Bug#962155: stretch-pu: package ca-certificates/20200601~deb9u1

[Michael Shuler <michael@pbandjelly.org>]

Package: release.debian.org
Severity: normal
Tags: buster
User: release.debian.org@packages.debian.org
Usertags: pu


* Note: Please, upload this to stretch-updates as well to fix ongoing 
issues with failing web services from the expired AddTrust certificate. 
See #961907 for details.

I would like to upload ca-certificates_20200601~deb9u1 with the 
following fixes:
----
ca-certificates (20200601~deb9u1) stretch; urgency=medium

  * Rebuild for stretch.
  * Merge changes from 20200601
    - d/control
  * This release updates the Mozilla CA bundle to 2.40, blacklists
    distrusted Symantec roots, and blacklists expired "AddTrust External
    Root". Closes: #956411, #955038, #911289, #961907
  * Fix permissions on /usr/local/share/ca-certificates when using 
symlinks.
    Closes: #916833
----

diffstat for ca-certificates-20161130+nmu1+deb9u1 
ca-certificates-20200601~deb9u1

 .gitignore                      |   12
 debian/ca-certificates.postinst |    8
 debian/changelog                |  228 +
 debian/copyright                |   14
 mozilla/blacklist.txt           |   54
 mozilla/certdata.txt            | 4927 
++++++++++++++++++++--------------------
 mozilla/nssckbi.h               |    6
 7 files changed, 2731 insertions(+), 2518 deletions(-)

Full debdiff.gz attached, due to the size of certdata changes.

--
Kind regards,
Michael Shuler

Attachment: ca-certificates_20200601~deb9u1.debdiff.gz
Description: application/gzip