SECENG-13785: restore SSL.com TLS Transit R2 cross-signs issued by AAA - #403
Merged
Conversation
Reverts the removal from #396. Re-imports the two AAA Certificate Services -> SSL.com TLS Transit CA R2 cross-signed intermediates back into cert.db (release 2026.8.1) and regenerates int-bundle.crt and certdata/int-bundle.txt. Restored: - SSL.com TLS Transit RSA CA R2 serial 525D9F0D967A107D60AA675B3AC1E9C8 ski 214134638e1d910cc3ddb624b0a8877b8d656008 issuer AAA Certificate Services - SSL.com TLS Transit ECC CA R2 serial AD8D2DF64681A0D36447EAA94FA273C1 ski 32a2c7d8588bff7fc03cf2556933eccecc1fbc97 issuer AAA Certificate Services Built certdump with Go 1.20.7 (git.wntrmute.dev/kyle/goutils v1.7.7) to preserve MD2-with-RSA signature algorithm labels for the legacy VeriSign roots in ca-bundle.txt; Go >=1.21 no longer recognizes MD2 and would otherwise cause spurious drift in certdata/ca-bundle.txt.
lgarofalo
approved these changes
Aug 6, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Reverts the removal from #396. Re-imports the two AAA Certificate Services -> SSL.com TLS Transit CA R2 cross-signed intermediates back into cert.db (release 2026.8.1) and regenerates int-bundle.crt and certdata/int-bundle.txt.
Restored:
ski 214134638e1d910cc3ddb624b0a8877b8d656008
issuer AAA Certificate Services
serial AD8D2DF64681A0D36447EAA94FA273C1
ski 32a2c7d8588bff7fc03cf2556933eccecc1fbc97
issuer AAA Certificate Services
certdata/ca-bundle.txt also changed due to unrelated cosmetic drift in certdump output for MD2 signature algorithm labels.