\027\006\003\125\004\003\023\020\124\150
++\141\167\164\145\040\123\145\162\166\145\162\040\103\101\061\046
++\060\044\006\011\052\206\110\206\367\015\001\011\001\026\027\163
++\145\162\166\145\162\055\143\145\162\164\163\100\164\150\141\167
++\164\145\056\143\157\155\060\036\027\015\071\066\060\070\060\061
++\060\060\060\060\060\060\132\027\015\062\060\061\062\063\061\062
++\063\065\071\065\071\132\060\201\304\061\013\060\011\006\003\125
++\004\006\023\002\132\101\061\025\060\023\006\003\125\004\010\023
++\014\127\145\163\164\145\162\156\040\103\141\160\145\061\022\060
++\020\006\003\125\004\007\023\011\103\141\160\145\040\124\157\167
++\156\061\035\060\033\006\003\125\004\012\023\024\124\150\141\167
++\164\145\040\103\157\156\163\165\154\164\151\156\147\040\143\143
++\061\050\060\046\006\003\125\004\013\023\037\103\145\162\164\151
++\146\151\143\141\164\151\157\156\040\123\145\162\166\151\143\145
++\163\040\104\151\166\151\163\151\157\156\061\031\060\027\006\003
++\125\004\003\023\020\124\150\141\167\164\145\040\123\145\162\166
++\145\162\040\103\101\061\046\060\044\006\011\052\206\110\206\367
++\015\001\011\001\026\027\163\145\162\166\145\162\055\143\145\162
++\164\163\100\164\150\141\167\164\145\056\143\157\155\060\201\237
++\060\015\006\011\052\206\110\206\367\015\001\001\001\005\000\003
++\201\215\000\060\201\211\002\201\201\000\323\244\120\156\310\377
++\126\153\346\317\135\266\352\014\150\165\107\242\252\302\332\204
++\045\374\250\364\107\121\332\205\265\040\164\224\206\036\017\165
++\311\351\010\141\365\006\155\060\156\025\031\002\351\122\300\142
++\333\115\231\236\342\152\014\104\070\315\376\276\343\144\011\160
++\305\376\261\153\051\266\057\111\310\073\324\047\004\045\020\227
++\057\347\220\155\300\050\102\231\327\114\103\336\303\365\041\155
++\124\237\135\303\130\341\300\344\331\133\260\270\334\264\173\337
++\066\072\302\265\146\042\022\326\207\015\002\003\001\000\001\243
++\023\060\021\060\017\006\003\125\035\023\001\001\377\004\005\060
++\003\001\001\377\060\015\006\011\052\206\110\206\367\015\001\001
++\004\005\000\003\201\201\000\007\372\114\151\134\373\225\314\106
++\356\205\203\115\041\060\216\312\331\250\157\111\032\346\332\121
++\343\140\160\154\204\141\021\241\032\310\110\076\131\103\175\117
++\225\075\241\213\267\013\142\230\172\165\212\335\210\116\116\236
++\100\333\250\314\062\164\271\157\015\306\343\263\104\013\331\212
++\157\232\051\233\231\030\050\073\321\343\100\050\232\132\074\325
++\265\347\040\033\213\312\244\253\215\351\121\331\342\114\054\131
++\251\332\271\262\165\033\366\102\362\357\307\362\030\371\211\274
++\243\377\212\043\056\160\107
++END
++
++# Trust for Certificate "Thawte Server CA"
++# Issuer: E=server-certs at thawte.com,CN=Thawte Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA
++# Serial Number: 1 (0x1)
++# Subject: E=server-certs at thawte.com,CN=Thawte Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA
++# Not Valid Before: Thu Aug 01 00:00:00 1996
++# Not Valid After : Thu Dec 31 23:59:59 2020
++# Fingerprint (MD5): C5:70:C4:A2:ED:53:78:0C:C8:10:53:81:64:CB:D0:1D
++# Fingerprint (SHA1): 23:E5:94:94:51:95:F2:41:48:03:B4:D5:64:D2:A3:A3:F5:D8:8B:8C
++CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST
++CKA_TOKEN CK_BBOOL CK_TRUE
++CKA_PRIVATE CK_BBOOL CK_FALSE
++CKA_MODIFIABLE CK_BBOOL CK_FALSE
++CKA_LABEL UTF8 "Thawte Server CA"
++CKA_CERT_SHA1_HASH MULTILINE_OCTAL
++\043\345\224\224\121\225\362\101\110\003\264\325\144\322\243\243
++\365\330\213\214
++END
++CKA_CERT_MD5_HASH MULTILINE_OCTAL
++\305\160\304\242\355\123\170\014\310\020\123\201\144\313\320\035
++END
++CKA_ISSUER MULTILINE_OCTAL
++\060\201\304\061\013\060\011\006\003\125\004\006\023\002\132\101
++\061\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145
++\162\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007
++\023\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006
++\003\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156
++\163\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003
++\125\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151
++\157\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151
++\163\151\157\156\061\031\060\027\006\003\125\004\003\023\020\124
++\150\141\167\164\145\040\123\145\162\166\145\162\040\103\101\061
++\046\060\044\006\011\052\206\110\206\367\015\001\011\001\026\027
++\163\145\162\166\145\162\055\143\145\162\164\163\100\164\150\141
++\167\164\145\056\143\157\155
++END
++CKA_SERIAL_NUMBER MULTILINE_OCTAL
++\002\001\001
++END
++CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
++CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
++
++#
++# Certificate "Thawte Premium Server CA"
++#
++# Issuer: E=premium-server at thawte.com,CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA
++# Serial Number: 1 (0x1)
++# Subject: E=premium-server at thawte.com,CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA
++# Not Valid Before: Thu Aug 01 00:00:00 1996
++# Not Valid After : Thu Dec 31 23:59:59 2020
++# Fingerprint (MD5): 06:9F:69:79:16:66:90:02:1B:8C:8C:A2:C3:07:6F:3A
++# Fingerprint (SHA1): 62:7F:8D:78:27:65:63:99:D2:7D:7F:90:44:C9:FE:B3:F3:3E:FA:9A
++CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
++CKA_TOKEN CK_BBOOL CK_TRUE
++CKA_PRIVATE CK_BBOOL CK_FALSE
++CKA_MODIFIABLE CK_BBOOL CK_FALSE
++CKA_LABEL UTF8 "Thawte Premium Server CA"
++CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509
++CKA_SUBJECT MULTILINE_OCTAL
++\060\201\316\061\013\060\011\006\003\125\004\006\023\002\132\101
++\061\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145
++\162\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007
++\023\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006
++\003\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156
++\163\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003
++\125\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151
++\157\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151
++\163\151\157\156\061\041\060\037\006\003\125\004\003\023\030\124
++\150\141\167\164\145\040\120\162\145\155\151\165\155\040\123\145
++\162\166\145\162\040\103\101\061\050\060\046\006\011\052\206\110
++\206\367\015\001\011\001\026\031\160\162\145\155\151\165\155\055
++\163\145\162\166\145\162\100\164\150\141\167\164\145\056\143\157
++\155
++END
++CKA_ID UTF8 "0"
++CKA_ISSUER MULTILINE_OCTAL
++\060\201\316\061\013\060\011\006\003\125\004\006\023\002\132\101
++\061\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145
++\162\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007
++\023\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006
++\003\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156
++\163\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003
++\125\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151
++\157\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151
++\163\151\157\156\061\041\060\037\006\003\125\004\003\023\030\124
++\150\141\167\164\145\040\120\162\145\155\151\165\155\040\123\145
++\162\166\145\162\040\103\101\061\050\060\046\006\011\052\206\110
++\206\367\015\001\011\001\026\031\160\162\145\155\151\165\155\055
++\163\145\162\166\145\162\100\164\150\141\167\164\145\056\143\157
++\155
++END
++CKA_SERIAL_NUMBER MULTILINE_OCTAL
++\002\001\001
++END
++CKA_VALUE MULTILINE_OCTAL
++\060\202\003\047\060\202\002\220\240\003\002\001\002\002\001\001
++\060\015\006\011\052\206\110\206\367\015\001\001\004\005\000\060
++\201\316\061\013\060\011\006\003\125\004\006\023\002\132\101\061
++\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145\162
++\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007\023
++\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006\003
++\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156\163
++\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003\125
++\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151\157
++\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151\163
++\151\157\156\061\041\060\037\006\003\125\004\003\023\030\124\150
++\141\167\164\145\040\120\162\145\155\151\165\155\040\123\145\162
++\166\145\162\040\103\101\061\050\060\046\006\011\052\206\110\206
++\367\015\001\011\001\026\031\160\162\145\155\151\165\155\055\163
++\145\162\166\145\162\100\164\150\141\167\164\145\056\143\157\155
++\060\036\027\015\071\066\060\070\060\061\060\060\060\060\060\060
++\132\027\015\062\060\061\062\063\061\062\063\065\071\065\071\132
++\060\201\316\061\013\060\011\006\003\125\004\006\023\002\132\101
++\061\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145
++\162\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007
++\023\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006
++\003\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156
++\163\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003
++\125\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151
++\157\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151
++\163\151\157\156\061\041\060\037\006\003\125\004\003\023\030\124
++\150\141\167\164\145\040\120\162\145\155\151\165\155\040\123\145
++\162\166\145\162\040\103\101\061\050\060\046\006\011\052\206\110
++\206\367\015\001\011\001\026\031\160\162\145\155\151\165\155\055
++\163\145\162\166\145\162\100\164\150\141\167\164\145\056\143\157
++\155\060\201\237\060\015\006\011\052\206\110\206\367\015\001\001
++\001\005\000\003\201\215\000\060\201\211\002\201\201\000\322\066
++\066\152\213\327\302\133\236\332\201\101\142\217\070\356\111\004
++\125\326\320\357\034\033\225\026\107\357\030\110\065\072\122\364
++\053\152\006\217\073\057\352\126\343\257\206\215\236\027\367\236
++\264\145\165\002\115\357\313\011\242\041\121\330\233\320\147\320
++\272\015\222\006\024\163\324\223\313\227\052\000\234\134\116\014
++\274\372\025\122\374\362\104\156\332\021\112\156\010\237\057\055
++\343\371\252\072\206\163\266\106\123\130\310\211\005\275\203\021
++\270\163\077\252\007\215\364\102\115\347\100\235\034\067\002\003
++\001\000\001\243\023\060\021\060\017\006\003\125\035\023\001\001
++\377\004\005\060\003\001\001\377\060\015\006\011\052\206\110\206
++\367\015\001\001\004\005\000\003\201\201\000\046\110\054\026\302
++\130\372\350\026\164\014\252\252\137\124\077\362\327\311\170\140
++\136\136\156\067\143\042\167\066\176\262\027\304\064\271\365\010
++\205\374\311\001\070\377\115\276\362\026\102\103\347\273\132\106
++\373\301\306\021\037\361\112\260\050\106\311\303\304\102\175\274
++\372\253\131\156\325\267\121\210\021\343\244\205\031\153\202\114
++\244\014\022\255\351\244\256\077\361\303\111\145\232\214\305\310
++\076\045\267\224\231\273\222\062\161\007\360\206\136\355\120\047
++\246\015\246\043\371\273\313\246\007\024\102
++END
++
++# Trust for Certificate "Thawte Premium Server CA"
++# Issuer: E=premium-server at thawte.com,CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA
++# Serial Number: 1 (0x1)
++# Subject: E=premium-server at thawte.com,CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA
++# Not Valid Before: Thu Aug 01 00:00:00 1996
++# Not Valid After : Thu Dec 31 23:59:59 2020
++# Fingerprint (MD5): 06:9F:69:79:16:66:90:02:1B:8C:8C:A2:C3:07:6F:3A
++# Fingerprint (SHA1): 62:7F:8D:78:27:65:63:99:D2:7D:7F:90:44:C9:FE:B3:F3:3E:FA:9A
++CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST
++CKA_TOKEN CK_BBOOL CK_TRUE
++CKA_PRIVATE CK_BBOOL CK_FALSE
++CKA_MODIFIABLE CK_BBOOL CK_FALSE
++CKA_LABEL UTF8 "Thawte Premium Server CA"
++CKA_CERT_SHA1_HASH MULTILINE_OCTAL
++\142\177\215\170\047\145\143\231\322\175\177\220\104\311\376\263
++\363\076\372\232
++END
++CKA_CERT_MD5_HASH MULTILINE_OCTAL
++\006\237\151\171\026\146\220\002\033\214\214\242\303\007\157\072
++END
++CKA_ISSUER MULTILINE_OCTAL
++\060\201\316\061\013\060\011\006\003\125\004\006\023\002\132\101
++\061\025\060\023\006\003\125\004\010\023\014\127\145\163\164\145
++\162\156\040\103\141\160\145\061\022\060\020\006\003\125\004\007
++\023\011\103\141\160\145\040\124\157\167\156\061\035\060\033\006
++\003\125\004\012\023\024\124\150\141\167\164\145\040\103\157\156
++\163\165\154\164\151\156\147\040\143\143\061\050\060\046\006\003
++\125\004\013\023\037\103\145\162\164\151\146\151\143\141\164\151
++\157\156\040\123\145\162\166\151\143\145\163\040\104\151\166\151
++\163\151\157\156\061\041\060\037\006\003\125\004\003\023\030\124
++\150\141\167\164\145\040\120\162\145\155\151\165\155\040\123\145
++\162\166\145\162\040\103\101\061\050\060\046\006\011\052\206\110
++\206\367\015\001\011\001\026\031\160\162\145\155\151\165\155\055
++\163\145\162\166\145\162\100\164\150\141\167\164\145\056\143\157
++\155
++END
++CKA_SERIAL_NUMBER MULTILINE_OCTAL
++\002\001\001
++END
++CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
++CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
++
++#
+ # Certificate "Equifax Secure CA"
+ #
+ # Issuer: OU=Equifax Secure Certificate Authority,O=Equifax,C=US
+@@ -187,9 +602,9 @@
+ CKA_SERIAL_NUMBER MULTILINE_OCTAL
+ \002\004\065\336\364\317
+ END
+-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
++CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+ CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
++CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+ CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
+
+ # Distrust "Distrust a pb.com certificate that does not comply with the baseline requirements."
+@@ -331,9 +746,9 @@
+ \002\020\160\272\344\035\020\331\051\064\266\070\312\173\003\314
+ \272\277
+ END
+-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
++CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+ CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
++CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+ CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
+
+ #
+@@ -480,7 +895,7 @@
+ END
+ CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
+ CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
++CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+ CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
+
+ #
+@@ -747,6 +1162,426 @@
+ CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
+
+ #
++# Certificate "ValiCert Class 1 VA"
++#
++# Issuer: E=info at valicert.com,CN=http://www.valicert.com/,OU=ValiCert Class 1 Policy Validation Authority,O="ValiCert, Inc.",L=ValiCert Validation Network
++# Serial Number: 1 (0x1)
++# Subject: E=info at valicert.com,CN=http://www.valicert.com/,OU=ValiCert Class 1 Policy Validation Authority,O="ValiCert, Inc.",L=ValiCert Validation Network
++# Not Valid Before: Fri Jun 25 22:23:48 1999
++# Not Valid After : Tue Jun 25 22:23:48 2019
++# Fingerprint (MD5): 65:58:AB:15:AD:57:6C:1E:A8:A7:B5:69:AC:BF:FF:EB
++# Fingerprint (SHA1): E5:DF:74:3C:B6:01:C4:9B:98:43:DC:AB:8C:E8:6A:81:10:9F:E4:8E
++CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
++CKA_TOKEN CK_BBOOL CK_TRUE
++CKA_PRIVATE CK_BBOOL CK_FALSE
++CKA_MODIFIABLE CK_BBOOL CK_FALSE
++CKA_LABEL UTF8 "ValiCert Class 1 VA"
++CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509
++CKA_SUBJECT MULTILINE_OCTAL
++\060\201\273\061\044\060\042\006\003\125\004\007\023\033\126\141
++\154\151\103\145\162\164\040\126\141\154\151\144\141\164\151\157
++\156\040\116\145\164\167\157\162\153\061\027\060\025\006\003\125
++\004\012\023\016\126\141\154\151\103\145\162\164\054\040\111\156
++\143\056\061\065\060\063\006\003\125\004\013\023\054\126\141\154
++\151\103\145\162\164\040\103\154\141\163\163\040\061\040\120\157
++\154\151\143\171\040\126\141\154\151\144\141\164\151\157\156\040
++\101\165\164\150\157\162\151\164\171\061\041\060\037\006\003\125
++\004\003\023\030\150\164\164\160\072\057\057\167\167\167\056\166
++\141\154\151\143\145\162\164\056\143\157\155\057\061\040\060\036
++\006\011\052\206\110\206\367\015\001\011\001\026\021\151\156\146
++\157\100\166\141\154\151\143\145\162\164\056\143\157\155
++END
++CKA_ID UTF8 "0"
++CKA_ISSUER MULTILINE_OCTAL
++\060\201\273\061\044\060\042\006\003\125\004\007\023\033\126\141
++\154\151\103\145\162\164\040\126\141\154\151\144\141\164\151\157
++\156\040\116\145\164\167\157\162\153\061\027\060\025\006\003\125
++\004\012\023\016\126\141\154\151\103\145\162\164\054\040\111\156
++\143\056\061\065\060\063\006\003\125\004\013\023\054\126\141\154
++\151\103\145\162\164\040\103\154\141\163\163\040\061\040\120\157
++\154\151\143\171\040\126\141\154\151\144\141\164\151\157\156\040
++\101\165\164\150\157\162\151\164\171\061\041\060\037\006\003\125
++\004\003\023\030\150\164\164\160\072\057\057\167\167\167\056\166
++\141\154\151\143\145\162\164\056\143\157\155\057\061\040\060\036
++\006\011\052\206\110\206\367\015\001\011\001\026\021\151\156\146
++\157\100\166\141\154\151\143\145\162\164\056\143\157\155
++END
++CKA_SERIAL_NUMBER MULTILINE_OCTAL
++\002\001\001
++END
++CKA_VALUE MULTILINE_OCTAL
++\060\202\002\347\060\202\002\120\002\001\001\060\015\006\011\052
++\206\110\206\367\015\001\001\005\005\000\060\201\273\061\044\060
++\042\006\003\125\004\007\023\033\126\141\154\151\103\145\162\164
++\040\126\141\154\151\144\141\164\151\157\156\040\116\145\164\167
++\157\162\153\061\027\060\025\006\003\125\004\012\023\016\126\141
++\154\151\103\145\162\164\054\040\111\156\143\056\061\065\060\063
++\006\003\125\004\013\023\054\126\141\154\151\103\145\162\164\040
++\103\154\141\163\163\040\061\040\120\157\154\151\143\171\040\126
++\141\154\151\144\141\164\151\157\156\040\101\165\164\150\157\162
++\151\164\171\061\041\060\037\006\003\125\004\003\023\030\150\164
++\164\160\072\057\057\167\167\167\056\166\141\154\151\143\145\162
++\164\056\143\157\155\057\061\040\060\036\006\011\052\206\110\206
++\367\015\001\011\001\026\021\151\156\146\157\100\166\141\154\151
++\143\145\162\164\056\143\157\155\060\036\027\015\071\071\060\066
++\062\065\062\062\062\063\064\070\132\027\015\061\071\060\066\062
++\065\062\062\062\063\064\070\132\060\201\273\061\044\060\042\006
++\003\125\004\007\023\033\126\141\154\151\103\145\162\164\040\126
++\141\154\151\144\141\164\151\157\156\040\116\145\164\167\157\162
++\153\061\027\060\025\006\003\125\004\012\023\016\126\141\154\151
++\103\145\162\164\054\040\111\156\143\056\061\065\060\063\006\003
++\125\004\013\023\054\126\141\154\151\103\145\162\164\040\103\154
++\141\163\163\040\061\040\120\157\154\151\143\171\040\126\141\154
++\151\144\141\164\151\157\156\040\101\165\164\150\157\162\151\164
++\171\061\041\060\037\006\003\125\004\003\023\030\150\164\164\160
++\072\057\057\167\167\167\056\166\141\154\151\143\145\162\164\056
++\143\157\155\057\061\040\060\036\006\011\052\206\110\206\367\015
++\001\011\001\026\021\151\156\146\157\100\166\141\154\151\143\145
++\162\164\056\143\157\155\060\201\237\060\015\006\011\052\206\110
++\206\367\015\001\001\001\005\000\003\201\215\000\060\201\211\002
++\201\201\000\330\131\202\172\211\270\226\272\246\057\150\157\130
++\056\247\124\034\006\156\364\352\215\110\274\061\224\027\360\363
++\116\274\262\270\065\222\166\260\320\245\245\001\327\000\003\022
++\042\031\010\370\377\021\043\233\316\007\365\277\151\032\046\376
++\116\351\321\177\235\054\100\035\131\150\156\246\370\130\260\235
++\032\217\323\077\361\334\031\006\201\250\016\340\072\335\310\123
++\105\011\006\346\017\160\303\372\100\246\016\342\126\005\017\030
++\115\374\040\202\321\163\125\164\215\166\162\240\035\235\035\300
++\335\077\161\002\003\001\000\001\060\015\006\011\052\206\110\206
++\367\015\001\001\005\005\000\003\201\201\000\120\150\075\111\364
++\054\034\006\224\337\225\140\177\226\173\027\376\117\161\255\144
++\310\335\167\322\357\131\125\350\077\350\216\005\052\041\362\007
++\322\265\247\122\376\234\261\266\342\133\167\027\100\352\162\326
++\043\313\050\201\062\303\000\171\030\354\131\027\211\311\306\152
++\036\161\311\375\267\164\245\045\105\151\305\110\253\031\341\105
++\212\045\153\031\356\345\273\022\365\177\367\246\215\121\303\360
++\235\164\267\251\076\240\245\377\266\111\003\023\332\042\314\355
++\161\202\053\231\317\072\267\365\055\162\310
++END
++
++# Trust for Certificate "ValiCert Class 1 VA"
++# Issuer: E=info at valicert.com,CN=http://www.valicert.com/,OU=ValiCert Class 1 Policy Validation Authority,O="ValiCert, Inc.",L=ValiCert Validation Network
++# Serial Number: 1 (0x1)
++# Subject: E=info at valicert.com,CN=http://www.valicert.com/,OU=ValiCert Class 1 Policy Validation Authority,O="ValiCert, Inc.",L=ValiCert Validation Network
++# Not Valid Before: Fri Jun 25 22:23:48 1999
++# Not Valid After : Tue Jun 25 22:23:48 2019
++# Fingerprint (MD5): 65:58:AB:15:AD:57:6C:1E:A8:A7:B5:69:AC:BF:FF:EB
++# Fingerprint (SHA1): E5:DF:74:3C:B6:01:C4:9B:98:43:DC:AB:8C:E8:6A:81:10:9F:E4:8E
++CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST
++CKA_TOKEN CK_BBOOL CK_TRUE
++CKA_PRIVATE CK_BBOOL CK_FALSE
++CKA_MODIFIABLE CK_BBOOL CK_FALSE
++CKA_LABEL UTF8 "ValiCert Class 1 VA"
++CKA_CERT_SHA1_HASH MULTILINE_OCTAL
++\345\337\164\074\266\001\304\233\230\103\334\253\214\350\152\201
++\020\237\344\216
++END
++CKA_CERT_MD5_HASH MULTILINE_OCTAL
++\145\130\253\025\255\127\154\036\250\247\265\151\254\277\377\353
++END
++CKA_ISSUER MULTILINE_OCTAL
++\060\201\273\061\044\060\042\006\003\125\004\007\023\033\126\141
++\154\151\103\145\162\164\040\126\141\154\151\144\141\164\151\157
++\156\040\116\145\164\167\157\162\153\061\027\060\025\006\003\125
++\004\012\023\016\126\141\154\151\103\145\162\164\054\040\111\156
++\143\056\061\065\060\063\006\003\125\004\013\023\054\126\141\154
++\151\103\145\162\164\040\103\154\141\163\163\040\061\040\120\157
++\154\151\143\171\040\126\141\154\151\144\141\164\151\157\156\040
++\101\165\164\150\157\162\151\164\171\061\041\060\037\006\003\125
++\004\003\023\030\150\164\164\160\072\057\057\167\167\167\056\166
++\141\154\151\143\145\162\164\056\143\157\155\057\061\040\060\036
++\006\011\052\206\110\206\367\015\001\011\001\026\021\151\156\146
++\157\100\166\141\154\151\143\145\162\164\056\143\157\155
++END
++CKA_SERIAL_NUMBER MULTILINE_OCTAL
++\002\001\001
++END
++CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
++
++#
++# Certificate "ValiCert Class 2 VA"
++#
++# Issuer: E=info at valicert.com,CN=http://www.valicert.com/,OU=ValiCert Class 2 Policy Validation Authority,O="ValiCert, Inc.",L=ValiCert Validation Network
++# Serial Number: 1 (0x1)
++# Subject: E=info at valicert.com,CN=http://www.valicert.com/,OU=ValiCert Class 2 Policy Validation Authority,O="ValiCert, Inc.",L=ValiCert Validation Network
++# Not Valid Before: Sat Jun 26 00:19:54 1999
++# Not Valid After : Wed Jun 26 00:19:54 2019
++# Fingerprint (MD5): A9:23:75:9B:BA:49:36:6E:31:C2:DB:F2:E7:66:BA:87
++# Fingerprint (SHA1): 31:7A:2A:D0:7F:2B:33:5E:F5:A1:C3:4E:4B:57:E8:B7:D8:F1:FC:A6
++CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
++CKA_TOKEN CK_BBOOL CK_TRUE
++CKA_PRIVATE CK_BBOOL CK_FALSE
++CKA_MODIFIABLE CK_BBOOL CK_FALSE
++CKA_LABEL UTF8 "ValiCert Class 2 VA"
++CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509
++CKA_SUBJECT MULTILINE_OCTAL
++\060\201\273\061\044\060\042\006\003\125\004\007\023\033\126\141
++\154\151\103\145\162\164\040\126\141\154\151\144\141\164\151\157
++\156\040\116\145\164\167\157\162\153\061\027\060\025\006\003\125
++\004\012\023\016\126\141\154\151\103\145\162\164\054\040\111\156
++\143\056\061\065\060\063\006\003\125\004\013\023\054\126\141\154
++\151\103\145\162\164\040\103\154\141\163\163\040\062\040\120\157
++\154\151\143\171\040\126\141\154\151\144\141\164\151\157\156\040
++\101\165\164\150\157\162\151\164\171\061\041\060\037\006\003\125
++\004\003\023\030\150\164\164\160\072\057\057\167\167\167\056\166
++\141\154\151\143\145\162\164\056\143\157\155\057\061\040\060\036
++\006\011\052\206\110\206\367\015\001\011\001\026\021\151\156\146
++\157\100\166\141\154\151\143\145\162\164\056\143\157\155
++END
++CKA_ID UTF8 "0"
++CKA_ISSUER MULTILINE_OCTAL
++\060\201\273\061\044\060\042\006\003\125\004\007\023\033\126\141
++\154\151\103\145\162\164\040\126\141\154\151\144\141\164\151\157
++\156\040\116\145\164\167\157\162\153\061\027\060\025\006\003\125
++\004\012\023\016\126\141\154\151\103\145\162\164\054\040\111\156
++\143\056\061\065\060\063\006\003\125\004\013\023\054\126\141\154
++\151\103\145\162\164\040\103\154\141\163\163\040\062\040\120\157
++\154\151\143\171\040\126\141\154\151\144\141\164\151\157\156\040
++\101\165\164\150\157\162\151\164\171\061\041\060\037\006\003\125
++\004\003\023\030\150\164\164\160\072\057\057\167\167\167\056\166
++\141\154\151\143\145\162\164\056\143\157\155\057\061\040\060\036
++\006\011\052\206\110\206\367\015\001\011\001\026\021\151\156\146
++\157\100\166\141\154\151\143\145\162\164\056\143\157\155
++END
++CKA_SERIAL_NUMBER MULTILINE_OCTAL
++\002\001\001
++END
++CKA_VALUE MULTILINE_OCTAL
++\060\202\002\347\060\202\002\120\002\001\001\060\015\006\011\052
++\206\110\206\367\015\001\001\005\005\000\060\201\273\061\044\060
++\042\006\003\125\004\007\023\033\126\141\154\151\103\145\162\164
++\040\126\141\154\151\144\141\164\151\157\156\040\116\145\164\167
++\157\162\153\061\027\060\025\006\003\125\004\012\023\016\126\141
++\154\151\103\145\162\164\054\040\111\156\143\056\061\065\060\063
++\006\003\125\004\013\023\054\126\141\154\151\103\145\162\164\040
++\103\154\141\163\163\040\062\040\120\157\154\151\143\171\040\126
++\141\154\151\144\141\164\151\157\156\040\101\165\164\150\157\162
++\151\164\171\061\041\060\037\006\003\125\004\003\023\030\150\164
++\164\160\072\057\057\167\167\167\056\166\141\154\151\143\145\162
++\164\056\143\157\155\057\061\040\060\036\006\011\052\206\110\206
++\367\015\001\011\001\026\021\151\156\146\157\100\166\141\154\151
++\143\145\162\164\056\143\157\155\060\036\027\015\071\071\060\066
++\062\066\060\060\061\071\065\064\132\027\015\061\071\060\066\062
++\066\060\060\061\071\065\064\132\060\201\273\061\044\060\042\006
++\003\125\004\007\023\033\126\141\154\151\103\145\162\164\040\126
++\141\154\151\144\141\164\151\157\156\040\116\145\164\167\157\162
++\153\061\027\060\025\006\003\125\004\012\023\016\126\141\154\151
++\103\145\162\164\054\040\111\156\143\056\061\065\060\063\006\003
++\125\004\013\023\054\126\141\154\151\103\145\162\164\040\103\154
++\141\163\163\040\062\040\120\157\154\151\143\171\040\126\141\154
++\151\144\141\164\151\157\156\040\101\165\164\150\157\162\151\164
++\171\061\041\060\037\006\003\125\004\003\023\030\150\164\164\160
++\072\057\057\167\167\167\056\166\141\154\151\143\145\162\164\056
++\143\157\155\057\061\040\060\036\006\011\052\206\110\206\367\015
++\001\011\001\026\021\151\156\146\157\100\166\141\154\151\143\145
++\162\164\056\143\157\155\060\201\237\060\015\006\011\052\206\110
++\206\367\015\001\001\001\005\000\003\201\215\000\060\201\211\002
++\201\201\000\316\072\161\312\345\253\310\131\222\125\327\253\330
++\164\016\371\356\331\366\125\107\131\145\107\016\005\125\334\353
++\230\066\074\134\123\135\323\060\317\070\354\275\101\211\355\045
++\102\011\044\153\012\136\263\174\335\122\055\114\346\324\326\175
++\132\131\251\145\324\111\023\055\044\115\034\120\157\265\301\205
++\124\073\376\161\344\323\134\102\371\200\340\221\032\012\133\071
++\066\147\363\077\125\174\033\077\264\137\144\163\064\343\264\022
++\277\207\144\370\332\022\377\067\047\301\263\103\273\357\173\156
++\056\151\367\002\003\001\000\001\060\015\006\011\052\206\110\206
++\367\015\001\001\005\005\000\003\201\201\000\073\177\120\157\157
++\120\224\231\111\142\070\070\037\113\370\245\310\076\247\202\201
++\366\053\307\350\305\316\350\072\020\202\313\030\000\216\115\275
++\250\130\177\241\171\000\265\273\351\215\257\101\331\017\064\356
++\041\201\031\240\062\111\050\364\304\216\126\325\122\063\375\120
++\325\176\231\154\003\344\311\114\374\313\154\253\146\263\112\041
++\214\345\265\014\062\076\020\262\314\154\241\334\232\230\114\002
++\133\363\316\271\236\245\162\016\112\267\077\074\346\026\150\370
++\276\355\164\114\274\133\325\142\037\103\335
++END
++
++# Trust for Certificate "ValiCert Class 2 VA"
++# Issuer: E=info at valicert.com,CN=http://www.valicert.com/,OU=ValiCert Class 2 Policy Validation Authority,O="ValiCert, Inc.",L=ValiCert Validation Network
++# Serial Number: 1 (0x1)
++# Subject: E=info at valicert.com,CN=http://www.valicert.com/,OU=ValiCert Class 2 Policy Validation Authority,O="ValiCert, Inc.",L=ValiCert Validation Network
++# Not Valid Before: Sat Jun 26 00:19:54 1999
++# Not Valid After : Wed Jun 26 00:19:54 2019
++# Fingerprint (MD5): A9:23:75:9B:BA:49:36:6E:31:C2:DB:F2:E7:66:BA:87
++# Fingerprint (SHA1): 31:7A:2A:D0:7F:2B:33:5E:F5:A1:C3:4E:4B:57:E8:B7:D8:F1:FC:A6
++CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST
++CKA_TOKEN CK_BBOOL CK_TRUE
++CKA_PRIVATE CK_BBOOL CK_FALSE
++CKA_MODIFIABLE CK_BBOOL CK_FALSE
++CKA_LABEL UTF8 "ValiCert Class 2 VA"
++CKA_CERT_SHA1_HASH MULTILINE_OCTAL
++\061\172\052\320\177\053\063\136\365\241\303\116\113\127\350\267
++\330\361\374\246
++END
++CKA_CERT_MD5_HASH MULTILINE_OCTAL
++\251\043\165\233\272\111\066\156\061\302\333\362\347\146\272\207
++END
++CKA_ISSUER MULTILINE_OCTAL
++\060\201\273\061\044\060\042\006\003\125\004\007\023\033\126\141
++\154\151\103\145\162\164\040\126\141\154\151\144\141\164\151\157
++\156\040\116\145\164\167\157\162\153\061\027\060\025\006\003\125
++\004\012\023\016\126\141\154\151\103\145\162\164\054\040\111\156
++\143\056\061\065\060\063\006\003\125\004\013\023\054\126\141\154
++\151\103\145\162\164\040\103\154\141\163\163\040\062\040\120\157
++\154\151\143\171\040\126\141\154\151\144\141\164\151\157\156\040
++\101\165\164\150\157\162\151\164\171\061\041\060\037\006\003\125
++\004\003\023\030\150\164\164\160\072\057\057\167\167\167\056\166
++\141\154\151\143\145\162\164\056\143\157\155\057\061\040\060\036
++\006\011\052\206\110\206\367\015\001\011\001\026\021\151\156\146
++\157\100\166\141\154\151\143\145\162\164\056\143\157\155
++END
++CKA_SERIAL_NUMBER MULTILINE_OCTAL
++\002\001\001
++END
++CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
++
++#
++# Certificate "RSA Root Certificate 1"
++#
++# Issuer: E=info at valicert.com,CN=http://www.valicert.com/,OU=ValiCert Class 3 Policy Validation Authority,O="ValiCert, Inc.",L=ValiCert Validation Network
++# Serial Number: 1 (0x1)
++# Subject: E=info at valicert.com,CN=http://www.valicert.com/,OU=ValiCert Class 3 Policy Validation Authority,O="ValiCert, Inc.",L=ValiCert Validation Network
++# Not Valid Before: Sat Jun 26 00:22:33 1999
++# Not Valid After : Wed Jun 26 00:22:33 2019
++# Fingerprint (MD5): A2:6F:53:B7:EE:40:DB:4A:68:E7:FA:18:D9:10:4B:72
++# Fingerprint (SHA1): 69:BD:8C:F4:9C:D3:00:FB:59:2E:17:93:CA:55:6A:F3:EC:AA:35:FB
++CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
++CKA_TOKEN CK_BBOOL CK_TRUE
++CKA_PRIVATE CK_BBOOL CK_FALSE
++CKA_MODIFIABLE CK_BBOOL CK_FALSE
++CKA_LABEL UTF8 "RSA Root Certificate 1"
++CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509
++CKA_SUBJECT MULTILINE_OCTAL
++\060\201\273\061\044\060\042\006\003\125\004\007\023\033\126\141
++\154\151\103\145\162\164\040\126\141\154\151\144\141\164\151\157
++\156\040\116\145\164\167\157\162\153\061\027\060\025\006\003\125
++\004\012\023\016\126\141\154\151\103\145\162\164\054\040\111\156
++\143\056\061\065\060\063\006\003\125\004\013\023\054\126\141\154
++\151\103\145\162\164\040\103\154\141\163\163\040\063\040\120\157
++\154\151\143\171\040\126\141\154\151\144\141\164\151\157\156\040
++\101\165\164\150\157\162\151\164\171\061\041\060\037\006\003\125
++\004\003\023\030\150\164\164\160\072\057\057\167\167\167\056\166
++\141\154\151\143\145\162\164\056\143\157\155\057\061\040\060\036
++\006\011\052\206\110\206\367\015\001\011\001\026\021\151\156\146
++\157\100\166\141\154\151\143\145\162\164\056\143\157\155
++END
++CKA_ID UTF8 "0"
++CKA_ISSUER MULTILINE_OCTAL
++\060\201\273\061\044\060\042\006\003\125\004\007\023\033\126\141
++\154\151\103\145\162\164\040\126\141\154\151\144\141\164\151\157
++\156\040\116\145\164\167\157\162\153\061\027\060\025\006\003\125
++\004\012\023\016\126\141\154\151\103\145\162\164\054\040\111\156
++\143\056\061\065\060\063\006\003\125\004\013\023\054\126\141\154
++\151\103\145\162\164\040\103\154\141\163\163\040\063\040\120\157
++\154\151\143\171\040\126\141\154\151\144\141\164\151\157\156\040
++\101\165\164\150\157\162\151\164\171\061\041\060\037\006\003\125
++\004\003\023\030\150\164\164\160\072\057\057\167\167\167\056\166
++\141\154\151\143\145\162\164\056\143\157\155\057\061\040\060\036
++\006\011\052\206\110\206\367\015\001\011\001\026\021\151\156\146
++\157\100\166\141\154\151\143\145\162\164\056\143\157\155
++END
++CKA_SERIAL_NUMBER MULTILINE_OCTAL
++\002\001\001
++END
++CKA_VALUE MULTILINE_OCTAL
++\060\202\002\347\060\202\002\120\002\001\001\060\015\006\011\052
++\206\110\206\367\015\001\001\005\005\000\060\201\273\061\044\060
++\042\006\003\125\004\007\023\033\126\141\154\151\103\145\162\164
++\040\126\141\154\151\144\141\164\151\157\156\040\116\145\164\167
++\157\162\153\061\027\060\025\006\003\125\004\012\023\016\126\141
++\154\151\103\145\162\164\054\040\111\156\143\056\061\065\060\063
++\006\003\125\004\013\023\054\126\141\154\151\103\145\162\164\040
++\103\154\141\163\163\040\063\040\120\157\154\151\143\171\040\126
++\141\154\151\144\141\164\151\157\156\040\101\165\164\150\157\162
++\151\164\171\061\041\060\037\006\003\125\004\003\023\030\150\164
++\164\160\072\057\057\167\167\167\056\166\141\154\151\143\145\162
++\164\056\143\157\155\057\061\040\060\036\006\011\052\206\110\206
++\367\015\001\011\001\026\021\151\156\146\157\100\166\141\154\151
++\143\145\162\164\056\143\157\155\060\036\027\015\071\071\060\066
++\062\066\060\060\062\062\063\063\132\027\015\061\071\060\066\062
++\066\060\060\062\062\063\063\132\060\201\273\061\044\060\042\006
++\003\125\004\007\023\033\126\141\154\151\103\145\162\164\040\126
++\141\154\151\144\141\164\151\157\156\040\116\145\164\167\157\162
++\153\061\027\060\025\006\003\125\004\012\023\016\126\141\154\151
++\103\145\162\164\054\040\111\156\143\056\061\065\060\063\006\003
++\125\004\013\023\054\126\141\154\151\103\145\162\164\040\103\154
++\141\163\163\040\063\040\120\157\154\151\143\171\040\126\141\154
++\151\144\141\164\151\157\156\040\101\165\164\150\157\162\151\164
++\171\061\041\060\037\006\003\125\004\003\023\030\150\164\164\160
++\072\057\057\167\167\167\056\166\141\154\151\143\145\162\164\056
++\143\157\155\057\061\040\060\036\006\011\052\206\110\206\367\015
++\001\011\001\026\021\151\156\146\157\100\166\141\154\151\143\145
++\162\164\056\143\157\155\060\201\237\060\015\006\011\052\206\110
++\206\367\015\001\001\001\005\000\003\201\215\000\060\201\211\002
++\201\201\000\343\230\121\226\034\350\325\261\006\201\152\127\303
++\162\165\223\253\317\236\246\374\363\026\122\326\055\115\237\065
++\104\250\056\004\115\007\111\212\070\051\365\167\067\347\267\253
++\135\337\066\161\024\231\217\334\302\222\361\347\140\222\227\354
++\330\110\334\277\301\002\040\306\044\244\050\114\060\132\166\155
++\261\134\363\335\336\236\020\161\241\210\307\133\233\101\155\312
++\260\270\216\025\356\255\063\053\317\107\004\134\165\161\012\230
++\044\230\051\247\111\131\245\335\370\267\103\142\141\363\323\342
++\320\125\077\002\003\001\000\001\060\015\006\011\052\206\110\206
++\367\015\001\001\005\005\000\003\201\201\000\126\273\002\130\204
++\147\010\054\337\037\333\173\111\063\365\323\147\235\364\264\012
++\020\263\311\305\054\342\222\152\161\170\047\362\160\203\102\323
++\076\317\251\124\364\361\330\222\026\214\321\004\313\113\253\311
++\237\105\256\074\212\251\260\161\063\135\310\305\127\337\257\250
++\065\263\177\211\207\351\350\045\222\270\177\205\172\256\326\274
++\036\067\130\052\147\311\221\317\052\201\076\355\306\071\337\300
++\076\031\234\031\314\023\115\202\101\265\214\336\340\075\140\010
++\040\017\105\176\153\242\177\243\214\025\356
++END
++
++# Trust for Certificate "RSA Root Certificate 1"
++# Issuer: E=info at valicert.com,CN=http://www.valicert.com/,OU=ValiCert Class 3 Policy Validation Authority,O="ValiCert, Inc.",L=ValiCert Validation Network
++# Serial Number: 1 (0x1)
++# Subject: E=info at valicert.com,CN=http://www.valicert.com/,OU=ValiCert Class 3 Policy Validation Authority,O="ValiCert, Inc.",L=ValiCert Validation Network
++# Not Valid Before: Sat Jun 26 00:22:33 1999
++# Not Valid After : Wed Jun 26 00:22:33 2019
++# Fingerprint (MD5): A2:6F:53:B7:EE:40:DB:4A:68:E7:FA:18:D9:10:4B:72
++# Fingerprint (SHA1): 69:BD:8C:F4:9C:D3:00:FB:59:2E:17:93:CA:55:6A:F3:EC:AA:35:FB
++CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST
++CKA_TOKEN CK_BBOOL CK_TRUE
++CKA_PRIVATE CK_BBOOL CK_FALSE
++CKA_MODIFIABLE CK_BBOOL CK_FALSE
++CKA_LABEL UTF8 "RSA Root Certificate 1"
++CKA_CERT_SHA1_HASH MULTILINE_OCTAL
++\151\275\214\364\234\323\000\373\131\056\027\223\312\125\152\363
++\354\252\065\373
++END
++CKA_CERT_MD5_HASH MULTILINE_OCTAL
++\242\157\123\267\356\100\333\112\150\347\372\030\331\020\113\162
++END
++CKA_ISSUER MULTILINE_OCTAL
++\060\201\273\061\044\060\042\006\003\125\004\007\023\033\126\141
++\154\151\103\145\162\164\040\126\141\154\151\144\141\164\151\157
++\156\040\116\145\164\167\157\162\153\061\027\060\025\006\003\125
++\004\012\023\016\126\141\154\151\103\145\162\164\054\040\111\156
++\143\056\061\065\060\063\006\003\125\004\013\023\054\126\141\154
++\151\103\145\162\164\040\103\154\141\163\163\040\063\040\120\157
++\154\151\143\171\040\126\141\154\151\144\141\164\151\157\156\040
++\101\165\164\150\157\162\151\164\171\061\041\060\037\006\003\125
++\004\003\023\030\150\164\164\160\072\057\057\167\167\167\056\166
++\141\154\151\143\145\162\164\056\143\157\155\057\061\040\060\036
++\006\011\052\206\110\206\367\015\001\011\001\026\021\151\156\146
++\157\100\166\141\154\151\143\145\162\164\056\143\157\155
++END
++CKA_SERIAL_NUMBER MULTILINE_OCTAL
++\002\001\001
++END
++CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
++
++#
+ # Certificate "Verisign Class 1 Public Primary Certification Authority - G3"
+ #
+ # Issuer: CN=VeriSign Class 1 Public Primary Certification Authority - G3,OU="(c) 1999 VeriSign, Inc. - For authorized use only",OU=VeriSign Trust Network,O="VeriSign, Inc.",C=US
+@@ -1351,6 +2186,180 @@
+ CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
+
+ #
++# Certificate "Entrust.net Secure Server CA"
++#
++# Issuer: CN=Entrust.net Secure Server Certification Authority,OU=(c) 1999 Entrust.net Limited,OU=www.entrust.net/CPS incorp. by ref. (limits liab.),O=Entrust.net,C=US
++# Serial Number: 927650371 (0x374ad243)
++# Subject: CN=Entrust.net Secure Server Certification Authority,OU=(c) 1999 Entrust.net Limited,OU=www.entrust.net/CPS incorp. by ref. (limits liab.),O=Entrust.net,C=US
++# Not Valid Before: Tue May 25 16:09:40 1999
++# Not Valid After : Sat May 25 16:39:40 2019
++# Fingerprint (MD5): DF:F2:80:73:CC:F1:E6:61:73:FC:F5:42:E9:C5:7C:EE
++# Fingerprint (SHA1): 99:A6:9B:E6:1A:FE:88:6B:4D:2B:82:00:7C:B8:54:FC:31:7E:15:39
++CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
++CKA_TOKEN CK_BBOOL CK_TRUE
++CKA_PRIVATE CK_BBOOL CK_FALSE
++CKA_MODIFIABLE CK_BBOOL CK_FALSE
++CKA_LABEL UTF8 "Entrust.net Secure Server CA"
++CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509
++CKA_SUBJECT MULTILINE_OCTAL
++\060\201\303\061\013\060\011\006\003\125\004\006\023\002\125\123
++\061\024\060\022\006\003\125\004\012\023\013\105\156\164\162\165
++\163\164\056\156\145\164\061\073\060\071\006\003\125\004\013\023
++\062\167\167\167\056\145\156\164\162\165\163\164\056\156\145\164
++\057\103\120\123\040\151\156\143\157\162\160\056\040\142\171\040
++\162\145\146\056\040\050\154\151\155\151\164\163\040\154\151\141
++\142\056\051\061\045\060\043\006\003\125\004\013\023\034\050\143
++\051\040\061\071\071\071\040\105\156\164\162\165\163\164\056\156
++\145\164\040\114\151\155\151\164\145\144\061\072\060\070\006\003
++\125\004\003\023\061\105\156\164\162\165\163\164\056\156\145\164
++\040\123\145\143\165\162\145\040\123\145\162\166\145\162\040\103
++\145\162\164\151\146\151\143\141\164\151\157\156\040\101\165\164
++\150\157\162\151\164\171
++END
++CKA_ID UTF8 "0"
++CKA_ISSUER MULTILINE_OCTAL
++\060\201\303\061\013\060\011\006\003\125\004\006\023\002\125\123
++\061\024\060\022\006\003\125\004\012\023\013\105\156\164\162\165
++\163\164\056\156\145\164\061\073\060\071\006\003\125\004\013\023
++\062\167\167\167\056\145\156\164\162\165\163\164\056\156\145\164
++\057\103\120\123\040\151\156\143\157\162\160\056\040\142\171\040
++\162\145\146\056\040\050\154\151\155\151\164\163\040\154\151\141
++\142\056\051\061\045\060\043\006\003\125\004\013\023\034\050\143
++\051\040\061\071\071\071\040\105\156\164\162\165\163\164\056\156
++\145\164\040\114\151\155\151\164\145\144\061\072\060\070\006\003
++\125\004\003\023\061\105\156\164\162\165\163\164\056\156\145\164
++\040\123\145\143\165\162\145\040\123\145\162\166\145\162\040\103
++\145\162\164\151\146\151\143\141\164\151\157\156\040\101\165\164
++\150\157\162\151\164\171
++END
++CKA_SERIAL_NUMBER MULTILINE_OCTAL
++\002\004\067\112\322\103
++END
++CKA_VALUE MULTILINE_OCTAL
++\060\202\004\330\060\202\004\101\240\003\002\001\002\002\004\067
++\112\322\103\060\015\006\011\052\206\110\206\367\015\001\001\005
++\005\000\060\201\303\061\013\060\011\006\003\125\004\006\023\002
++\125\123\061\024\060\022\006\003\125\004\012\023\013\105\156\164
++\162\165\163\164\056\156\145\164\061\073\060\071\006\003\125\004
++\013\023\062\167\167\167\056\145\156\164\162\165\163\164\056\156
++\145\164\057\103\120\123\040\151\156\143\157\162\160\056\040\142
++\171\040\162\145\146\056\040\050\154\151\155\151\164\163\040\154
++\151\141\142\056\051\061\045\060\043\006\003\125\004\013\023\034
++\050\143\051\040\061\071\071\071\040\105\156\164\162\165\163\164
++\056\156\145\164\040\114\151\155\151\164\145\144\061\072\060\070
++\006\003\125\004\003\023\061\105\156\164\162\165\163\164\056\156
++\145\164\040\123\145\143\165\162\145\040\123\145\162\166\145\162
++\040\103\145\162\164\151\146\151\143\141\164\151\157\156\040\101
++\165\164\150\157\162\151\164\171\060\036\027\015\071\071\060\065
++\062\065\061\066\060\071\064\060\132\027\015\061\071\060\065\062
++\065\061\066\063\071\064\060\132\060\201\303\061\013\060\011\006
++\003\125\004\006\023\002\125\123\061\024\060\022\006\003\125\004
++\012\023\013\105\156\164\162\165\163\164\056\156\145\164\061\073
++\060\071\006\003\125\004\013\023\062\167\167\167\056\145\156\164
++\162\165\163\164\056\156\145\164\057\103\120\123\040\151\156\143
++\157\162\160\056\040\142\171\040\162\145\146\056\040\050\154\151
++\155\151\164\163\040\154\151\141\142\056\051\061\045\060\043\006
++\003\125\004\013\023\034\050\143\051\040\061\071\071\071\040\105
++\156\164\162\165\163\164\056\156\145\164\040\114\151\155\151\164
++\145\144\061\072\060\070\006\003\125\004\003\023\061\105\156\164
++\162\165\163\164\056\156\145\164\040\123\145\143\165\162\145\040
++\123\145\162\166\145\162\040\103\145\162\164\151\146\151\143\141
++\164\151\157\156\040\101\165\164\150\157\162\151\164\171\060\201
++\235\060\015\006\011\052\206\110\206\367\015\001\001\001\005\000
++\003\201\213\000\060\201\207\002\201\201\000\315\050\203\064\124
++\033\211\363\017\257\067\221\061\377\257\061\140\311\250\350\262
++\020\150\355\237\347\223\066\361\012\144\273\107\365\004\027\077
++\043\107\115\305\047\031\201\046\014\124\162\015\210\055\331\037
++\232\022\237\274\263\161\323\200\031\077\107\146\173\214\065\050
++\322\271\012\337\044\332\234\326\120\171\201\172\132\323\067\367
++\302\112\330\051\222\046\144\321\344\230\154\072\000\212\365\064
++\233\145\370\355\343\020\377\375\270\111\130\334\240\336\202\071
++\153\201\261\026\031\141\271\124\266\346\103\002\001\003\243\202
++\001\327\060\202\001\323\060\021\006\011\140\206\110\001\206\370
++\102\001\001\004\004\003\002\000\007\060\202\001\031\006\003\125
++\035\037\004\202\001\020\060\202\001\014\060\201\336\240\201\333
++\240\201\330\244\201\325\060\201\322\061\013\060\011\006\003\125
++\004\006\023\002\125\123\061\024\060\022\006\003\125\004\012\023
++\013\105\156\164\162\165\163\164\056\156\145\164\061\073\060\071
++\006\003\125\004\013\023\062\167\167\167\056\145\156\164\162\165
++\163\164\056\156\145\164\057\103\120\123\040\151\156\143\157\162
++\160\056\040\142\171\040\162\145\146\056\040\050\154\151\155\151
++\164\163\040\154\151\141\142\056\051\061\045\060\043\006\003\125
++\004\013\023\034\050\143\051\040\061\071\071\071\040\105\156\164
++\162\165\163\164\056\156\145\164\040\114\151\155\151\164\145\144
++\061\072\060\070\006\003\125\004\003\023\061\105\156\164\162\165
++\163\164\056\156\145\164\040\123\145\143\165\162\145\040\123\145
++\162\166\145\162\040\103\145\162\164\151\146\151\143\141\164\151
++\157\156\040\101\165\164\150\157\162\151\164\171\061\015\060\013
++\006\003\125\004\003\023\004\103\122\114\061\060\051\240\047\240
++\045\206\043\150\164\164\160\072\057\057\167\167\167\056\145\156
++\164\162\165\163\164\056\156\145\164\057\103\122\114\057\156\145
++\164\061\056\143\162\154\060\053\006\003\125\035\020\004\044\060
++\042\200\017\061\071\071\071\060\065\062\065\061\066\060\071\064
++\060\132\201\017\062\060\061\071\060\065\062\065\061\066\060\071
++\064\060\132\060\013\006\003\125\035\017\004\004\003\002\001\006
++\060\037\006\003\125\035\043\004\030\060\026\200\024\360\027\142
++\023\125\075\263\377\012\000\153\373\120\204\227\363\355\142\320
++\032\060\035\006\003\125\035\016\004\026\004\024\360\027\142\023
++\125\075\263\377\012\000\153\373\120\204\227\363\355\142\320\032
++\060\014\006\003\125\035\023\004\005\060\003\001\001\377\060\031
++\006\011\052\206\110\206\366\175\007\101\000\004\014\060\012\033
++\004\126\064\056\060\003\002\004\220\060\015\006\011\052\206\110
++\206\367\015\001\001\005\005\000\003\201\201\000\220\334\060\002
++\372\144\164\302\247\012\245\174\041\215\064\027\250\373\107\016
++\377\045\174\215\023\012\373\344\230\265\357\214\370\305\020\015
++\367\222\276\361\303\325\325\225\152\004\273\054\316\046\066\145
++\310\061\306\347\356\077\343\127\165\204\172\021\357\106\117\030
++\364\323\230\273\250\207\062\272\162\366\074\342\075\237\327\035
++\331\303\140\103\214\130\016\042\226\057\142\243\054\037\272\255
++\005\357\253\062\170\207\240\124\163\031\265\134\005\371\122\076
++\155\055\105\013\367\012\223\352\355\006\371\262
++END
++
++# Trust for Certificate "Entrust.net Secure Server CA"
++# Issuer: CN=Entrust.net Secure Server Certification Authority,OU=(c) 1999 Entrust.net Limited,OU=www.entrust.net/CPS incorp. by ref. (limits liab.),O=Entrust.net,C=US
++# Serial Number: 927650371 (0x374ad243)
++# Subject: CN=Entrust.net Secure Server Certification Authority,OU=(c) 1999 Entrust.net Limited,OU=www.entrust.net/CPS incorp. by ref. (limits liab.),O=Entrust.net,C=US
++# Not Valid Before: Tue May 25 16:09:40 1999
++# Not Valid After : Sat May 25 16:39:40 2019
++# Fingerprint (MD5): DF:F2:80:73:CC:F1:E6:61:73:FC:F5:42:E9:C5:7C:EE
++# Fingerprint (SHA1): 99:A6:9B:E6:1A:FE:88:6B:4D:2B:82:00:7C:B8:54:FC:31:7E:15:39
++CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST
++CKA_TOKEN CK_BBOOL CK_TRUE
++CKA_PRIVATE CK_BBOOL CK_FALSE
++CKA_MODIFIABLE CK_BBOOL CK_FALSE
++CKA_LABEL UTF8 "Entrust.net Secure Server CA"
++CKA_CERT_SHA1_HASH MULTILINE_OCTAL
++\231\246\233\346\032\376\210\153\115\053\202\000\174\270\124\374
++\061\176\025\071
++END
++CKA_CERT_MD5_HASH MULTILINE_OCTAL
++\337\362\200\163\314\361\346\141\163\374\365\102\351\305\174\356
++END
++CKA_ISSUER MULTILINE_OCTAL
++\060\201\303\061\013\060\011\006\003\125\004\006\023\002\125\123
++\061\024\060\022\006\003\125\004\012\023\013\105\156\164\162\165
++\163\164\056\156\145\164\061\073\060\071\006\003\125\004\013\023
++\062\167\167\167\056\145\156\164\162\165\163\164\056\156\145\164
++\057\103\120\123\040\151\156\143\157\162\160\056\040\142\171\040
++\162\145\146\056\040\050\154\151\155\151\164\163\040\154\151\141
++\142\056\051\061\045\060\043\006\003\125\004\013\023\034\050\143
++\051\040\061\071\071\071\040\105\156\164\162\165\163\164\056\156
++\145\164\040\114\151\155\151\164\145\144\061\072\060\070\006\003
++\125\004\003\023\061\105\156\164\162\165\163\164\056\156\145\164
++\040\123\145\143\165\162\145\040\123\145\162\166\145\162\040\103
++\145\162\164\151\146\151\143\141\164\151\157\156\040\101\165\164
++\150\157\162\151\164\171
++END
++CKA_SERIAL_NUMBER MULTILINE_OCTAL
++\002\004\067\112\322\103
++END
++CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
++CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
++
++#
+ # Certificate "Entrust.net Premium 2048 Secure Server CA"
+ #
+ # Issuer: CN=Entrust.net Certification Authority (2048),OU=(c) 1999 Entrust.net Limited,OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.),O=Entrust.net
+@@ -1753,9 +2762,9 @@
+ CKA_SERIAL_NUMBER MULTILINE_OCTAL
+ \002\001\001
+ END
+-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
++CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+ CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
++CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+ CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
+
+ #
+@@ -1869,9 +2878,9 @@
+ CKA_SERIAL_NUMBER MULTILINE_OCTAL
+ \002\001\004
+ END
+-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
++CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+ CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
++CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+ CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
+
+ #
Copied: nss/repos/testing-x86_64/nss-config.in (from rev 273428, nss/trunk/nss-config.in)
===================================================================
--- testing-x86_64/nss-config.in (rev 0)
+++ testing-x86_64/nss-config.in 2016-08-06 20:55:44 UTC (rev 273429)
@@ -0,0 +1,145 @@
+#!/bin/sh
+
+prefix=@prefix@
+
+major_version=@MOD_MAJOR_VERSION@
+minor_version=@MOD_MINOR_VERSION@
+patch_version=@MOD_PATCH_VERSION@
+
+usage()
+{
+ cat <<EOF
+Usage: nss-config [OPTIONS] [LIBRARIES]
+Options:
+ [--prefix[=DIR]]
+ [--exec-prefix[=DIR]]
+ [--includedir[=DIR]]
+ [--libdir[=DIR]]
+ [--version]
+ [--libs]
+ [--cflags]
+Dynamic Libraries:
+ nss
+ nssutil
+ ssl
+ smime
+EOF
+ exit $1
+}
+
+if test $# -eq 0; then
+ usage 1 1>&2
+fi
+
+lib_ssl=yes
+lib_smime=yes
+lib_nss=yes
+lib_nssutil=yes
+
+while test $# -gt 0; do
+ case "$1" in
+ -*=*) optarg=`echo "$1" | sed 's/[-_a-zA-Z0-9]*=//'` ;;
+ *) optarg= ;;
+ esac
+
+ case $1 in
+ --prefix=*)
+ prefix=$optarg
+ ;;
+ --prefix)
+ echo_prefix=yes
+ ;;
+ --exec-prefix=*)
+ exec_prefix=$optarg
+ ;;
+ --exec-prefix)
+ echo_exec_prefix=yes
+ ;;
+ --includedir=*)
+ includedir=$optarg
+ ;;
+ --includedir)
+ echo_includedir=yes
+ ;;
+ --libdir=*)
+ libdir=$optarg
+ ;;
+ --libdir)
+ echo_libdir=yes
+ ;;
+ --version)
+ echo ${major_version}.${minor_version}.${patch_version}
+ ;;
+ --cflags)
+ echo_cflags=yes
+ ;;
+ --libs)
+ echo_libs=yes
+ ;;
+ ssl)
+ lib_ssl=yes
+ ;;
+ smime)
+ lib_smime=yes
+ ;;
+ nss)
+ lib_nss=yes
+ ;;
+ nssutil)
+ lib_nssutil=yes
+ ;;
+ *)
+ usage 1 1>&2
+ ;;
+ esac
+ shift
+done
+
+# Set variables that may be dependent upon other variables
+if test -z "$exec_prefix"; then
+ exec_prefix=`pkg-config --variable=exec_prefix nss`
+fi
+if test -z "$includedir"; then
+ includedir=`pkg-config --variable=includedir nss`
+fi
+if test -z "$libdir"; then
+ libdir=`pkg-config --variable=libdir nss`
+fi
+
+if test "$echo_prefix" = "yes"; then
+ echo $prefix
+fi
+
+if test "$echo_exec_prefix" = "yes"; then
+ echo $exec_prefix
+fi
+
+if test "$echo_includedir" = "yes"; then
+ echo $includedir
+fi
+
+if test "$echo_libdir" = "yes"; then
+ echo $libdir
+fi
+
+if test "$echo_cflags" = "yes"; then
+ echo -I$includedir
+fi
+
+if test "$echo_libs" = "yes"; then
+ libdirs="-Wl,-rpath-link,$libdir -L$libdir"
+ if test -n "$lib_ssl"; then
+ libdirs="$libdirs -lssl${major_version}"
+ fi
+ if test -n "$lib_smime"; then
+ libdirs="$libdirs -lsmime${major_version}"
+ fi
+ if test -n "$lib_nss"; then
+ libdirs="$libdirs -lnss${major_version}"
+ fi
+ if test -n "$lib_nssutil"; then
+ libdirs="$libdirs -lnssutil${major_version}"
+ fi
+ echo $libdirs
+fi
+
Copied: nss/repos/testing-x86_64/nss-config.xml (from rev 273428, nss/trunk/nss-config.xml)
===================================================================
--- testing-x86_64/nss-config.xml (rev 0)
+++ testing-x86_64/nss-config.xml 2016-08-06 20:55:44 UTC (rev 273429)
@@ -0,0 +1,132 @@
+<?xml version='1.0' encoding='utf-8'?>
+<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
+ "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd" [
+<!ENTITY date SYSTEM "date.xml">
+<!ENTITY version SYSTEM "version.xml">
+]>
+
+<refentry id="nss-config">
+
+ <refentryinfo>
+ <date>&date;</date>
+ <title>Network Security Services</title>
+ <productname>nss</productname>
+ <productnumber>&version;</productnumber>
+ </refentryinfo>
+
+ <refmeta>
+ <refentrytitle>nss-config</refentrytitle>
+ <manvolnum>1</manvolnum>
+ </refmeta>
+
+ <refnamediv>
+ <refname>nss-config</refname>
+ <refpurpose>Return meta information about nss libraries</refpurpose>
+ </refnamediv>
+
+ <refsynopsisdiv>
+ <cmdsynopsis>
+ <command>nss-config</command>
+ <arg><option>--prefix</option></arg>
+ <arg><option>--exec-prefix</option></arg>
+ <arg><option>--includedir</option></arg>
+ <arg><option>--libs</option></arg>
+ <arg><option>--cflags</option></arg>
+ <arg><option>--libdir</option></arg>
+ <arg><option>--version</option></arg>
+ </cmdsynopsis>
+ </refsynopsisdiv>
+
+<refsection id="description">
+ <title>Description</title>
+
+ <para><command>nss-config</command> is a shell scrip
+ tool which can be used to obtain gcc options for building client pacakges of nspt. </para>
+
+ </refsection>
+
+ <refsection>
+ <title>Options</title>
+
+ <variablelist>
+ <varlistentry>
+ <term><option>--prefix</option></term>
+ <listitem><simpara>Returns the top level system directory under which the nss libraries are installed.</simpara></listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>--exec-prefix</option></term>
+ <listitem><simpara>returns the top level system directory under which any nss binaries would be installed.</simpara></listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>--includedir</option> <replaceable>count</replaceable></term>
+ <listitem><simpara>returns the path to the directory were the nss libraries are installed.</simpara></listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>--version</option></term>
+ <listitem><simpara>returns the upstream version of nss in the form major_version-minor_version-patch_version.</simpara></listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>--libs</option></term>
+ <listitem><simpara>returns the compiler linking flags.</simpara></listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>--cflags</option></term>
+ <listitem><simpara>returns the compiler include flags.</simpara></listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>--libdir</option></term>
+ <listitem><simpara>returns the path to the directory were the nss libraries are installed.</simpara></listitem>
+ </varlistentry>
+
+ </variablelist>
+ </refsection>
+
+ <refsection>
+ <title>Examples</title>
+
+ <para>The following example will query for both include path and linkage flags:
+
+ <programlisting>
+ /usr/bin/nss-config --cflags --libs
+ </programlisting>
+
+ </para>
+
+
+ </refsection>
+
+ <refsection>
+ <title>Files</title>
+
+ <para><filename>/usr/bin/nss-config</filename></para>
+
+ </refsection>
+
+ <refsection>
+ <title>See also</title>
+ <para>pkg-config(1)</para>
+ </refsection>
+
+ <refsection id="authors">
+ <title>Authors</title>
+ <para>The nss liraries were written and maintained by developers with Netscape, Red Hat, Sun, Oracle, Mozilla, and Google.</para>
+ <para>
+ Authors: Elio Maldonado <emaldona at redhat.com>.
+ </para>
+ </refsection>
+
+<!-- don't change -->
+ <refsection id="license">
+ <title>LICENSE</title>
+ <para>Licensed under the Mozilla Public License, v. 2.0. If a copy of the MPL was not distributed with this file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ </para>
+ </refsection>
+
+</refentry>
+
Copied: nss/repos/testing-x86_64/nss.pc.in (from rev 273428, nss/trunk/nss.pc.in)
===================================================================
--- testing-x86_64/nss.pc.in (rev 0)
+++ testing-x86_64/nss.pc.in 2016-08-06 20:55:44 UTC (rev 273429)
@@ -0,0 +1,11 @@
+prefix=%prefix%
+exec_prefix=%exec_prefix%
+libdir=%libdir%
+includedir=%includedir%
+
+Name: NSS
+Description: Network Security Services
+Version: %NSS_VERSION%
+Requires: nspr >= %NSPR_VERSION%
+Libs: -L${libdir} -lssl3 -lsmime3 -lnss3 -lnssutil3
+Cflags: -I${includedir}
More information about the arch-commits
mailing list