igtf-policy-bundle (1.137-1) unstable; urgency=medium

  * New upstream release:
  * Added accredited KEK-2024 classic issuing CA (JP)
  * Withdrawn superseded TRGrid CA 2005 (TR)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Mon, 15 Sep 2025 10:27:37 +0200

igtf-policy-bundle (1.136-1) unstable; urgency=medium

  * New upstream release (9 June 2025):
  * Added new CESNET CA Gen5 hierarchy and new off-line Root 2 (CZ)
  * Withdrawn retired CILogon CAs cilogon-basic and cilogon-silver (US)
  * a new version of the generation-4 package signing key is now included that
    uses a SHA-256 digest function for its self-signature. Fingerprint and key 
    material is otherwise identical: 565F4528EAD3F53727B5A2E9B055005676341F1A.

 -- Dennis van Dok <dennisvd@nikhef.nl>  Fri, 06 Jun 2025 21:59:34 +0200

igtf-policy-bundle (1.135-1) unstable; urgency=medium

  * New upstream release:
  * Updated SlovakGrid trust anchor with extended validity (SK)
  * Withdrawn discontinued HPCI CA (JP)
  
 -- Dennis van Dok <dennisvd@nikhef.nl>  Thu, 08 May 2025 14:32:53 +0200

igtf-policy-bundle (1.134-1) unstable; urgency=medium

  * New upstream release:
  * New ANSPGrid CA 2 roll-over for root-issuer key pair (BR)
  * Withdrawn discontinued AC-GRID-FR series authorities (FR)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Wed, 12 Mar 2025 12:30:08 +0100

igtf-policy-bundle (1.133-1) unstable; urgency=medium

  * New upstream release:
  * Updated re-issued GridCanada root with extended validity period (CA)
  * Added GEANT TCS Generation 5 TLS and Auth ICAs and corresponding HARICA
    and private trust roots (EU)
  * updated SHA-256 root CA for RDIG mitigating EL9/FedoraCore deprication
  * MARGI put on hold due to domainname resolution issues (MK)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Mon, 17 Feb 2025 12:06:35 +0100

igtf-policy-bundle (1.132-1) unstable; urgency=medium

  * New upstream release:
  * added new trust anchor for TRGRID transition (TR)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Tue, 17 Dec 2024 12:02:41 +0100

igtf-policy-bundle (1.131-2) unstable; urgency=medium

  * Rebuild for source-only upload

 -- Dennis van Dok <dennisvd@nikhef.nl>  Tue, 29 Oct 2024 20:48:41 +0100

igtf-policy-bundle (1.131-1) unstable; urgency=medium

  * New upstream release:
  * removed discontinued HKU-CA-2 authority (HK)
  * removed obsolete 3rd generation TCS intermediates (EU)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Thu, 24 Oct 2024 10:49:44 +0200

igtf-policy-bundle (1.130-1) unstable; urgency=medium

  * New upstream release:
  * resolve subjnectDN nameformat compatibility issues trust anchor metadata

 -- Dennis van Dok <dennisvd@nikhef.nl>  Sat, 29 Jun 2024 13:01:44 +0200

igtf-policy-bundle (1.129-1) unstable; urgency=medium

  * New upstream release:
  * updated CRL URL location for MREN CA (ME)
  * removed discontinued TSU-GE GRENA CA (GE)
  * removed suspended BYGCA (BY)
  * removed discontinued LIP CA (PT)
  * removed obsolete DT transitional CAs (AE)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Mon, 24 Jun 2024 13:46:11 +0200

igtf-policy-bundle (1.128-1) unstable; urgency=medium

  * updated CRL download URL for ArmeSFo (AM)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Wed, 13 Mar 2024 16:04:54 +0100

igtf-policy-bundle (1.127-1) unstable; urgency=medium

  * added supplementary issuing CA Issuing CA IGTF - C5 - 1 for eMudhra (IN)
  * removed discontinued QuoVadis CAs QuoVadis-Grid-ICA-G2 QuoVadis-Root-CA2G3
    QuoVadis-Root-CA2 and QuoVadis-Root-CA3G3 (BM)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Tue, 20 Feb 2024 10:22:09 +0100

igtf-policy-bundle (1.126-1) unstable; urgency=medium

  * New upstream release:
  * removed replaced InCommon IGTF Server CA and associated Comodo RSA CA (US)
  * removed discontinued UNLPGrid CA (CL)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Mon, 18 Dec 2023 15:21:47 +0100

igtf-policy-bundle (1.125-1) unstable; urgency=medium

  * New upstream release:
  * Updated root certificate ArmeSFo CA with extended validity (AM)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Fri, 01 Dec 2023 09:38:33 +0100

igtf-policy-bundle (1.124-1) unstable; urgency=medium

  * New upstream release:
  * updated contact meta-data for ArmeSFo authority (AM)
  * removed discontinued AEGIS authority (RS)
  * removed suspended KENET Root and issuing CAs (KE)
  * removed suspended SDG-G2 authority (CN)
  * removed suspended CNIC authority (CN)
  * removed all four discontinued DigitalTrust CAs operated by their issuer (AE)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Mon, 30 Oct 2023 14:19:35 +0100

igtf-policy-bundle (1.123-1) unstable; urgency=medium

  * New upstream release:
  * Add ECC private trust hierarchy for GEANT (Research and Education) TCS (EU)
  * Added accredited private trust eMudhra IGTF root and issuers (IN)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Tue, 05 Sep 2023 13:23:44 +0200

igtf-policy-bundle (1.122-1) unstable; urgency=medium

  * New Upstream release:
  * Added private trust hierarchy for GEANT (Research and Education) TCS (EU)
  * Added accredited eMudhra joint public trust root and issuing CAs (IN)
  * Added private trust eMudhra IGTF root and issuers as experimental (IN, US)
  * Closes: 1045502

 -- Dennis van Dok <dennisvd@nikhef.nl>  Mon, 14 Aug 2023 09:10:08 +0200

igtf-policy-bundle (1.121-1) unstable; urgency=medium

  * New upstream release:
  * Added accredited (classic) InCommon RSA IGTF Server CA 3 under the
    Sectigo USERTrust RSA root, for which namespaces have been updated (US)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Mon, 19 Jun 2023 09:15:22 +0200

igtf-policy-bundle (1.120-1) unstable; urgency=medium

  * New upstream release:
  * Added transitional CDP mirror URLs for retiring DigitalTrust CAs (AE)
  * Removed discontinued NIIF-Root-CA-2 (HU)
  * Removed expiring GermanGrid (GridKA CrossGrid) CA (DE)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Fri, 26 May 2023 12:08:51 +0200

igtf-policy-bundle (1.119-1) unstable; urgency=medium

  * New upstream release:
  * Updated UKeScience Root (2007) with consistent string encodings (UK)
  * Removed obsolete SHA1 subordinates DigiCertGridTrustCA-Classic
    and DigiCertGridCA-1-Classic from DigiCert, reflected in RPDNC namespaces
  * Experimental (non-accredited) new InCommon RSA IGTF Server CA 2 (ICA under
    Sectigo USERTrust RSA root, for which namespaces have been updated) (US)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Mon, 13 Mar 2023 12:15:46 +0100

igtf-policy-bundle (1.118-1) unstable; urgency=medium

  * New upstream release:
  * [Changes from 1.116 to 1.117 (27 February 2023)
  * Updated GridCanada CA with re-issued SHA-2 based root (CA)
  * Updated CILogon basic, silver, and openid with re-issued SHA-2 certs (US)
  * Updated UKeScience Root (2007) re-issued with SHA-2, retired 2A ICA (UK)
  * [Changes from 1.116 to 1.117 (29 August 2022)]
  * Add new intermediate ICA DigiCert Grid-TLS (US)
  * Add new intermediate ICA DigiCert Grid-Client-RSA2048-SHA256-2022-CA1 (US)
  * Removed discontinued NCSA-slcs-2013 following end of XSEDE (US)
  * Removed discontinued PSC-Myproxy-CA following end of XSEDE (US)
  * RPM packaging: rpm packages are now signed using a SHA-256 digest, file 
    digests using algo 8 (SHA-256), and the yum/dnf listings are signed with
    SHA-256 as well. This removes support for yum-based distributions <=EL5 
    (for which ELS ended in November 2020), but allows installation of 
    packages on EL9 (Rocky9, AlmaLinux9, &c) that require SHA-256.

 -- Dennis van Dok <dennisvd@nikhef.nl>  Mon, 27 Feb 2023 15:09:19 +0100

igtf-policy-bundle (1.116-1) unstable; urgency=medium

  * New upstream release:
  * Updated intermediate CERN Grid CA ICA with extended validity (CERN)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Tue, 26 Apr 2022 09:11:28 +0200

igtf-policy-bundle (1.115-1) unstable; urgency=medium

  * New upstream release:
  * Removed obsolete CNRS2 CAs, superseded by AC-GRID-FR hierarchy (FR)
  * Add supplementary BCDR download location for UGRID-G2 CRL (UA)
  * Extended validity period of HPCI CA (JP)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Tue, 29 Mar 2022 14:46:39 +0200

igtf-policy-bundle (1.114-2) unstable; urgency=medium

  * Prevent erasing symbolic links on reconfigure. Closes: 1006410

 -- Dennis van Dok <dennisvd@nikhef.nl>  Fri, 25 Feb 2022 10:57:51 +0100

igtf-policy-bundle (1.114-1) unstable; urgency=medium

  * New upstream release:
  * Extended validity for SlovakGrid issuing CA (SK)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Tue, 18 Jan 2022 17:32:21 +0100

igtf-policy-bundle (1.113-1) unstable; urgency=medium

  * New upstream release:
  * [Changes from 1.112 to 1.113 (4 October 2021)]
  * Suspended MD-GRID CA due to network resolution issues (MD)
  * [Changes from 1.111 to 1.112 (16 August 2021)]
  * Updated ANSPGrid CA with extended validity date (BR)
  * [Changes from 1.110 to 1.111 (24 May 2021)]
  * Removed discontinued NERSC-SLCS CA (US)
  * Removed discontinued MYIFAM CA (MY)
  * [Changes from 1.109 to 1.110 (22 March 2021)]
  * Removed INFN-CA-2015 that has disappeared operationally (IT)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Thu, 30 Sep 2021 16:16:58 +0200

igtf-policy-bundle (1.109-1) unstable; urgency=medium

  * New upstream release:
  * Removed discontinued DM private IGTF classic CAs (AE)
  * Removed obsolete QuoVadis-Root-CA1, under which no ICAs are left (BM)
  * Updated QV Grid ICA G2 intermediary following its re-issuance (BM)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Mon, 18 Jan 2021 11:27:53 +0100

igtf-policy-bundle (1.108-1) unstable; urgency=medium

  * New upstream release:
  * Added DigitalTrust classic IGTF specific and public trust IGTF CAs (AE)
  * Updated PCS MyProxy SLCS CRL URL location (US)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Thu, 17 Dec 2020 11:44:43 +0100

igtf-policy-bundle (1.107-1) unstable; urgency=medium

  * New upstream release:
  * retired DarkMatterSecureCA and DarkMatterAssuredCA (AE)
  * removed superseded PolishGrid CA (PL)
  * Added TCS G4 ECC trust anchors to accredited set (EU)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Mon, 10 Aug 2020 16:39:42 +0200

igtf-policy-bundle (1.106-1) unstable; urgency=medium

  * New upstream release:
  * Removed expiring AddTrust External CA Root (US)
  * Updated legacy DutchGrid (Nikhef MS) Root CA (NL)
  * Removed discontinued NCSA-tfca-2013 CA (US)
  * Added TCS G4 ECC trust anchors to experimental area (EU)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Mon, 04 May 2020 09:19:08 +0200

igtf-policy-bundle (1.105-2) UNRELEASED; urgency=medium

  * Trim trailing whitespace.
  * Use secure copyright file specification URI.
  * Merge upstream signing key files.

 -- Debian Janitor <janitor@jelmer.uk>  Tue, 28 Apr 2020 18:08:10 +0000

igtf-policy-bundle (1.105-1) unstable; urgency=medium

  * New upstream release:
  * Discontinued CERN-LCG-IOTA-CA following decommissioning by authority (CERN)
  * Added new G4 intermediates for the GEANT TCS service and supporting
    self-signed USERTrust RSA Root (EU)
  * Updated AddTrust External CA Root signing policy to support legacy UTN
    chains for GEANT TCS G4 (EU)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Tue, 31 Mar 2020 13:07:52 +0200

igtf-policy-bundle (1.104-1) unstable; urgency=medium

  * New upstream release:
  * Reinstated AddTrust External CA Root in parallel to Comodo RSA CA
    to ease transitionary period (US)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Thu, 30 Jan 2020 11:10:00 +0100

igtf-policy-bundle (1.103-1) unstable; urgency=medium

  * New upstream release:
  * Updated contact addresses for DigiCert (US)
  * Regrafted InCommon IGTF Server CA onto self-signed Comodo RSA CA (US)
  * Discontinued superfluous AddTrust External CA Root (US)
  * Discontinued AustrianGrid CA (AT)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Mon, 27 Jan 2020 14:37:11 +0100

igtf-policy-bundle (1.102-1) unstable; urgency=medium

  * New upstream release:
  * Added CESNET-CA-4 ICA accredited classic CA for issuer roll-over (CZ)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Mon, 14 Oct 2019 12:18:16 +0200

igtf-policy-bundle (1.101-2) unstable; urgency=medium

  * Rebuild for a source-only upload

 -- Dennis van Dok <dennisvd@nikhef.nl>  Thu, 05 Sep 2019 10:48:50 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog igtf-policy-experimental`.
