drop expired certificates

class1.pem: Not After : Apr 26 10:32:12 2005 GMT
class2.pem: Not After : Jun 4 09:05:44 2005 GMT
class3.pem: Not After : Jun 4 09:13:06 2005 GMT
class4.pem: Not After : Jun 4 09:19:41 2006 GMT
level1.pem: Not After : Jul 12 16:31:53 2012 GMT
level2.pem: Not After : Jul 12 16:32:03 2012 GMT
level3.pem: Not After : Jul 12 16:32:17 2012 GMT
level4.pem: Not After : Jul 12 16:32:35 2012 GMT
na.pem: Not After : Aug 28 17:16:25 2012 GMT
tsa.pem: Not After : Aug 28 17:05:14 2012 GMT
vs.pem: Not After : Aug 28 17:10:36 2012 GMT
TERENACodeSigningCA.crt: Not After : May 30 10:48:38 2020 GMT
TERENAeScienceSSLCA.crt: Not After : May 30 10:48:38 2020 GMT
TERENASSLCA.crt: Not After : May 30 10:48:38 2020 GMT
ESTEID-SK_2007.PEM.cer: Not After : Aug 26 14:23:01 2016 GMT
ESTEID-SK.PEM.cer: Not After : Jan 13 16:44:50 2012 GMT
JUUR-SK.PEM.cer: Not After : Aug 26 14:23:01 2016 GMT

diff --git a/ca-certificates.spec b/ca-certificates.spec
index 2acda34341ef80aa799217f5a4ce4b1e3f245307..7da43aab7b7c633c5ddef84a0daf67be098b8fdd 100644 (file)
--- a/ca-certificates.spec
+++ b/ca-certificates.spec
@@ -20,28 +20,6 @@ Source0:     http://ftp.debian.org/debian/pool/main/c/ca-certificates/%{name}_%{vers
 # Source0-md5: c02582bf9ae338e558617291897615eb
 Source2:       http://www.certum.pl/keys/CA.pem
 # Source2-md5: 35610177afc9c64e70f1ce62c1885496
-Source3:       http://www.certum.pl/keys/level1.pem
-# Source3-md5: ba2d2e234ef9cfd2e6e5f810c964862e
-Source4:       http://www.certum.pl/keys/level2.pem
-# Source4-md5: d06578a04e8cb23071f3870430ea0cf0
-Source5:       http://www.certum.pl/keys/level3.pem
-# Source5-md5: 47b67c63a52236576fc0d1150327c962
-Source6:       http://www.certum.pl/keys/level4.pem
-# Source6-md5: f1f8a65d177745311a1e99f029ae5d71
-Source7:       http://www.certum.pl/keys/vs.pem
-# Source7-md5: 8da19ffc48c5dcc2868b1aa55f1d5983
-Source8:       http://www.certum.pl/keys/na.pem
-# Source8-md5: ba571cb35e7672ff7ae95132ac1bfec4
-Source9:       http://www.certum.pl/keys/tsa.pem
-# Source9-md5: 1a7b3faf8ed00f4d80297de74862e102
-Source10:      http://www.certum.pl/keys/class1.pem
-# Source10-md5:        058436b132ea2df6972821f546104a16
-Source11:      http://www.certum.pl/keys/class2.pem
-# Source11-md5:        5caf7fe99b1fc6e63c40b3d081711d1b
-Source12:      http://www.certum.pl/keys/class3.pem
-# Source12-md5:        07bc97e21da092ba53535c7379e1b58b
-Source13:      http://www.certum.pl/keys/class4.pem
-# Source13-md5:        99ef61d509539af89f1c025b67245965
 Source14:      http://www.certum.pl/CTNCA.pem
 # Source14-md5:        231b5b8bf05c5e93a9b2ebc4186eb6f7
 Source15:      http://repository.certum.pl/class1casha2.pem
@@ -56,22 +34,10 @@ Source18:   http://repository.certum.pl/evcasha2.pem
 ## Source19-md5:       88ce64a84375c95ab6f7c8515dd2a117
 Source20:      http://repository.certum.pl/gscasha2.pem
 # Source20-md5:        a29d37f95dafc08cef36015922e3b0d3
-Source21:      http://crt.tcs.terena.org/TERENASSLCA.crt
-# Source21-md5:        f62cd1546a8ef14e31ba1ce8eecd234a
-Source22:      http://crt.tcs.terena.org/TERENAeScienceSSLCA.crt
-# Source22-md5:        5feea35ab01a373f115219706f1f57bd
 Source23:      http://crt.tcs.terena.org/TERENAPersonalCA.crt
 # Source23-md5:        53eaa497c8fb0b79f14fe9f69693689a
 Source24:      http://crt.tcs.terena.org/TERENAeSciencePersonalCA.crt
 # Source24-md5:        e25cc655d3ebe920ca9c187e3dde9191
-Source25:      http://crt.tcs.terena.org/TERENACodeSigningCA.crt
-# Source25-md5:        74c9f511ab03a4e6b7462e310abfa89b
-Source26:      http://www.sk.ee/upload/files/JUUR-SK.PEM.cer
-# Source26-md5:        805784c06c9eff3771a4b9bd631cd3f5
-Source27:      http://www.sk.ee/upload/files/ESTEID-SK.PEM.cer
-# Source27-md5:        387beee5b8539ab7d91628f486295899
-Source28:      http://www.sk.ee/upload/files/ESTEID-SK%202007.PEM.cer?/ESTEID-SK_2007.PEM.cer
-# Source28-md5:        2b1a2a77f565d68fdf5f19f6cc3a5600
 Source29:      http://www.sk.ee/upload/files/ESTEID-SK%202011.pem.cer?/ESTEID-SK_2011.pem.cer
 # Source29-md5:        cfcc1e592cb0ff305158a7e32730546c
 Source30:      http://www.terena.org/activities/tcs/repository/sha2/TERENA_SSL_CA_2.pem
@@ -150,17 +116,6 @@ cd work
 
 install -d certum
 cp -pi %{SOURCE2} certum
-cp -pi %{SOURCE3} certum
-cp -pi %{SOURCE4} certum
-cp -pi %{SOURCE5} certum
-cp -pi %{SOURCE6} certum
-cp -pi %{SOURCE7} certum
-cp -pi %{SOURCE8} certum
-cp -pi %{SOURCE9} certum
-cp -pi %{SOURCE10} certum
-cp -pi %{SOURCE11} certum
-cp -pi %{SOURCE12} certum
-cp -pi %{SOURCE13} certum
 cp -pi %{SOURCE14} certum
 cp -pi %{SOURCE15} certum
 cp -pi %{SOURCE16} certum
@@ -173,24 +128,15 @@ for a in certum/*.pem; do
 done
 
 # http://www.sk.ee/en/Repository/certs/rootcertificates
-# JUUR-SK, ESTEID-SK and ESTEID-SK 2007, ESTEID-SK 2011
+# ESTEID-SK 2011
 install -d esteid
-cp -pi %{SOURCE26} esteid
-cp -pi %{SOURCE27} esteid
-cp -pi %{SOURCE28} esteid/ESTEID-SK_2007.crt
 cp -pi %{SOURCE29} esteid/ESTEID-SK_2011.crt
-for a in esteid/*.PEM.cer; do
-       mv -i "$a" "${a%.PEM.cer}.crt"
-done
 
 %build
 cd work
 install -d terena
-openssl x509 -inform DER -in %{SOURCE21} -outform PEM -out terena/$(basename %{SOURCE21})
-openssl x509 -inform DER -in %{SOURCE22} -outform PEM -out terena/$(basename %{SOURCE22})
 openssl x509 -inform DER -in %{SOURCE23} -outform PEM -out terena/$(basename %{SOURCE23})
 openssl x509 -inform DER -in %{SOURCE24} -outform PEM -out terena/$(basename %{SOURCE24})
-openssl x509 -inform DER -in %{SOURCE25} -outform PEM -out terena/$(basename %{SOURCE25})
 cp %{SOURCE30} terena/$(basename %{SOURCE30} .pem).crt
 cp %{SOURCE31} terena/$(basename %{SOURCE31} .pem).crt
 cp %{SOURCE32} terena/$(basename %{SOURCE32} .pem).crt