Bug#1099596: Acknowledgement (bookworm-pu: package igtf-policy-bundle/1.133)
Debdiff attached.
diff -Nru igtf-policy-bundle-1.128/CHANGES igtf-policy-bundle-1.133/CHANGES
--- igtf-policy-bundle-1.128/CHANGES 2024-02-28 09:00:18.000000000 +0100
+++ igtf-policy-bundle-1.133/CHANGES 2025-02-11 21:08:28.000000000 +0100
@@ -5,6 +5,45 @@
Distribution and to be informed about important information on distribution
lay-out.
+Changes from 1.132 to 1.133
+---------------------------
+(17 February 2024)
+
+* Updated re-issued GridCanada root with extended validity period (CA)
+* Added GEANT TCS Generation 5 TLS and Auth ICAs and corresponding HARICA
+ and private trust roots (EU)
+* updated SHA-256 root CA for RDIG mitigating EL9/FedoraCore deprication
+* MARGI put on hold due to domainname resolution issues (MK)
+
+Changes from 1.131 to 1.132
+---------------------------
+(16 December 2024)
+
+* added new trust anchor for TRGRID transition (TR)
+
+Changes from 1.130 to 1.131
+---------------------------
+(30 September 2024)
+
+* removed discontinued HKU-CA-2 authority (HK)
+* removed obsolete 3rd generation TCS intermediates (EU)
+
+Changes from 1.129 to 1.130
+---------------------------
+(1 July 2024)
+
+* resolve subjnectDN nameformat compatibility issues trust anchor metadata
+
+Changes from 1.128 to 1.129
+---------------------------
+(24 June 2024)
+
+* updated CRL URL location for MREN CA (ME)
+* removed discontinued TSU-GE GRENA CA (GE)
+* removed suspended BYGCA (BY)
+* removed discontinued LIP CA (PT)
+* removed obsolete DT transitional CAs (AE)
+
Changes from 1.127 to 1.128
---------------------------
(11 March 2024)
diff -Nru igtf-policy-bundle-1.128/debian/changelog igtf-policy-bundle-1.133/debian/changelog
--- igtf-policy-bundle-1.128/debian/changelog 2024-04-10 13:40:25.000000000 +0200
+++ igtf-policy-bundle-1.133/debian/changelog 2025-03-05 13:55:59.000000000 +0100
@@ -1,3 +1,60 @@
+igtf-policy-bundle (1.133-1~deb12u1) bookworm; urgency=medium
+
+ * Proposed update to include the GEANT TCS Generation 5 CAs from HARICA
+ to ensure a smooth transition from the GEANT TCS 4
+
+ -- Dennis van Dok <dennisvd@nikhef.nl> Wed, 05 Mar 2025 13:55:59 +0100
+
+igtf-policy-bundle (1.133-1) unstable; urgency=medium
+
+ * New upstream release:
+ * Updated re-issued GridCanada root with extended validity period (CA)
+ * Added GEANT TCS Generation 5 TLS and Auth ICAs and corresponding HARICA
+ and private trust roots (EU)
+ * updated SHA-256 root CA for RDIG mitigating EL9/FedoraCore deprication
+ * MARGI put on hold due to domainname resolution issues (MK)
+
+ -- Dennis van Dok <dennisvd@nikhef.nl> Mon, 17 Feb 2025 12:06:35 +0100
+
+igtf-policy-bundle (1.132-1) unstable; urgency=medium
+
+ * New upstream release:
+ * added new trust anchor for TRGRID transition (TR)
+
+ -- Dennis van Dok <dennisvd@nikhef.nl> Tue, 17 Dec 2024 12:02:41 +0100
+
+igtf-policy-bundle (1.131-2) unstable; urgency=medium
+
+ * Rebuild for source-only upload
+
+ -- Dennis van Dok <dennisvd@nikhef.nl> Tue, 29 Oct 2024 20:48:41 +0100
+
+igtf-policy-bundle (1.131-1) unstable; urgency=medium
+
+ * New upstream release:
+ * removed discontinued HKU-CA-2 authority (HK)
+ * removed obsolete 3rd generation TCS intermediates (EU)
+
+ -- Dennis van Dok <dennisvd@nikhef.nl> Thu, 24 Oct 2024 10:49:44 +0200
+
+igtf-policy-bundle (1.130-1) unstable; urgency=medium
+
+ * New upstream release:
+ * resolve subjnectDN nameformat compatibility issues trust anchor metadata
+
+ -- Dennis van Dok <dennisvd@nikhef.nl> Sat, 29 Jun 2024 13:01:44 +0200
+
+igtf-policy-bundle (1.129-1) unstable; urgency=medium
+
+ * New upstream release:
+ * updated CRL URL location for MREN CA (ME)
+ * removed discontinued TSU-GE GRENA CA (GE)
+ * removed suspended BYGCA (BY)
+ * removed discontinued LIP CA (PT)
+ * removed obsolete DT transitional CAs (AE)
+
+ -- Dennis van Dok <dennisvd@nikhef.nl> Mon, 24 Jun 2024 13:46:11 +0200
+
igtf-policy-bundle (1.128-1~deb12u1) bookworm; urgency=important
* Proposed update to address CAB Forum S/MIME policy change
diff -Nru igtf-policy-bundle-1.128/debian/.gitlab-ci.yml igtf-policy-bundle-1.133/debian/.gitlab-ci.yml
--- igtf-policy-bundle-1.128/debian/.gitlab-ci.yml 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/debian/.gitlab-ci.yml 2025-03-05 13:55:59.000000000 +0100
@@ -0,0 +1,12 @@
+stages:
+ - package
+
+package_bookworm:
+ stage: package
+ tags:
+ - shell
+ script:
+ - mkdir ../build-area
+ - uscan --destdir=../build-area/ --download --download-current-version
+ - dch --bpo ""
+ - gbp buildpackage --git-overlay --git-export-dir=../build-area --git-ignore-branch
diff -Nru igtf-policy-bundle-1.128/Makefile.tpl igtf-policy-bundle-1.133/Makefile.tpl
--- igtf-policy-bundle-1.128/Makefile.tpl 2024-02-28 09:00:18.000000000 +0100
+++ igtf-policy-bundle-1.133/Makefile.tpl 2025-02-11 21:08:28.000000000 +0100
@@ -20,9 +20,9 @@
# parts autogenerated by the PMA build script follow
#
-# Created: Wed Feb 28 08:00:18 2024 GMT
+# Created: Tue Feb 11 20:08:28 2025 GMT
#
-install-classic: AC-GRID-FR AC-GRID-FR-Personnels AC-GRID-FR-Robots AC-GRID-FR-Services ANSPGrid ASGCCA-2007 ArmeSFo BG-ACAD-CA BYGCA CERN-GridCA CERN-Root-2 CESNET-CA-4 CESNET-CA-Root DCAROOT-G1 DFN-GridGermany-Root DZeScience DigiCert-Assured-ID-Grid-Client-RSA2048-SHA256-2022-CA1 DigiCert-Assured-ID-Grid-TLS-RSA2048-SHA256-2022-CA1 DigiCertAssuredIDRootCA-Root DigiCertGridCA-1G2-Classic-2015 DigiCertGridRootCA-Root DigiCertGridTrustCAG2-Classic DigitalTrustIGTFCA DigitalTrustPrivateRootCAG4 GEANTeScienceSSLCA4 GEANTeScienceSSLECCCA4 GridCanada HKU-CA-2 HellasGrid-CA-2016 IGCA2 IHEP-2013 IRAN-GRID-GCG-G2 InCommon-RSA-IGTF-Server-CA-3 KEK KISTIv3 LIPCA MARGI MREN-CA MaGrid NIKHEF NorduGrid-2015 PK-Grid-2007 PKIUNAMgrid PolishGrid-2019 RDIG REUNA-ca ResearchandEducationTrustECCRootCA ResearchandEducationTrustRSARootCA RomanianGRID SRCE SiGNET-CA SlovakGrid TERENA-eScience-SSL-CA-3 TRGrid TSU-GE UGRID-G2 UKeScienceCA-2B UKeScienceRoot-2007 UNAMgrid-ca USERTrustECCCertificationAuthority USERTrustRSACertificationAuthority eMudhra-TrustedRootCAC4 eMudhra-TrustedRootCAC5 emSignClass1CAG1 emSignRootCAG1 emSignSSLCAG1 emigtfc4 emigtfc5 emigtfc5r1 seegrid-ca-2013
+install-classic: AC-GRID-FR AC-GRID-FR-Personnels AC-GRID-FR-Robots AC-GRID-FR-Services ANSPGrid ASGCCA-2007 ArmeSFo BG-ACAD-CA CERN-GridCA CERN-Root-2 CESNET-CA-4 CESNET-CA-Root DCAROOT-G1 DFN-GridGermany-Root DZeScience DigiCert-Assured-ID-Grid-Client-RSA2048-SHA256-2022-CA1 DigiCert-Assured-ID-Grid-TLS-RSA2048-SHA256-2022-CA1 DigiCertAssuredIDRootCA-Root DigiCertGridCA-1G2-Classic-2015 DigiCertGridRootCA-Root DigiCertGridTrustCAG2-Classic GEANTTCSRETrustECCRootCA5 GEANTTCSRETrustRSARootCA5 GEANTeScienceSSLCA4 GEANTeScienceSSLECCCA4 GridCanada HARICAGEANTTLSECC1 HARICAGEANTTLSRSA1 HARICAOVTLSECC HARICAOVTLSRSA HARICATLSECCRootCA2021 HARICATLSRSARootCA2021 HellasGrid-CA-2016 HellenicAcademicandResearchInstitutionsECCRootCA2015 HellenicAcademicandResearchInstitutionsRootCA2015 IGCA2 IHEP-2013 IRAN-GRID-GCG-G2 InCommon-RSA-IGTF-Server-CA-3 KEK KISTIv3 MREN-CA MaGrid NIKHEF NorduGrid-2015 PK-Grid-2007 PKIUNAMgrid PolishGrid-2019 RDIG REUNA-ca ResearchandEducationTrustECCRootCA ResearchandEducationTrustRSARootCA RomanianGRID SRCE SiGNET-CA SlovakGrid TRGrid TRGrid2024 UGRID-G2 UKeScienceCA-2B UKeScienceRoot-2007 UNAMgrid-ca USERTrustECCCertificationAuthority USERTrustRSACertificationAuthority eMudhra-TrustedRootCAC4 eMudhra-TrustedRootCAC5 emSignClass1CAG1 emSignRootCAG1 emSignSSLCAG1 emigtfc4 emigtfc5 emigtfc5r1 seegrid-ca-2013
@echo Installing CAs for profile accredited:classic
$(install) policy-igtf-classic.info $(prefix)/
@@ -30,7 +30,7 @@
@echo Installing CAs for profile accredited:slcs
$(install) policy-igtf-slcs.info $(prefix)/
-install-mics: GEANTTCSAuthenticationECCCA4B GEANTTCSAuthenticationRSACA4B GEANTeSciencePersonalCA4 GEANTeSciencePersonalECCCA4 HPCI TERENAeSciencePersonalCA3 cilogon-silver
+install-mics: GEANTTCSAuthenticationECCCA4B GEANTTCSAuthenticationECCCA5 GEANTTCSAuthenticationRSACA4B GEANTTCSAuthenticationRSACA5 GEANTeSciencePersonalCA4 GEANTeSciencePersonalECCCA4 HPCI cilogon-silver
@echo Installing CAs for profile accredited:mics
$(install) policy-igtf-mics.info $(prefix)/
@@ -153,19 +153,6 @@
$(ln) -s BG-ACAD-CA.namespaces $(prefix)/2418a3f3.namespaces
$(ln) -s BG-ACAD-CA.namespaces $(prefix)/13ba0088.namespaces
-BYGCA: prep
- $(install) src/accredited/BYGCA.crl_url $(prefix)/
- $(install) src/accredited/BYGCA.info $(prefix)/
- $(install) src/accredited/BYGCA.namespaces $(prefix)/
- $(install) src/accredited/BYGCA.pem $(prefix)/
- $(install) src/accredited/BYGCA.signing_policy $(prefix)/
- $(ln) -s BYGCA.pem $(prefix)/709bed08.0
- $(ln) -s BYGCA.pem $(prefix)/b1ac0d46.0
- $(ln) -s BYGCA.signing_policy $(prefix)/709bed08.signing_policy
- $(ln) -s BYGCA.signing_policy $(prefix)/b1ac0d46.signing_policy
- $(ln) -s BYGCA.namespaces $(prefix)/709bed08.namespaces
- $(ln) -s BYGCA.namespaces $(prefix)/b1ac0d46.namespaces
-
CERN-GridCA: prep
$(install) src/accredited/CERN-GridCA.crl_url $(prefix)/
$(install) src/accredited/CERN-GridCA.info $(prefix)/
@@ -332,32 +319,6 @@
$(ln) -s DigiCertGridTrustCAG2-Classic.namespaces $(prefix)/5d9ea26d.namespaces
$(ln) -s DigiCertGridTrustCAG2-Classic.namespaces $(prefix)/bd43b60c.namespaces
-DigitalTrustIGTFCA: prep
- $(install) src/accredited/DigitalTrustIGTFCA.crl_url $(prefix)/
- $(install) src/accredited/DigitalTrustIGTFCA.info $(prefix)/
- $(install) src/accredited/DigitalTrustIGTFCA.namespaces $(prefix)/
- $(install) src/accredited/DigitalTrustIGTFCA.pem $(prefix)/
- $(install) src/accredited/DigitalTrustIGTFCA.signing_policy $(prefix)/
- $(ln) -s DigitalTrustIGTFCA.pem $(prefix)/7f23888f.0
- $(ln) -s DigitalTrustIGTFCA.pem $(prefix)/ef7d3e44.0
- $(ln) -s DigitalTrustIGTFCA.signing_policy $(prefix)/7f23888f.signing_policy
- $(ln) -s DigitalTrustIGTFCA.signing_policy $(prefix)/ef7d3e44.signing_policy
- $(ln) -s DigitalTrustIGTFCA.namespaces $(prefix)/7f23888f.namespaces
- $(ln) -s DigitalTrustIGTFCA.namespaces $(prefix)/ef7d3e44.namespaces
-
-DigitalTrustPrivateRootCAG4: prep
- $(install) src/accredited/DigitalTrustPrivateRootCAG4.crl_url $(prefix)/
- $(install) src/accredited/DigitalTrustPrivateRootCAG4.info $(prefix)/
- $(install) src/accredited/DigitalTrustPrivateRootCAG4.namespaces $(prefix)/
- $(install) src/accredited/DigitalTrustPrivateRootCAG4.pem $(prefix)/
- $(install) src/accredited/DigitalTrustPrivateRootCAG4.signing_policy $(prefix)/
- $(ln) -s DigitalTrustPrivateRootCAG4.pem $(prefix)/d58bb4bc.0
- $(ln) -s DigitalTrustPrivateRootCAG4.pem $(prefix)/2436bbb8.0
- $(ln) -s DigitalTrustPrivateRootCAG4.signing_policy $(prefix)/d58bb4bc.signing_policy
- $(ln) -s DigitalTrustPrivateRootCAG4.signing_policy $(prefix)/2436bbb8.signing_policy
- $(ln) -s DigitalTrustPrivateRootCAG4.namespaces $(prefix)/d58bb4bc.namespaces
- $(ln) -s DigitalTrustPrivateRootCAG4.namespaces $(prefix)/2436bbb8.namespaces
-
GEANTTCSAuthenticationECCCA4B: prep
$(install) src/accredited/GEANTTCSAuthenticationECCCA4B.crl_url $(prefix)/
$(install) src/accredited/GEANTTCSAuthenticationECCCA4B.info $(prefix)/
@@ -371,6 +332,19 @@
$(ln) -s GEANTTCSAuthenticationECCCA4B.namespaces $(prefix)/9efe4e6a.namespaces
$(ln) -s GEANTTCSAuthenticationECCCA4B.namespaces $(prefix)/1e92f7a7.namespaces
+GEANTTCSAuthenticationECCCA5: prep
+ $(install) src/accredited/GEANTTCSAuthenticationECCCA5.crl_url $(prefix)/
+ $(install) src/accredited/GEANTTCSAuthenticationECCCA5.info $(prefix)/
+ $(install) src/accredited/GEANTTCSAuthenticationECCCA5.namespaces $(prefix)/
+ $(install) src/accredited/GEANTTCSAuthenticationECCCA5.pem $(prefix)/
+ $(install) src/accredited/GEANTTCSAuthenticationECCCA5.signing_policy $(prefix)/
+ $(ln) -s GEANTTCSAuthenticationECCCA5.pem $(prefix)/ce17c2b8.0
+ $(ln) -s GEANTTCSAuthenticationECCCA5.pem $(prefix)/f2a0ad17.0
+ $(ln) -s GEANTTCSAuthenticationECCCA5.signing_policy $(prefix)/ce17c2b8.signing_policy
+ $(ln) -s GEANTTCSAuthenticationECCCA5.signing_policy $(prefix)/f2a0ad17.signing_policy
+ $(ln) -s GEANTTCSAuthenticationECCCA5.namespaces $(prefix)/ce17c2b8.namespaces
+ $(ln) -s GEANTTCSAuthenticationECCCA5.namespaces $(prefix)/f2a0ad17.namespaces
+
GEANTTCSAuthenticationRSACA4B: prep
$(install) src/accredited/GEANTTCSAuthenticationRSACA4B.crl_url $(prefix)/
$(install) src/accredited/GEANTTCSAuthenticationRSACA4B.info $(prefix)/
@@ -384,6 +358,45 @@
$(ln) -s GEANTTCSAuthenticationRSACA4B.namespaces $(prefix)/4c274970.namespaces
$(ln) -s GEANTTCSAuthenticationRSACA4B.namespaces $(prefix)/da18317a.namespaces
+GEANTTCSAuthenticationRSACA5: prep
+ $(install) src/accredited/GEANTTCSAuthenticationRSACA5.crl_url $(prefix)/
+ $(install) src/accredited/GEANTTCSAuthenticationRSACA5.info $(prefix)/
+ $(install) src/accredited/GEANTTCSAuthenticationRSACA5.namespaces $(prefix)/
+ $(install) src/accredited/GEANTTCSAuthenticationRSACA5.pem $(prefix)/
+ $(install) src/accredited/GEANTTCSAuthenticationRSACA5.signing_policy $(prefix)/
+ $(ln) -s GEANTTCSAuthenticationRSACA5.pem $(prefix)/b44617aa.0
+ $(ln) -s GEANTTCSAuthenticationRSACA5.pem $(prefix)/6a1a4bad.0
+ $(ln) -s GEANTTCSAuthenticationRSACA5.signing_policy $(prefix)/b44617aa.signing_policy
+ $(ln) -s GEANTTCSAuthenticationRSACA5.signing_policy $(prefix)/6a1a4bad.signing_policy
+ $(ln) -s GEANTTCSAuthenticationRSACA5.namespaces $(prefix)/b44617aa.namespaces
+ $(ln) -s GEANTTCSAuthenticationRSACA5.namespaces $(prefix)/6a1a4bad.namespaces
+
+GEANTTCSRETrustECCRootCA5: prep
+ $(install) src/accredited/GEANTTCSRETrustECCRootCA5.crl_url $(prefix)/
+ $(install) src/accredited/GEANTTCSRETrustECCRootCA5.info $(prefix)/
+ $(install) src/accredited/GEANTTCSRETrustECCRootCA5.namespaces $(prefix)/
+ $(install) src/accredited/GEANTTCSRETrustECCRootCA5.pem $(prefix)/
+ $(install) src/accredited/GEANTTCSRETrustECCRootCA5.signing_policy $(prefix)/
+ $(ln) -s GEANTTCSRETrustECCRootCA5.pem $(prefix)/1135c0fc.0
+ $(ln) -s GEANTTCSRETrustECCRootCA5.pem $(prefix)/a2088939.0
+ $(ln) -s GEANTTCSRETrustECCRootCA5.signing_policy $(prefix)/1135c0fc.signing_policy
+ $(ln) -s GEANTTCSRETrustECCRootCA5.signing_policy $(prefix)/a2088939.signing_policy
+ $(ln) -s GEANTTCSRETrustECCRootCA5.namespaces $(prefix)/1135c0fc.namespaces
+ $(ln) -s GEANTTCSRETrustECCRootCA5.namespaces $(prefix)/a2088939.namespaces
+
+GEANTTCSRETrustRSARootCA5: prep
+ $(install) src/accredited/GEANTTCSRETrustRSARootCA5.crl_url $(prefix)/
+ $(install) src/accredited/GEANTTCSRETrustRSARootCA5.info $(prefix)/
+ $(install) src/accredited/GEANTTCSRETrustRSARootCA5.namespaces $(prefix)/
+ $(install) src/accredited/GEANTTCSRETrustRSARootCA5.pem $(prefix)/
+ $(install) src/accredited/GEANTTCSRETrustRSARootCA5.signing_policy $(prefix)/
+ $(ln) -s GEANTTCSRETrustRSARootCA5.pem $(prefix)/5c96e6d1.0
+ $(ln) -s GEANTTCSRETrustRSARootCA5.pem $(prefix)/5a9c45fe.0
+ $(ln) -s GEANTTCSRETrustRSARootCA5.signing_policy $(prefix)/5c96e6d1.signing_policy
+ $(ln) -s GEANTTCSRETrustRSARootCA5.signing_policy $(prefix)/5a9c45fe.signing_policy
+ $(ln) -s GEANTTCSRETrustRSARootCA5.namespaces $(prefix)/5c96e6d1.namespaces
+ $(ln) -s GEANTTCSRETrustRSARootCA5.namespaces $(prefix)/5a9c45fe.namespaces
+
GEANTeSciencePersonalCA4: prep
$(install) src/accredited/GEANTeSciencePersonalCA4.crl_url $(prefix)/
$(install) src/accredited/GEANTeSciencePersonalCA4.info $(prefix)/
@@ -449,18 +462,83 @@
$(ln) -s GridCanada.namespaces $(prefix)/bffbd7d0.namespaces
$(ln) -s GridCanada.namespaces $(prefix)/5d674a88.namespaces
-HKU-CA-2: prep
- $(install) src/accredited/HKU-CA-2.crl_url $(prefix)/
- $(install) src/accredited/HKU-CA-2.info $(prefix)/
- $(install) src/accredited/HKU-CA-2.namespaces $(prefix)/
- $(install) src/accredited/HKU-CA-2.pem $(prefix)/
- $(install) src/accredited/HKU-CA-2.signing_policy $(prefix)/
- $(ln) -s HKU-CA-2.pem $(prefix)/a7b21b05.0
- $(ln) -s HKU-CA-2.pem $(prefix)/368bc755.0
- $(ln) -s HKU-CA-2.signing_policy $(prefix)/a7b21b05.signing_policy
- $(ln) -s HKU-CA-2.signing_policy $(prefix)/368bc755.signing_policy
- $(ln) -s HKU-CA-2.namespaces $(prefix)/a7b21b05.namespaces
- $(ln) -s HKU-CA-2.namespaces $(prefix)/368bc755.namespaces
+HARICAGEANTTLSECC1: prep
+ $(install) src/accredited/HARICAGEANTTLSECC1.crl_url $(prefix)/
+ $(install) src/accredited/HARICAGEANTTLSECC1.info $(prefix)/
+ $(install) src/accredited/HARICAGEANTTLSECC1.namespaces $(prefix)/
+ $(install) src/accredited/HARICAGEANTTLSECC1.pem $(prefix)/
+ $(install) src/accredited/HARICAGEANTTLSECC1.signing_policy $(prefix)/
+ $(ln) -s HARICAGEANTTLSECC1.pem $(prefix)/1cb741e8.0
+ $(ln) -s HARICAGEANTTLSECC1.pem $(prefix)/6883ff19.0
+ $(ln) -s HARICAGEANTTLSECC1.signing_policy $(prefix)/1cb741e8.signing_policy
+ $(ln) -s HARICAGEANTTLSECC1.signing_policy $(prefix)/6883ff19.signing_policy
+ $(ln) -s HARICAGEANTTLSECC1.namespaces $(prefix)/1cb741e8.namespaces
+ $(ln) -s HARICAGEANTTLSECC1.namespaces $(prefix)/6883ff19.namespaces
+
+HARICAGEANTTLSRSA1: prep
+ $(install) src/accredited/HARICAGEANTTLSRSA1.crl_url $(prefix)/
+ $(install) src/accredited/HARICAGEANTTLSRSA1.info $(prefix)/
+ $(install) src/accredited/HARICAGEANTTLSRSA1.namespaces $(prefix)/
+ $(install) src/accredited/HARICAGEANTTLSRSA1.pem $(prefix)/
+ $(install) src/accredited/HARICAGEANTTLSRSA1.signing_policy $(prefix)/
+ $(ln) -s HARICAGEANTTLSRSA1.pem $(prefix)/5a04724c.0
+ $(ln) -s HARICAGEANTTLSRSA1.pem $(prefix)/82977a7e.0
+ $(ln) -s HARICAGEANTTLSRSA1.signing_policy $(prefix)/5a04724c.signing_policy
+ $(ln) -s HARICAGEANTTLSRSA1.signing_policy $(prefix)/82977a7e.signing_policy
+ $(ln) -s HARICAGEANTTLSRSA1.namespaces $(prefix)/5a04724c.namespaces
+ $(ln) -s HARICAGEANTTLSRSA1.namespaces $(prefix)/82977a7e.namespaces
+
+HARICAOVTLSECC: prep
+ $(install) src/accredited/HARICAOVTLSECC.crl_url $(prefix)/
+ $(install) src/accredited/HARICAOVTLSECC.info $(prefix)/
+ $(install) src/accredited/HARICAOVTLSECC.namespaces $(prefix)/
+ $(install) src/accredited/HARICAOVTLSECC.pem $(prefix)/
+ $(install) src/accredited/HARICAOVTLSECC.signing_policy $(prefix)/
+ $(ln) -s HARICAOVTLSECC.pem $(prefix)/b7c4e308.0
+ $(ln) -s HARICAOVTLSECC.pem $(prefix)/cf50f592.0
+ $(ln) -s HARICAOVTLSECC.signing_policy $(prefix)/b7c4e308.signing_policy
+ $(ln) -s HARICAOVTLSECC.signing_policy $(prefix)/cf50f592.signing_policy
+ $(ln) -s HARICAOVTLSECC.namespaces $(prefix)/b7c4e308.namespaces
+ $(ln) -s HARICAOVTLSECC.namespaces $(prefix)/cf50f592.namespaces
+
+HARICAOVTLSRSA: prep
+ $(install) src/accredited/HARICAOVTLSRSA.crl_url $(prefix)/
+ $(install) src/accredited/HARICAOVTLSRSA.info $(prefix)/
+ $(install) src/accredited/HARICAOVTLSRSA.namespaces $(prefix)/
+ $(install) src/accredited/HARICAOVTLSRSA.pem $(prefix)/
+ $(install) src/accredited/HARICAOVTLSRSA.signing_policy $(prefix)/
+ $(ln) -s HARICAOVTLSRSA.pem $(prefix)/8dd9cc75.0
+ $(ln) -s HARICAOVTLSRSA.pem $(prefix)/9b22fa41.0
+ $(ln) -s HARICAOVTLSRSA.signing_policy $(prefix)/8dd9cc75.signing_policy
+ $(ln) -s HARICAOVTLSRSA.signing_policy $(prefix)/9b22fa41.signing_policy
+ $(ln) -s HARICAOVTLSRSA.namespaces $(prefix)/8dd9cc75.namespaces
+ $(ln) -s HARICAOVTLSRSA.namespaces $(prefix)/9b22fa41.namespaces
+
+HARICATLSECCRootCA2021: prep
+ $(install) src/accredited/HARICATLSECCRootCA2021.crl_url $(prefix)/
+ $(install) src/accredited/HARICATLSECCRootCA2021.info $(prefix)/
+ $(install) src/accredited/HARICATLSECCRootCA2021.namespaces $(prefix)/
+ $(install) src/accredited/HARICATLSECCRootCA2021.pem $(prefix)/
+ $(install) src/accredited/HARICATLSECCRootCA2021.signing_policy $(prefix)/
+ $(ln) -s HARICATLSECCRootCA2021.pem $(prefix)/4c3982f2.0
+ $(ln) -s HARICATLSECCRootCA2021.pem $(prefix)/ecccd8db.0
+ $(ln) -s HARICATLSECCRootCA2021.signing_policy $(prefix)/4c3982f2.signing_policy
+ $(ln) -s HARICATLSECCRootCA2021.signing_policy $(prefix)/ecccd8db.signing_policy
+ $(ln) -s HARICATLSECCRootCA2021.namespaces $(prefix)/4c3982f2.namespaces
+ $(ln) -s HARICATLSECCRootCA2021.namespaces $(prefix)/ecccd8db.namespaces
+
+HARICATLSRSARootCA2021: prep
+ $(install) src/accredited/HARICATLSRSARootCA2021.crl_url $(prefix)/
+ $(install) src/accredited/HARICATLSRSARootCA2021.info $(prefix)/
+ $(install) src/accredited/HARICATLSRSARootCA2021.namespaces $(prefix)/
+ $(install) src/accredited/HARICATLSRSARootCA2021.pem $(prefix)/
+ $(install) src/accredited/HARICATLSRSARootCA2021.signing_policy $(prefix)/
+ $(ln) -s HARICATLSRSARootCA2021.pem $(prefix)/b92fd57f.0
+ $(ln) -s HARICATLSRSARootCA2021.pem $(prefix)/9f727ac7.0
+ $(ln) -s HARICATLSRSARootCA2021.signing_policy $(prefix)/b92fd57f.signing_policy
+ $(ln) -s HARICATLSRSARootCA2021.signing_policy $(prefix)/9f727ac7.signing_policy
+ $(ln) -s HARICATLSRSARootCA2021.namespaces $(prefix)/b92fd57f.namespaces
+ $(ln) -s HARICATLSRSARootCA2021.namespaces $(prefix)/9f727ac7.namespaces
HPCI: prep
$(install) src/accredited/HPCI.crl_url $(prefix)/
@@ -488,6 +566,32 @@
$(ln) -s HellasGrid-CA-2016.namespaces $(prefix)/f4cf8fb6.namespaces
$(ln) -s HellasGrid-CA-2016.namespaces $(prefix)/7c27c6a1.namespaces
+HellenicAcademicandResearchInstitutionsECCRootCA2015: prep
+ $(install) src/accredited/HellenicAcademicandResearchInstitutionsECCRootCA2015.crl_url $(prefix)/
+ $(install) src/accredited/HellenicAcademicandResearchInstitutionsECCRootCA2015.info $(prefix)/
+ $(install) src/accredited/HellenicAcademicandResearchInstitutionsECCRootCA2015.namespaces $(prefix)/
+ $(install) src/accredited/HellenicAcademicandResearchInstitutionsECCRootCA2015.pem $(prefix)/
+ $(install) src/accredited/HellenicAcademicandResearchInstitutionsECCRootCA2015.signing_policy $(prefix)/
+ $(ln) -s HellenicAcademicandResearchInstitutionsECCRootCA2015.pem $(prefix)/9479c8c3.0
+ $(ln) -s HellenicAcademicandResearchInstitutionsECCRootCA2015.pem $(prefix)/7719f463.0
+ $(ln) -s HellenicAcademicandResearchInstitutionsECCRootCA2015.signing_policy $(prefix)/9479c8c3.signing_policy
+ $(ln) -s HellenicAcademicandResearchInstitutionsECCRootCA2015.signing_policy $(prefix)/7719f463.signing_policy
+ $(ln) -s HellenicAcademicandResearchInstitutionsECCRootCA2015.namespaces $(prefix)/9479c8c3.namespaces
+ $(ln) -s HellenicAcademicandResearchInstitutionsECCRootCA2015.namespaces $(prefix)/7719f463.namespaces
+
+HellenicAcademicandResearchInstitutionsRootCA2015: prep
+ $(install) src/accredited/HellenicAcademicandResearchInstitutionsRootCA2015.crl_url $(prefix)/
+ $(install) src/accredited/HellenicAcademicandResearchInstitutionsRootCA2015.info $(prefix)/
+ $(install) src/accredited/HellenicAcademicandResearchInstitutionsRootCA2015.namespaces $(prefix)/
+ $(install) src/accredited/HellenicAcademicandResearchInstitutionsRootCA2015.pem $(prefix)/
+ $(install) src/accredited/HellenicAcademicandResearchInstitutionsRootCA2015.signing_policy $(prefix)/
+ $(ln) -s HellenicAcademicandResearchInstitutionsRootCA2015.pem $(prefix)/dc99f41e.0
+ $(ln) -s HellenicAcademicandResearchInstitutionsRootCA2015.pem $(prefix)/32888f65.0
+ $(ln) -s HellenicAcademicandResearchInstitutionsRootCA2015.signing_policy $(prefix)/dc99f41e.signing_policy
+ $(ln) -s HellenicAcademicandResearchInstitutionsRootCA2015.signing_policy $(prefix)/32888f65.signing_policy
+ $(ln) -s HellenicAcademicandResearchInstitutionsRootCA2015.namespaces $(prefix)/dc99f41e.namespaces
+ $(ln) -s HellenicAcademicandResearchInstitutionsRootCA2015.namespaces $(prefix)/32888f65.namespaces
+
IGCA2: prep
$(install) src/accredited/IGCA2.crl_url $(prefix)/
$(install) src/accredited/IGCA2.info $(prefix)/
@@ -573,32 +677,6 @@
$(ln) -s KISTIv3.namespaces $(prefix)/06769ccd.namespaces
$(ln) -s KISTIv3.namespaces $(prefix)/ead666c8.namespaces
-LIPCA: prep
- $(install) src/accredited/LIPCA.crl_url $(prefix)/
- $(install) src/accredited/LIPCA.info $(prefix)/
- $(install) src/accredited/LIPCA.namespaces $(prefix)/
- $(install) src/accredited/LIPCA.pem $(prefix)/
- $(install) src/accredited/LIPCA.signing_policy $(prefix)/
- $(ln) -s LIPCA.pem $(prefix)/11b4a5a2.0
- $(ln) -s LIPCA.pem $(prefix)/be87b272.0
- $(ln) -s LIPCA.signing_policy $(prefix)/11b4a5a2.signing_policy
- $(ln) -s LIPCA.signing_policy $(prefix)/be87b272.signing_policy
- $(ln) -s LIPCA.namespaces $(prefix)/11b4a5a2.namespaces
- $(ln) -s LIPCA.namespaces $(prefix)/be87b272.namespaces
-
-MARGI: prep
- $(install) src/accredited/MARGI.crl_url $(prefix)/
- $(install) src/accredited/MARGI.info $(prefix)/
- $(install) src/accredited/MARGI.namespaces $(prefix)/
- $(install) src/accredited/MARGI.pem $(prefix)/
- $(install) src/accredited/MARGI.signing_policy $(prefix)/
- $(ln) -s MARGI.pem $(prefix)/7d0d064a.0
- $(ln) -s MARGI.pem $(prefix)/1e4f9475.0
- $(ln) -s MARGI.signing_policy $(prefix)/7d0d064a.signing_policy
- $(ln) -s MARGI.signing_policy $(prefix)/1e4f9475.signing_policy
- $(ln) -s MARGI.namespaces $(prefix)/7d0d064a.namespaces
- $(ln) -s MARGI.namespaces $(prefix)/1e4f9475.namespaces
-
MREN-CA: prep
$(install) src/accredited/MREN-CA.crl_url $(prefix)/
$(install) src/accredited/MREN-CA.info $(prefix)/
@@ -807,32 +885,6 @@
$(ln) -s SlovakGrid.namespaces $(prefix)/e13e0fcf.namespaces
$(ln) -s SlovakGrid.namespaces $(prefix)/e21dc0c0.namespaces
-TERENA-eScience-SSL-CA-3: prep
- $(install) src/accredited/TERENA-eScience-SSL-CA-3.crl_url $(prefix)/
- $(install) src/accredited/TERENA-eScience-SSL-CA-3.info $(prefix)/
- $(install) src/accredited/TERENA-eScience-SSL-CA-3.namespaces $(prefix)/
- $(install) src/accredited/TERENA-eScience-SSL-CA-3.pem $(prefix)/
- $(install) src/accredited/TERENA-eScience-SSL-CA-3.signing_policy $(prefix)/
- $(ln) -s TERENA-eScience-SSL-CA-3.pem $(prefix)/1db3b27f.0
- $(ln) -s TERENA-eScience-SSL-CA-3.pem $(prefix)/e523eeaa.0
- $(ln) -s TERENA-eScience-SSL-CA-3.signing_policy $(prefix)/1db3b27f.signing_policy
- $(ln) -s TERENA-eScience-SSL-CA-3.signing_policy $(prefix)/e523eeaa.signing_policy
- $(ln) -s TERENA-eScience-SSL-CA-3.namespaces $(prefix)/1db3b27f.namespaces
- $(ln) -s TERENA-eScience-SSL-CA-3.namespaces $(prefix)/e523eeaa.namespaces
-
-TERENAeSciencePersonalCA3: prep
- $(install) src/accredited/TERENAeSciencePersonalCA3.crl_url $(prefix)/
- $(install) src/accredited/TERENAeSciencePersonalCA3.info $(prefix)/
- $(install) src/accredited/TERENAeSciencePersonalCA3.namespaces $(prefix)/
- $(install) src/accredited/TERENAeSciencePersonalCA3.pem $(prefix)/
- $(install) src/accredited/TERENAeSciencePersonalCA3.signing_policy $(prefix)/
- $(ln) -s TERENAeSciencePersonalCA3.pem $(prefix)/e732ef10.0
- $(ln) -s TERENAeSciencePersonalCA3.pem $(prefix)/dbf09133.0
- $(ln) -s TERENAeSciencePersonalCA3.signing_policy $(prefix)/e732ef10.signing_policy
- $(ln) -s TERENAeSciencePersonalCA3.signing_policy $(prefix)/dbf09133.signing_policy
- $(ln) -s TERENAeSciencePersonalCA3.namespaces $(prefix)/e732ef10.namespaces
- $(ln) -s TERENAeSciencePersonalCA3.namespaces $(prefix)/dbf09133.namespaces
-
TRGrid: prep
$(install) src/accredited/TRGrid.crl_url $(prefix)/
$(install) src/accredited/TRGrid.info $(prefix)/
@@ -846,18 +898,18 @@
$(ln) -s TRGrid.namespaces $(prefix)/1691b9ba.namespaces
$(ln) -s TRGrid.namespaces $(prefix)/87429ba3.namespaces
-TSU-GE: prep
- $(install) src/accredited/TSU-GE.crl_url $(prefix)/
- $(install) src/accredited/TSU-GE.info $(prefix)/
- $(install) src/accredited/TSU-GE.namespaces $(prefix)/
- $(install) src/accredited/TSU-GE.pem $(prefix)/
- $(install) src/accredited/TSU-GE.signing_policy $(prefix)/
- $(ln) -s TSU-GE.pem $(prefix)/4b3f5558.0
- $(ln) -s TSU-GE.pem $(prefix)/6f071272.0
- $(ln) -s TSU-GE.signing_policy $(prefix)/4b3f5558.signing_policy
- $(ln) -s TSU-GE.signing_policy $(prefix)/6f071272.signing_policy
- $(ln) -s TSU-GE.namespaces $(prefix)/4b3f5558.namespaces
- $(ln) -s TSU-GE.namespaces $(prefix)/6f071272.namespaces
+TRGrid2024: prep
+ $(install) src/accredited/TRGrid2024.crl_url $(prefix)/
+ $(install) src/accredited/TRGrid2024.info $(prefix)/
+ $(install) src/accredited/TRGrid2024.namespaces $(prefix)/
+ $(install) src/accredited/TRGrid2024.pem $(prefix)/
+ $(install) src/accredited/TRGrid2024.signing_policy $(prefix)/
+ $(ln) -s TRGrid2024.pem $(prefix)/23bf59bc.0
+ $(ln) -s TRGrid2024.pem $(prefix)/3ca6d4a0.0
+ $(ln) -s TRGrid2024.signing_policy $(prefix)/23bf59bc.signing_policy
+ $(ln) -s TRGrid2024.signing_policy $(prefix)/3ca6d4a0.signing_policy
+ $(ln) -s TRGrid2024.namespaces $(prefix)/23bf59bc.namespaces
+ $(ln) -s TRGrid2024.namespaces $(prefix)/3ca6d4a0.namespaces
UGRID-G2: prep
$(install) src/accredited/UGRID-G2.crl_url $(prefix)/
diff -Nru igtf-policy-bundle-1.128/policy-igtf-classic.info igtf-policy-bundle-1.133/policy-igtf-classic.info
--- igtf-policy-bundle-1.128/policy-igtf-classic.info 2024-02-28 09:00:17.000000000 +0100
+++ igtf-policy-bundle-1.133/policy-igtf-classic.info 2025-02-11 21:08:28.000000000 +0100
@@ -1,147 +1,153 @@
# @(#)policy-igtf-classic.info - IGTF classic authorities
-# Generated Wednesday, 28 Feb, 2024
+# Generated Tuesday, 11 Feb, 2025
alias = policy-igtf-classic
-version = 1.128
-requires = seegrid-ca-2013 = 1.128, \
- emigtfc4 = 1.128, \
- SlovakGrid = 1.128, \
- BG-ACAD-CA = 1.128, \
- RDIG = 1.128, \
- emSignSSLCAG1 = 1.128, \
- eMudhra-TrustedRootCAC5 = 1.128, \
- CESNET-CA-Root = 1.128, \
- DFN-GridGermany-Root = 1.128, \
- DigitalTrustIGTFCA = 1.128, \
- UKeScienceCA-2B = 1.128, \
- REUNA-ca = 1.128, \
- SRCE = 1.128, \
- DigiCert-Assured-ID-Grid-Client-RSA2048-SHA256-2022-CA1 = 1.128, \
- ASGCCA-2007 = 1.128, \
- AC-GRID-FR-Robots = 1.128, \
- InCommon-RSA-IGTF-Server-CA-3 = 1.128, \
- UNAMgrid-ca = 1.128, \
- PK-Grid-2007 = 1.128, \
- ANSPGrid = 1.128, \
- HKU-CA-2 = 1.128, \
- PKIUNAMgrid = 1.128, \
- emigtfc5 = 1.128, \
- LIPCA = 1.128, \
- DigiCertGridTrustCAG2-Classic = 1.128, \
- AC-GRID-FR = 1.128, \
- MaGrid = 1.128, \
- DigiCert-Assured-ID-Grid-TLS-RSA2048-SHA256-2022-CA1 = 1.128, \
- ArmeSFo = 1.128, \
- SiGNET-CA = 1.128, \
- IHEP-2013 = 1.128, \
- TERENA-eScience-SSL-CA-3 = 1.128, \
- UGRID-G2 = 1.128, \
- GEANTeScienceSSLECCCA4 = 1.128, \
- MREN-CA = 1.128, \
- AC-GRID-FR-Services = 1.128, \
- NorduGrid-2015 = 1.128, \
- TSU-GE = 1.128, \
- BYGCA = 1.128, \
- IGCA2 = 1.128, \
- DZeScience = 1.128, \
- KEK = 1.128, \
- ResearchandEducationTrustECCRootCA = 1.128, \
- DigiCertGridCA-1G2-Classic-2015 = 1.128, \
- MARGI = 1.128, \
- GEANTeScienceSSLCA4 = 1.128, \
- PolishGrid-2019 = 1.128, \
- emigtfc5r1 = 1.128, \
- eMudhra-TrustedRootCAC4 = 1.128, \
- CERN-GridCA = 1.128, \
- KISTIv3 = 1.128, \
- USERTrustRSACertificationAuthority = 1.128, \
- emSignRootCAG1 = 1.128, \
- DigiCertAssuredIDRootCA-Root = 1.128, \
- DigitalTrustPrivateRootCAG4 = 1.128, \
- CESNET-CA-4 = 1.128, \
- HellasGrid-CA-2016 = 1.128, \
- USERTrustECCCertificationAuthority = 1.128, \
- DCAROOT-G1 = 1.128, \
- NIKHEF = 1.128, \
- IRAN-GRID-GCG-G2 = 1.128, \
- emSignClass1CAG1 = 1.128, \
- AC-GRID-FR-Personnels = 1.128, \
- GridCanada = 1.128, \
- ResearchandEducationTrustRSARootCA = 1.128, \
- RomanianGRID = 1.128, \
- UKeScienceRoot-2007 = 1.128, \
- DigiCertGridRootCA-Root = 1.128, \
- TRGrid = 1.128, \
- CERN-Root-2 = 1.128
-subjectdn = "/DC=ORG/DC=SEE-GRID/CN=SEE-GRID CA 2013", \
- "/C=US/O=eMudhra Inc./CN=emSign Issuing CA IGTF - C4", \
- "/C=SK/O=SlovakGrid/CN=SlovakGrid CA", \
+version = 1.133
+requires = AC-GRID-FR = 1.133, \
+ seegrid-ca-2013 = 1.133, \
+ TRGrid = 1.133, \
+ NorduGrid-2015 = 1.133, \
+ USERTrustRSACertificationAuthority = 1.133, \
+ BG-ACAD-CA = 1.133, \
+ eMudhra-TrustedRootCAC4 = 1.133, \
+ CESNET-CA-Root = 1.133, \
+ ASGCCA-2007 = 1.133, \
+ PolishGrid-2019 = 1.133, \
+ HellenicAcademicandResearchInstitutionsECCRootCA2015 = 1.133, \
+ DFN-GridGermany-Root = 1.133, \
+ DigiCertGridRootCA-Root = 1.133, \
+ ResearchandEducationTrustRSARootCA = 1.133, \
+ DigiCertGridCA-1G2-Classic-2015 = 1.133, \
+ GEANTTCSRETrustECCRootCA5 = 1.133, \
+ AC-GRID-FR-Robots = 1.133, \
+ DigiCert-Assured-ID-Grid-TLS-RSA2048-SHA256-2022-CA1 = 1.133, \
+ ANSPGrid = 1.133, \
+ IGCA2 = 1.133, \
+ IRAN-GRID-GCG-G2 = 1.133, \
+ emSignClass1CAG1 = 1.133, \
+ HARICATLSRSARootCA2021 = 1.133, \
+ emigtfc4 = 1.133, \
+ GridCanada = 1.133, \
+ HARICAOVTLSECC = 1.133, \
+ emigtfc5r1 = 1.133, \
+ HARICAGEANTTLSRSA1 = 1.133, \
+ GEANTeScienceSSLCA4 = 1.133, \
+ RDIG = 1.133, \
+ UKeScienceCA-2B = 1.133, \
+ ArmeSFo = 1.133, \
+ emigtfc5 = 1.133, \
+ GEANTeScienceSSLECCCA4 = 1.133, \
+ REUNA-ca = 1.133, \
+ MaGrid = 1.133, \
+ DCAROOT-G1 = 1.133, \
+ PK-Grid-2007 = 1.133, \
+ InCommon-RSA-IGTF-Server-CA-3 = 1.133, \
+ HARICATLSECCRootCA2021 = 1.133, \
+ USERTrustECCCertificationAuthority = 1.133, \
+ DigiCertAssuredIDRootCA-Root = 1.133, \
+ SRCE = 1.133, \
+ UNAMgrid-ca = 1.133, \
+ UKeScienceRoot-2007 = 1.133, \
+ RomanianGRID = 1.133, \
+ HellenicAcademicandResearchInstitutionsRootCA2015 = 1.133, \
+ TRGrid2024 = 1.133, \
+ GEANTTCSRETrustRSARootCA5 = 1.133, \
+ CESNET-CA-4 = 1.133, \
+ CERN-GridCA = 1.133, \
+ MREN-CA = 1.133, \
+ AC-GRID-FR-Personnels = 1.133, \
+ ResearchandEducationTrustECCRootCA = 1.133, \
+ SlovakGrid = 1.133, \
+ PKIUNAMgrid = 1.133, \
+ AC-GRID-FR-Services = 1.133, \
+ KISTIv3 = 1.133, \
+ DigiCert-Assured-ID-Grid-Client-RSA2048-SHA256-2022-CA1 = 1.133, \
+ emSignSSLCAG1 = 1.133, \
+ emSignRootCAG1 = 1.133, \
+ DZeScience = 1.133, \
+ NIKHEF = 1.133, \
+ CERN-Root-2 = 1.133, \
+ HellasGrid-CA-2016 = 1.133, \
+ DigiCertGridTrustCAG2-Classic = 1.133, \
+ IHEP-2013 = 1.133, \
+ KEK = 1.133, \
+ HARICAOVTLSRSA = 1.133, \
+ UGRID-G2 = 1.133, \
+ eMudhra-TrustedRootCAC5 = 1.133, \
+ HARICAGEANTTLSECC1 = 1.133, \
+ SiGNET-CA = 1.133
+subjectdn = "/C=FR/O=MENESR/OU=GRID-FR/CN=AC GRID-FR", \
+ "/DC=ORG/DC=SEE-GRID/CN=SEE-GRID CA 2013", \
+ "/C=TR/O=TRGrid/CN=TR-Grid CA", \
+ "/O=Grid/O=NorduGrid/CN=NorduGrid Certification Authority 2015", \
+ "/C=US/ST=New Jersey/L=Jersey City/O=The USERTRUST Network/CN=USERTrust RSA Certification Authority", \
"/DC=bg/DC=acad/CN=BG.ACAD CA", \
- "/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA", \
- "/C=IN/OU=emSign PKI/O=eMudhra Technologies Limited/CN=emSign SSL CA - G1", \
- "/C=US/O=eMudhra Inc./CN=emSign Trusted Root CA - C5", \
+ "/C=US/OU=emSign PKI/O=eMudhra Inc/CN=emSign Trusted Root CA - C4", \
"/DC=cz/DC=cesnet-ca/O=CESNET CA/CN=CESNET CA Root", \
- "/C=DE/O=DFN-Verein/OU=DFN-PKI/CN=DFN-Verein PCA Grid - G01", \
- "/C=AE/O=DigitalTrust L.L.C./CN=DigitalTrust IGTF CA", \
- "/C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA 2B", \
- "/C=CL/O=REUNACA/CN=REUNA Certification Authority", \
- "/C=HR/O=edu/OU=srce/CN=SRCE CA", \
- "/C=US/O=DigiCert, Inc./CN=DigiCert Assured ID Grid Client RSA2048 SHA256 2022 CA1", \
"/C=TW/O=AS/CN=Academia Sinica Grid Computing Certification Authority Mercury", \
+ "/C=PL/O=GRID/CN=Polish Grid CA 2019", \
+ "/C=GR/L=Athens/O=Hellenic Academic and Research Institutions Cert. Authority/CN=Hellenic Academic and Research Institutions ECC RootCA 2015", \
+ "/C=DE/O=DFN-Verein/OU=DFN-PKI/CN=DFN-Verein PCA Grid - G01", \
+ "/DC=com/DC=DigiCert-Grid/O=DigiCert Grid/CN=DigiCert Grid Root CA", \
+ "/O=Research and Education Trust/CN=Research and Education Trust RSA Root CA", \
+ "/DC=com/DC=DigiCert-Grid/O=DigiCert Grid/CN=DigiCert Grid CA-1 G2", \
+ "/C=NL/O=GEANT Vereniging/CN=Research and Education Trust ECC Root CA 5", \
"/C=FR/O=MENESR/OU=GRID-FR/CN=AC GRID-FR Robots", \
- "/C=US/O=Internet2/CN=InCommon RSA IGTF Server CA 3", \
- "/C=MX/O=UNAMgrid/OU=UNAM/CN=CA", \
- "/C=PK/O=NCP/CN=PK-GRID-CA", \
- "/C=BR/O=ANSP/OU=ANSPGrid CA/CN=ANSPGrid CA", \
- "/DC=HK/DC=HKU/DC=GRID/CN=HKU Grid CA 2", \
- "/C=MX/O=UNAM/OU=UNAMgrid/CN=PKIUNAMgrid", \
- "/C=US/O=eMudhra Inc./CN=emSign Issuing CA IGTF - C5", \
- "/C=PT/O=LIPCA/CN=LIP Certification Authority", \
- "/C=US/O=DigiCert Grid/OU=www.digicert.com/CN=DigiCert Grid Trust CA G2", \
- "/C=FR/O=MENESR/OU=GRID-FR/CN=AC GRID-FR", \
- "/C=MA/O=MaGrid/CN=MaGrid CA", \
"/C=US/O=DigiCert, Inc./CN=DigiCert Assured ID Grid TLS RSA2048 SHA256 2022 CA1", \
+ "/C=BR/O=ANSP/OU=ANSPGrid CA/CN=ANSPGrid CA", \
+ "/DC=IN/DC=GARUDAINDIA/CN=Indian Grid Certification Authority 2", \
+ "/C=IR/O=IPM/OU=GCG/CN=IRAN-GRID-G2 CA", \
+ "/C=IN/OU=emSign PKI/O=eMudhra Technologies Limited/CN=emSign Class 1 CA - G1", \
+ "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA TLS RSA Root CA 2021", \
+ "/C=US/O=eMudhra Inc./CN=emSign Issuing CA IGTF - C4", \
+ "/C=CA/O=Grid/CN=Grid Canada Certificate Authority", \
+ "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA OV TLS ECC", \
+ "/C=US/O=eMudhra Inc./CN=emSign Issuing CA IGTF - C5 - 1", \
+ "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=GEANT TLS RSA 1", \
+ "/C=NL/O=GEANT Vereniging/CN=GEANT eScience SSL CA 4", \
+ "/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA", \
+ "/C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA 2B", \
"/C=AM/O=ArmeSFo/CN=ArmeSFo CA", \
- "/C=SI/O=SiGNET/CN=SiGNET CA", \
- "/C=CN/O=HEP/CN=Institute of High Energy Physics Certification Authority", \
- "/C=NL/ST=Noord-Holland/L=Amsterdam/O=TERENA/CN=TERENA eScience SSL CA 3", \
- "/DC=org/DC=ugrid/CN=UGRID CA G2", \
+ "/C=US/O=eMudhra Inc./CN=emSign Issuing CA IGTF - C5", \
"/C=NL/O=GEANT Vereniging/CN=GEANT eScience SSL ECC CA 4", \
+ "/C=CL/O=REUNACA/CN=REUNA Certification Authority", \
+ "/C=MA/O=MaGrid/CN=MaGrid CA", \
+ "/DC=nl/DC=dutchgrid/O=Certification Authorities/CN=DCA Root G1 CA", \
+ "/C=PK/O=NCP/CN=PK-GRID-CA", \
+ "/C=US/O=Internet2/CN=InCommon RSA IGTF Server CA 3", \
+ "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA TLS ECC Root CA 2021", \
+ "/C=US/ST=New Jersey/L=Jersey City/O=The USERTRUST Network/CN=USERTrust ECC Certification Authority", \
+ "/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Assured ID Root CA", \
+ "/C=HR/O=edu/OU=srce/CN=SRCE CA", \
+ "/C=MX/O=UNAMgrid/OU=UNAM/CN=CA", \
+ "/C=UK/O=eScienceRoot/OU=Authority/CN=UK e-Science Root", \
+ "/DC=RO/DC=RomanianGRID/O=ROSA/OU=Certification Authority/CN=RomanianGRID CA", \
+ "/C=GR/L=Athens/O=Hellenic Academic and Research Institutions Cert. Authority/CN=Hellenic Academic and Research Institutions RootCA 2015", \
+ "/C=TR/O=TRGrid/CN=TR-Grid CA 2024", \
+ "/C=NL/O=GEANT Vereniging/CN=Research and Education Trust RSA Root CA 5", \
+ "/DC=cz/DC=cesnet-ca/O=CESNET CA/CN=CESNET CA 4", \
+ "/DC=ch/DC=cern/CN=CERN Grid Certification Authority", \
"/DC=me/DC=ac/DC=MREN/CN=MREN-CA", \
- "/C=FR/O=MENESR/OU=GRID-FR/CN=AC GRID-FR Services", \
- "/O=Grid/O=NorduGrid/CN=NorduGrid Certification Authority 2015", \
- "/DC=GE/DC=TSU/CN=TSU Root CA", \
- "/DC=by/DC=grid/O=uiip.bas-net.by/CN=Belarusian Grid Certification Authority", \
- "/DC=IN/DC=GARUDAINDIA/CN=Indian Grid Certification Authority 2", \
- "/DC=DZ/DC=ARN/O=DZ e-Science GRID/CN=DZ e-Science CA", \
- "/C=JP/O=KEK/OU=CRC/CN=KEK GRID Certificate Authority", \
+ "/C=FR/O=MENESR/OU=GRID-FR/CN=AC GRID-FR Personnels", \
"/O=Research and Education Trust/CN=Research and Education Trust ECC Root CA", \
- "/DC=com/DC=DigiCert-Grid/O=DigiCert Grid/CN=DigiCert Grid CA-1 G2", \
- "/C=MK/O=MARGI/CN=MARGI-CA", \
- "/C=NL/O=GEANT Vereniging/CN=GEANT eScience SSL CA 4", \
- "/C=PL/O=GRID/CN=Polish Grid CA 2019", \
- "/C=US/O=eMudhra Inc./CN=emSign Issuing CA IGTF - C5 - 1", \
- "/C=US/OU=emSign PKI/O=eMudhra Inc/CN=emSign Trusted Root CA - C4", \
- "/DC=ch/DC=cern/CN=CERN Grid Certification Authority", \
+ "/C=SK/O=SlovakGrid/CN=SlovakGrid CA", \
+ "/C=MX/O=UNAM/OU=UNAMgrid/CN=PKIUNAMgrid", \
+ "/C=FR/O=MENESR/OU=GRID-FR/CN=AC GRID-FR Services", \
"/C=KR/O=KISTI/CN=KISTI Certification Authority", \
- "/C=US/ST=New Jersey/L=Jersey City/O=The USERTRUST Network/CN=USERTrust RSA Certification Authority", \
+ "/C=US/O=DigiCert, Inc./CN=DigiCert Assured ID Grid Client RSA2048 SHA256 2022 CA1", \
+ "/C=IN/OU=emSign PKI/O=eMudhra Technologies Limited/CN=emSign SSL CA - G1", \
"/C=IN/OU=emSign PKI/O=eMudhra Technologies Limited/CN=emSign Root CA - G1", \
- "/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Assured ID Root CA", \
- "/C=AE/O=DigitalTrust L.L.C./CN=DigitalTrust Private Root CA G4", \
- "/DC=cz/DC=cesnet-ca/O=CESNET CA/CN=CESNET CA 4", \
- "/C=GR/O=HellasGrid/OU=Certification Authorities/CN=HellasGrid CA 2016", \
- "/C=US/ST=New Jersey/L=Jersey City/O=The USERTRUST Network/CN=USERTrust ECC Certification Authority", \
- "/DC=nl/DC=dutchgrid/O=Certification Authorities/CN=DCA Root G1 CA", \
+ "/DC=DZ/DC=ARN/O=DZ e-Science GRID/CN=DZ e-Science CA", \
"/C=NL/O=NIKHEF/CN=NIKHEF medium-security certification auth", \
- "/C=IR/O=IPM/OU=GCG/CN=IRAN-GRID-G2 CA", \
- "/C=IN/OU=emSign PKI/O=eMudhra Technologies Limited/CN=emSign Class 1 CA - G1", \
- "/C=FR/O=MENESR/OU=GRID-FR/CN=AC GRID-FR Personnels", \
- "/C=CA/O=Grid/CN=Grid Canada Certificate Authority", \
- "/O=Research and Education Trust/CN=Research and Education Trust RSA Root CA", \
- "/DC=RO/DC=RomanianGRID/O=ROSA/OU=Certification Authority/CN=RomanianGRID CA", \
- "/C=UK/O=eScienceRoot/OU=Authority/CN=UK e-Science Root", \
- "/DC=com/DC=DigiCert-Grid/O=DigiCert Grid/CN=DigiCert Grid Root CA", \
- "/C=TR/O=TRGrid/CN=TR-Grid CA", \
- "/C=ch/O=CERN/CN=CERN Root Certification Authority 2"
+ "/C=ch/O=CERN/CN=CERN Root Certification Authority 2", \
+ "/C=GR/O=HellasGrid/OU=Certification Authorities/CN=HellasGrid CA 2016", \
+ "/C=US/O=DigiCert Grid/OU=www.digicert.com/CN=DigiCert Grid Trust CA G2", \
+ "/C=CN/O=HEP/CN=Institute of High Energy Physics Certification Authority", \
+ "/C=JP/O=KEK/OU=CRC/CN=KEK GRID Certificate Authority", \
+ "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA OV TLS RSA", \
+ "/DC=org/DC=ugrid/CN=UGRID CA G2", \
+ "/C=US/O=eMudhra Inc./CN=emSign Trusted Root CA - C5", \
+ "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=GEANT TLS ECC 1", \
+ "/C=SI/O=SiGNET/CN=SiGNET CA"
obsoletes = CyGrid-old, \
CNRS-DataGrid, \
CESNET-old, \
@@ -273,4 +279,12 @@
QuoVadis-Grid-ICA-G2, \
QuoVadis-Root-CA2G3, \
QuoVadis-Root-CA2, \
- QuoVadis-Root-CA3G3
+ QuoVadis-Root-CA3G3, \
+ DigitalTrustPrivateRootCAG4, \
+ DigitalTrustIGTFCA, \
+ LIPCA, \
+ BYGCA, \
+ TSU-GE, \
+ HKU-CA-2, \
+ TERENA-eScience-SSL-CA-3, \
+ MARGI
diff -Nru igtf-policy-bundle-1.128/policy-igtf-discontinued.info igtf-policy-bundle-1.133/policy-igtf-discontinued.info
--- igtf-policy-bundle-1.128/policy-igtf-discontinued.info 2024-02-28 09:00:17.000000000 +0100
+++ igtf-policy-bundle-1.133/policy-igtf-discontinued.info 2025-02-11 21:08:28.000000000 +0100
@@ -1,6 +1,6 @@
# @(#)policy-igtf-discontinued.info - IGTF discontinued authorities
-# Generated Wednesday, 28 Feb, 2024
+# Generated Tuesday, 11 Feb, 2025
alias = policy-igtf-discontinued
-version = 1.128
+version = 1.133
requires =
subjectdn =
diff -Nru igtf-policy-bundle-1.128/policy-igtf-experimental.info igtf-policy-bundle-1.133/policy-igtf-experimental.info
--- igtf-policy-bundle-1.128/policy-igtf-experimental.info 2024-02-28 09:00:17.000000000 +0100
+++ igtf-policy-bundle-1.133/policy-igtf-experimental.info 2025-02-11 21:08:28.000000000 +0100
@@ -1,8 +1,8 @@
# @(#)policy-igtf-experimental.info - IGTF experimental authorities
-# Generated Wednesday, 28 Feb, 2024
+# Generated Tuesday, 11 Feb, 2025
alias = policy-igtf-experimental
-version = 1.128
-requires = cilogon-openid = 1.128, \
- InCommon-RSA-IGTF-Server-CA-2 = 1.128
-subjectdn = "/DC=org/DC=cilogon/C=US/O=CILogon/CN=CILogon OpenID CA 1", \
- "/C=US/O=Internet2/CN=InCommon RSA IGTF Server CA 2"
+version = 1.133
+requires = InCommon-RSA-IGTF-Server-CA-2 = 1.133, \
+ cilogon-openid = 1.133
+subjectdn = "/C=US/O=Internet2/CN=InCommon RSA IGTF Server CA 2", \
+ "/DC=org/DC=cilogon/C=US/O=CILogon/CN=CILogon OpenID CA 1"
diff -Nru igtf-policy-bundle-1.128/policy-igtf.info igtf-policy-bundle-1.133/policy-igtf.info
--- igtf-policy-bundle-1.128/policy-igtf.info 2024-02-28 09:00:17.000000000 +0100
+++ igtf-policy-bundle-1.133/policy-igtf.info 2025-02-11 21:08:28.000000000 +0100
@@ -1,83 +1,87 @@
# @(#)policy-igtf.info - all IGTF accredited authorities
-# Generated Wednesday, 28 Feb, 2024
-version = 1.128
-requires = seegrid-ca-2013 = 1.128, \
- emigtfc4 = 1.128, \
- SlovakGrid = 1.128, \
- BG-ACAD-CA = 1.128, \
- RDIG = 1.128, \
- emSignSSLCAG1 = 1.128, \
- eMudhra-TrustedRootCAC5 = 1.128, \
- CESNET-CA-Root = 1.128, \
- DFN-GridGermany-Root = 1.128, \
- DigitalTrustIGTFCA = 1.128, \
- UKeScienceCA-2B = 1.128, \
- REUNA-ca = 1.128, \
- SRCE = 1.128, \
- DigiCert-Assured-ID-Grid-Client-RSA2048-SHA256-2022-CA1 = 1.128, \
- ASGCCA-2007 = 1.128, \
- AC-GRID-FR-Robots = 1.128, \
- InCommon-RSA-IGTF-Server-CA-3 = 1.128, \
- UNAMgrid-ca = 1.128, \
- PK-Grid-2007 = 1.128, \
- ANSPGrid = 1.128, \
- HKU-CA-2 = 1.128, \
- PKIUNAMgrid = 1.128, \
- emigtfc5 = 1.128, \
- LIPCA = 1.128, \
- DigiCertGridTrustCAG2-Classic = 1.128, \
- AC-GRID-FR = 1.128, \
- MaGrid = 1.128, \
- DigiCert-Assured-ID-Grid-TLS-RSA2048-SHA256-2022-CA1 = 1.128, \
- ArmeSFo = 1.128, \
- SiGNET-CA = 1.128, \
- IHEP-2013 = 1.128, \
- TERENA-eScience-SSL-CA-3 = 1.128, \
- UGRID-G2 = 1.128, \
- GEANTeScienceSSLECCCA4 = 1.128, \
- MREN-CA = 1.128, \
- AC-GRID-FR-Services = 1.128, \
- NorduGrid-2015 = 1.128, \
- TSU-GE = 1.128, \
- BYGCA = 1.128, \
- IGCA2 = 1.128, \
- DZeScience = 1.128, \
- KEK = 1.128, \
- ResearchandEducationTrustECCRootCA = 1.128, \
- DigiCertGridCA-1G2-Classic-2015 = 1.128, \
- MARGI = 1.128, \
- GEANTeScienceSSLCA4 = 1.128, \
- PolishGrid-2019 = 1.128, \
- emigtfc5r1 = 1.128, \
- eMudhra-TrustedRootCAC4 = 1.128, \
- CERN-GridCA = 1.128, \
- KISTIv3 = 1.128, \
- USERTrustRSACertificationAuthority = 1.128, \
- emSignRootCAG1 = 1.128, \
- DigiCertAssuredIDRootCA-Root = 1.128, \
- DigitalTrustPrivateRootCAG4 = 1.128, \
- CESNET-CA-4 = 1.128, \
- HellasGrid-CA-2016 = 1.128, \
- USERTrustECCCertificationAuthority = 1.128, \
- DCAROOT-G1 = 1.128, \
- NIKHEF = 1.128, \
- IRAN-GRID-GCG-G2 = 1.128, \
- emSignClass1CAG1 = 1.128, \
- AC-GRID-FR-Personnels = 1.128, \
- GridCanada = 1.128, \
- ResearchandEducationTrustRSARootCA = 1.128, \
- RomanianGRID = 1.128, \
- UKeScienceRoot-2007 = 1.128, \
- DigiCertGridRootCA-Root = 1.128, \
- TRGrid = 1.128, \
- CERN-Root-2 = 1.128GEANTTCSAuthenticationECCCA4B = 1.128, \
- GEANTTCSAuthenticationRSACA4B = 1.128, \
- GEANTeSciencePersonalECCCA4 = 1.128, \
- TERENAeSciencePersonalCA3 = 1.128, \
- GEANTeSciencePersonalCA4 = 1.128, \
- cilogon-silver = 1.128, \
- HPCI = 1.128cilogon-basic = 1.128, \
- RCauth-Pilot-ICA-G1 = 1.128
+# Generated Tuesday, 11 Feb, 2025
+version = 1.133
+requires = AC-GRID-FR = 1.133, \
+ seegrid-ca-2013 = 1.133, \
+ TRGrid = 1.133, \
+ NorduGrid-2015 = 1.133, \
+ USERTrustRSACertificationAuthority = 1.133, \
+ BG-ACAD-CA = 1.133, \
+ eMudhra-TrustedRootCAC4 = 1.133, \
+ CESNET-CA-Root = 1.133, \
+ ASGCCA-2007 = 1.133, \
+ PolishGrid-2019 = 1.133, \
+ HellenicAcademicandResearchInstitutionsECCRootCA2015 = 1.133, \
+ DFN-GridGermany-Root = 1.133, \
+ DigiCertGridRootCA-Root = 1.133, \
+ ResearchandEducationTrustRSARootCA = 1.133, \
+ DigiCertGridCA-1G2-Classic-2015 = 1.133, \
+ GEANTTCSRETrustECCRootCA5 = 1.133, \
+ AC-GRID-FR-Robots = 1.133, \
+ DigiCert-Assured-ID-Grid-TLS-RSA2048-SHA256-2022-CA1 = 1.133, \
+ ANSPGrid = 1.133, \
+ IGCA2 = 1.133, \
+ IRAN-GRID-GCG-G2 = 1.133, \
+ emSignClass1CAG1 = 1.133, \
+ HARICATLSRSARootCA2021 = 1.133, \
+ emigtfc4 = 1.133, \
+ GridCanada = 1.133, \
+ HARICAOVTLSECC = 1.133, \
+ emigtfc5r1 = 1.133, \
+ HARICAGEANTTLSRSA1 = 1.133, \
+ GEANTeScienceSSLCA4 = 1.133, \
+ RDIG = 1.133, \
+ UKeScienceCA-2B = 1.133, \
+ ArmeSFo = 1.133, \
+ emigtfc5 = 1.133, \
+ GEANTeScienceSSLECCCA4 = 1.133, \
+ REUNA-ca = 1.133, \
+ MaGrid = 1.133, \
+ DCAROOT-G1 = 1.133, \
+ PK-Grid-2007 = 1.133, \
+ InCommon-RSA-IGTF-Server-CA-3 = 1.133, \
+ HARICATLSECCRootCA2021 = 1.133, \
+ USERTrustECCCertificationAuthority = 1.133, \
+ DigiCertAssuredIDRootCA-Root = 1.133, \
+ SRCE = 1.133, \
+ UNAMgrid-ca = 1.133, \
+ UKeScienceRoot-2007 = 1.133, \
+ RomanianGRID = 1.133, \
+ HellenicAcademicandResearchInstitutionsRootCA2015 = 1.133, \
+ TRGrid2024 = 1.133, \
+ GEANTTCSRETrustRSARootCA5 = 1.133, \
+ CESNET-CA-4 = 1.133, \
+ CERN-GridCA = 1.133, \
+ MREN-CA = 1.133, \
+ AC-GRID-FR-Personnels = 1.133, \
+ ResearchandEducationTrustECCRootCA = 1.133, \
+ SlovakGrid = 1.133, \
+ PKIUNAMgrid = 1.133, \
+ AC-GRID-FR-Services = 1.133, \
+ KISTIv3 = 1.133, \
+ DigiCert-Assured-ID-Grid-Client-RSA2048-SHA256-2022-CA1 = 1.133, \
+ emSignSSLCAG1 = 1.133, \
+ emSignRootCAG1 = 1.133, \
+ DZeScience = 1.133, \
+ NIKHEF = 1.133, \
+ CERN-Root-2 = 1.133, \
+ HellasGrid-CA-2016 = 1.133, \
+ DigiCertGridTrustCAG2-Classic = 1.133, \
+ IHEP-2013 = 1.133, \
+ KEK = 1.133, \
+ HARICAOVTLSRSA = 1.133, \
+ UGRID-G2 = 1.133, \
+ eMudhra-TrustedRootCAC5 = 1.133, \
+ HARICAGEANTTLSECC1 = 1.133, \
+ SiGNET-CA = 1.133cilogon-silver = 1.133, \
+ GEANTeSciencePersonalECCCA4 = 1.133, \
+ GEANTTCSAuthenticationRSACA5 = 1.133, \
+ GEANTeSciencePersonalCA4 = 1.133, \
+ GEANTTCSAuthenticationECCCA4B = 1.133, \
+ GEANTTCSAuthenticationECCCA5 = 1.133, \
+ HPCI = 1.133, \
+ GEANTTCSAuthenticationRSACA4B = 1.133RCauth-Pilot-ICA-G1 = 1.133, \
+ cilogon-basic = 1.133
obsoletes = CyGrid-old, \
CNRS-DataGrid, \
CESNET-old, \
@@ -210,6 +214,14 @@
QuoVadis-Root-CA2G3, \
QuoVadis-Root-CA2, \
QuoVadis-Root-CA3G3, \
+ DigitalTrustPrivateRootCAG4, \
+ DigitalTrustIGTFCA, \
+ LIPCA, \
+ BYGCA, \
+ TSU-GE, \
+ HKU-CA-2, \
+ TERENA-eScience-SSL-CA-3, \
+ MARGI, \
SWITCHslcs, \
ncsa-gridshib-ca, \
SWITCHslcs2011, \
@@ -224,4 +236,5 @@
PSC-Myproxy-CA, \
TACC-MICS, \
NCSA-mics, \
+ TERENAeSciencePersonalCA3, \
CERN-LCG-IOTA-CA
\ Geen regeleindeteken (LF) aan einde van bestand
diff -Nru igtf-policy-bundle-1.128/policy-igtf-iota.info igtf-policy-bundle-1.133/policy-igtf-iota.info
--- igtf-policy-bundle-1.128/policy-igtf-iota.info 2024-02-28 09:00:17.000000000 +0100
+++ igtf-policy-bundle-1.133/policy-igtf-iota.info 2025-02-11 21:08:28.000000000 +0100
@@ -1,9 +1,9 @@
# @(#)policy-igtf-iota.info - IGTF iota authorities
-# Generated Wednesday, 28 Feb, 2024
+# Generated Tuesday, 11 Feb, 2025
alias = policy-igtf-iota
-version = 1.128
-requires = cilogon-basic = 1.128, \
- RCauth-Pilot-ICA-G1 = 1.128
-subjectdn = "/DC=org/DC=cilogon/C=US/O=CILogon/CN=CILogon Basic CA 1", \
- "/DC=eu/DC=rcauth/O=Certification Authorities/CN=Research and Collaboration Authentication Pilot G1 CA"
+version = 1.133
+requires = RCauth-Pilot-ICA-G1 = 1.133, \
+ cilogon-basic = 1.133
+subjectdn = "/DC=eu/DC=rcauth/O=Certification Authorities/CN=Research and Collaboration Authentication Pilot G1 CA", \
+ "/DC=org/DC=cilogon/C=US/O=CILogon/CN=CILogon Basic CA 1"
obsoletes = CERN-LCG-IOTA-CA
diff -Nru igtf-policy-bundle-1.128/policy-igtf-mics.info igtf-policy-bundle-1.133/policy-igtf-mics.info
--- igtf-policy-bundle-1.128/policy-igtf-mics.info 2024-02-28 09:00:17.000000000 +0100
+++ igtf-policy-bundle-1.133/policy-igtf-mics.info 2025-02-11 21:08:28.000000000 +0100
@@ -1,20 +1,23 @@
# @(#)policy-igtf-mics.info - IGTF mics authorities
-# Generated Wednesday, 28 Feb, 2024
+# Generated Tuesday, 11 Feb, 2025
alias = policy-igtf-mics
-version = 1.128
-requires = GEANTTCSAuthenticationECCCA4B = 1.128, \
- GEANTTCSAuthenticationRSACA4B = 1.128, \
- GEANTeSciencePersonalECCCA4 = 1.128, \
- TERENAeSciencePersonalCA3 = 1.128, \
- GEANTeSciencePersonalCA4 = 1.128, \
- cilogon-silver = 1.128, \
- HPCI = 1.128
-subjectdn = "/C=NL/O=GEANT Vereniging/CN=GEANT TCS Authentication ECC CA 4B", \
- "/C=NL/O=GEANT Vereniging/CN=GEANT TCS Authentication RSA CA 4B", \
+version = 1.133
+requires = cilogon-silver = 1.133, \
+ GEANTeSciencePersonalECCCA4 = 1.133, \
+ GEANTTCSAuthenticationRSACA5 = 1.133, \
+ GEANTeSciencePersonalCA4 = 1.133, \
+ GEANTTCSAuthenticationECCCA4B = 1.133, \
+ GEANTTCSAuthenticationECCCA5 = 1.133, \
+ HPCI = 1.133, \
+ GEANTTCSAuthenticationRSACA4B = 1.133
+subjectdn = "/DC=org/DC=cilogon/C=US/O=CILogon/CN=CILogon Silver CA 1", \
"/C=NL/O=GEANT Vereniging/CN=GEANT eScience Personal ECC CA 4", \
- "/C=NL/ST=Noord-Holland/L=Amsterdam/O=TERENA/CN=TERENA eScience Personal CA 3", \
+ "/C=NL/O=GEANT Vereniging/CN=GEANT TCS Authentication RSA CA 5", \
"/C=NL/O=GEANT Vereniging/CN=GEANT eScience Personal CA 4", \
- "/DC=org/DC=cilogon/C=US/O=CILogon/CN=CILogon Silver CA 1", \
- "/C=JP/O=NII/OU=HPCI/CN=HPCI CA"
+ "/C=NL/O=GEANT Vereniging/CN=GEANT TCS Authentication ECC CA 4B", \
+ "/C=NL/O=GEANT Vereniging/CN=GEANT TCS Authentication ECC CA 5", \
+ "/C=JP/O=NII/OU=HPCI/CN=HPCI CA", \
+ "/C=NL/O=GEANT Vereniging/CN=GEANT TCS Authentication RSA CA 4B"
obsoletes = TACC-MICS, \
- NCSA-mics
+ NCSA-mics, \
+ TERENAeSciencePersonalCA3
diff -Nru igtf-policy-bundle-1.128/policy-igtf-slcs.info igtf-policy-bundle-1.133/policy-igtf-slcs.info
--- igtf-policy-bundle-1.128/policy-igtf-slcs.info 2024-02-28 09:00:17.000000000 +0100
+++ igtf-policy-bundle-1.133/policy-igtf-slcs.info 2025-02-11 21:08:28.000000000 +0100
@@ -1,7 +1,7 @@
# @(#)policy-igtf-slcs.info - IGTF slcs authorities
-# Generated Wednesday, 28 Feb, 2024
+# Generated Tuesday, 11 Feb, 2025
alias = policy-igtf-slcs
-version = 1.128
+version = 1.133
requires =
subjectdn =
obsoletes = SWITCHslcs, \
diff -Nru igtf-policy-bundle-1.128/policy-igtf-unaccredited.info igtf-policy-bundle-1.133/policy-igtf-unaccredited.info
--- igtf-policy-bundle-1.128/policy-igtf-unaccredited.info 2024-02-28 09:00:17.000000000 +0100
+++ igtf-policy-bundle-1.133/policy-igtf-unaccredited.info 2025-02-11 21:08:28.000000000 +0100
@@ -1,10 +1,10 @@
# @(#)policy-igtf-unaccredited.info - IGTF unaccredited authorities
-# Generated Wednesday, 28 Feb, 2024
+# Generated Tuesday, 11 Feb, 2025
alias = policy-igtf-unaccredited
-version = 1.128
-requires = egee-ne-benelux-tutorial = 1.128, \
- UKPathfinder1 = 1.128, \
- nl-e-infra-zero = 1.128
-subjectdn = "/DC=org/DC=egee-ne/OU=Training Services/CN=Worthless EGEE Northern and Benelux Tutorial CA 1", \
- "/C=UK/O=eScience/OU=Authority/CN=Pathfinder1", \
- "/DC=nl/DC=e-infra/OU=Certification Authorities/CN=Worthless NL e-Infra Zero Tutorial CA 1"
+version = 1.133
+requires = nl-e-infra-zero = 1.133, \
+ egee-ne-benelux-tutorial = 1.133, \
+ UKPathfinder1 = 1.133
+subjectdn = "/DC=nl/DC=e-infra/OU=Certification Authorities/CN=Worthless NL e-Infra Zero Tutorial CA 1", \
+ "/DC=org/DC=egee-ne/OU=Training Services/CN=Worthless EGEE Northern and Benelux Tutorial CA 1", \
+ "/C=UK/O=eScience/OU=Authority/CN=Pathfinder1"
diff -Nru igtf-policy-bundle-1.128/README.txt igtf-policy-bundle-1.133/README.txt
--- igtf-policy-bundle-1.128/README.txt 2024-02-28 09:00:18.000000000 +0100
+++ igtf-policy-bundle-1.133/README.txt 2025-02-11 21:08:28.000000000 +0100
@@ -1,6 +1,6 @@
-IGTF Authority Trust Anchor Installation Bundle version 1.128
+IGTF Authority Trust Anchor Installation Bundle version 1.133
-----------------------------------------------------------------
-(release 1, issued on Wednesday, 28 Feb, 2024)
+(release 1, issued on Tuesday, 11 Feb, 2025)
This installation bundle contains the trust anchor sources for
all IGTF distributed authorities. It must be configured before
diff -Nru igtf-policy-bundle-1.128/src/accredited/AC-GRID-FR.info igtf-policy-bundle-1.133/src/accredited/AC-GRID-FR.info
--- igtf-policy-bundle-1.128/src/accredited/AC-GRID-FR.info 2024-02-28 08:59:36.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/AC-GRID-FR.info 2025-02-11 21:07:47.000000000 +0100
@@ -6,6 +6,6 @@
ca_url = http://cer.grid-fr.pncn.education.gouv.fr/ac-grid-fr.cer
crl_url = http://crl.grid-fr.pncn.education.gouv.fr/ac-grid-fr.crl
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = 38:9D:99:0D:6A:6E:6C:68:AC:B5:9F:F6:03:5D:38:1C:A7:40:29:60
subjectdn = "/C=FR/O=MENESR/OU=GRID-FR/CN=AC GRID-FR"
diff -Nru igtf-policy-bundle-1.128/src/accredited/AC-GRID-FR-Personnels.info igtf-policy-bundle-1.133/src/accredited/AC-GRID-FR-Personnels.info
--- igtf-policy-bundle-1.128/src/accredited/AC-GRID-FR-Personnels.info 2024-02-28 08:59:37.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/AC-GRID-FR-Personnels.info 2025-02-11 21:07:47.000000000 +0100
@@ -6,6 +6,6 @@
ca_url = http://cer.grid-fr.pncn.education.gouv.fr/ac-grid-fr-personnels.cer
crl_url = http://crl.grid-fr.pncn.education.gouv.fr/ac-grid-fr-personnels.crl
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = CA:F3:29:BD:77:67:9E:06:05:DB:1D:41:DF:7A:77:76:F1:78:2A:A9
subjectdn = "/C=FR/O=MENESR/OU=GRID-FR/CN=AC GRID-FR Personnels"
diff -Nru igtf-policy-bundle-1.128/src/accredited/AC-GRID-FR-Robots.info igtf-policy-bundle-1.133/src/accredited/AC-GRID-FR-Robots.info
--- igtf-policy-bundle-1.128/src/accredited/AC-GRID-FR-Robots.info 2024-02-28 08:59:37.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/AC-GRID-FR-Robots.info 2025-02-11 21:07:48.000000000 +0100
@@ -6,6 +6,6 @@
ca_url = http://cer.grid-fr.pncn.education.gouv.fr/ac-grid-fr-robots.cer
crl_url = http://crl.grid-fr.pncn.education.gouv.fr/ac-grid-fr-robots.crl
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = 4F:F6:0F:C9:6B:74:29:E5:47:2A:A5:6F:6D:16:0B:08:E1:A9:F3:B5
subjectdn = "/C=FR/O=MENESR/OU=GRID-FR/CN=AC GRID-FR Robots"
diff -Nru igtf-policy-bundle-1.128/src/accredited/AC-GRID-FR-Services.info igtf-policy-bundle-1.133/src/accredited/AC-GRID-FR-Services.info
--- igtf-policy-bundle-1.128/src/accredited/AC-GRID-FR-Services.info 2024-02-28 08:59:38.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/AC-GRID-FR-Services.info 2025-02-11 21:07:48.000000000 +0100
@@ -6,6 +6,6 @@
ca_url = http://cer.grid-fr.pncn.education.gouv.fr/ac-grid-fr-services.cer
crl_url = http://crl.grid-fr.pncn.education.gouv.fr/ac-grid-fr-services.crl
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = 98:7B:6B:9F:E1:64:75:02:F1:DD:5A:DB:29:74:A5:7F:9D:57:94:B5
subjectdn = "/C=FR/O=MENESR/OU=GRID-FR/CN=AC GRID-FR Services"
diff -Nru igtf-policy-bundle-1.128/src/accredited/ANSPGrid.info igtf-policy-bundle-1.133/src/accredited/ANSPGrid.info
--- igtf-policy-bundle-1.128/src/accredited/ANSPGrid.info 2024-02-28 08:59:39.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/ANSPGrid.info 2025-02-11 21:07:49.000000000 +0100
@@ -4,6 +4,6 @@
email = gridca@ansp.br
status = accredited:classic
url = http://gridca.ansp.br
-version = 1.128
+version = 1.133
sha1fp.0 = EF:7A:26:F8:95:46:0E:FD:88:D3:B1:1D:AA:13:D6:1B:C5:5D:11:6A
subjectdn = "/C=BR/O=ANSP/OU=ANSPGrid CA/CN=ANSPGrid CA"
diff -Nru igtf-policy-bundle-1.128/src/accredited/ArmeSFo.info igtf-policy-bundle-1.133/src/accredited/ArmeSFo.info
--- igtf-policy-bundle-1.128/src/accredited/ArmeSFo.info 2024-02-28 08:59:39.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/ArmeSFo.info 2025-02-11 21:07:50.000000000 +0100
@@ -7,6 +7,6 @@
crl_url = http://file.escience.am/crl.pem;https://escience.am/file/crl.pem
url = http://escience.am/
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = 35:F7:6C:1F:35:1D:8C:38:59:E9:BF:ED:9D:A6:72:C6:5A:51:97:80
subjectdn = "/C=AM/O=ArmeSFo/CN=ArmeSFo CA"
diff -Nru igtf-policy-bundle-1.128/src/accredited/ASGCCA-2007.info igtf-policy-bundle-1.133/src/accredited/ASGCCA-2007.info
--- igtf-policy-bundle-1.128/src/accredited/ASGCCA-2007.info 2024-02-28 08:59:39.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/ASGCCA-2007.info 2025-02-11 21:07:49.000000000 +0100
@@ -3,6 +3,6 @@
email = ca@lists.grid.sinica.edu.tw
status = accredited:classic
url = http://ca.grid.sinica.edu.tw/
-version = 1.128
+version = 1.133
sha1fp.0 = 0E:9E:58:74:61:4C:12:16:20:AC:34:07:CD:AD:E9:81:3C:08:61:95
subjectdn = "/C=TW/O=AS/CN=Academia Sinica Grid Computing Certification Authority Mercury"
diff -Nru igtf-policy-bundle-1.128/src/accredited/BG-ACAD-CA.info igtf-policy-bundle-1.133/src/accredited/BG-ACAD-CA.info
--- igtf-policy-bundle-1.128/src/accredited/BG-ACAD-CA.info 2024-02-28 08:59:40.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/BG-ACAD-CA.info 2025-02-11 21:07:50.000000000 +0100
@@ -5,6 +5,6 @@
crl_url = http://www.ca.acad.bg/crl/bg_acad_ca-crl.pem
email = operations@ca.acad.bg
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = 6E:CF:1B:7B:D4:5B:3A:00:A4:A1:07:9B:21:B2:97:D5:28:8B:8B:3A
subjectdn = "/DC=bg/DC=acad/CN=BG.ACAD CA"
diff -Nru igtf-policy-bundle-1.128/src/accredited/BYGCA.crl_url igtf-policy-bundle-1.133/src/accredited/BYGCA.crl_url
--- igtf-policy-bundle-1.128/src/accredited/BYGCA.crl_url 2024-02-28 08:59:40.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/BYGCA.crl_url 1970-01-01 01:00:00.000000000 +0100
@@ -1 +0,0 @@
-http://ca.grid.by/bygca-crl.crl
diff -Nru igtf-policy-bundle-1.128/src/accredited/BYGCA.info igtf-policy-bundle-1.133/src/accredited/BYGCA.info
--- igtf-policy-bundle-1.128/src/accredited/BYGCA.info 2024-02-28 08:59:40.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/BYGCA.info 1970-01-01 01:00:00.000000000 +0100
@@ -1,13 +0,0 @@
-# BYGCA - Belarusian Grid CA (UIIP NASB)
-# @(#)$Id: 709bed08.info,v 1.4 2009/10/24 20:55:15 pmacvsdg Exp $
-#
-alias = BYGCA
-ca_url = http://ca.grid.by/bygca-cacert.pem
-crl_url = http://ca.grid.by/bygca-crl.crl
-policy_url = http://ca.grid.by/cpcps.html
-email = ca@newman.bas-net.by
-status = accredited:classic
-url = http://ca.grid.by/
-version = 1.128
-sha1fp.0 = 33:D6:1F:E9:AF:6F:98:D4:89:27:C1:AA:88:0E:8F:4B:66:0B:A2:72
-subjectdn = "/DC=by/DC=grid/O=uiip.bas-net.by/CN=Belarusian Grid Certification Authority"
diff -Nru igtf-policy-bundle-1.128/src/accredited/BYGCA.namespaces igtf-policy-bundle-1.133/src/accredited/BYGCA.namespaces
--- igtf-policy-bundle-1.128/src/accredited/BYGCA.namespaces 2024-02-28 08:59:40.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/BYGCA.namespaces 1970-01-01 01:00:00.000000000 +0100
@@ -1,13 +0,0 @@
-##############################################################################
-#NAMESPACES-VERSION: 1.0
-#
-# @(#)709bed08.namespaces
-# CA alias : BYGCA
-# subord_of:
-# subjectDN: /DC=by/DC=grid/O=uiip.bas-net.by/CN=Belarusian Grid Certification Authority
-# hash : 709bed08
-# (generated automatically from 709bed08.signing_policy)
-#
-TO Issuer "/DC=by/DC=grid/O=uiip.bas-net.by/CN=Belarusian Grid Certification Authority" \
- PERMIT Subject "/DC=by/DC=grid/.*"
-
diff -Nru igtf-policy-bundle-1.128/src/accredited/BYGCA.pem igtf-policy-bundle-1.133/src/accredited/BYGCA.pem
--- igtf-policy-bundle-1.128/src/accredited/BYGCA.pem 2024-02-28 08:59:40.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/BYGCA.pem 1970-01-01 01:00:00.000000000 +0100
@@ -1,23 +0,0 @@
------BEGIN CERTIFICATE-----
-MIID0TCCArmgAwIBAgIISoS33SnI0f0wDQYJKoZIhvcNAQEFBQAwdjESMBAGCgmS
-JomT8ixkARkWAmJ5MRQwEgYKCZImiZPyLGQBGRYEZ3JpZDEYMBYGA1UEChMPdWlp
-cC5iYXMtbmV0LmJ5MTAwLgYDVQQDEydCZWxhcnVzaWFuIEdyaWQgQ2VydGlmaWNh
-dGlvbiBBdXRob3JpdHkwHhcNMDgxMDE0MTk1NTQzWhcNMjgxMDE0MTk1NTQzWjB2
-MRIwEAYKCZImiZPyLGQBGRYCYnkxFDASBgoJkiaJk/IsZAEZFgRncmlkMRgwFgYD
-VQQKEw91aWlwLmJhcy1uZXQuYnkxMDAuBgNVBAMTJ0JlbGFydXNpYW4gR3JpZCBD
-ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
-AQoCggEBAJ5yZNcyRx3U+DS0wwlHcfqwyQNbOxCr2wPJf3iGelRQzdeZlajfvw4e
-cvojiMLcRZdj4zfuUInMrpkDycC/NeJwzb3E5h3enLxo/oVs7eGRsF7LfMidMJUl
-2BcV4wwswfE+Va2YP7UyBwv5dNqxpNWpx4tEpCYF6AjzOYmP1Lcvw+HQPZB6QlzV
-/N0/bAsGlkV32DKM0WTOXhkafStbwqfeo070rOm6GDOmtayCXIJGQkUd3RI4wtQ5
-CTsBsfsbJ/ou/CsIVu62kac7GXc2//994/H6ggNRTgDpfXVDVTal6qYWC55ePH/1
-e18/dNYaQwg3OME8uM0KCJaMH/uNUqkCAwEAAaNjMGEwHQYDVR0OBBYEFC8xLMGF
-U0dk22GwClcNLawTEP97MA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAULzEs
-wYVTR2TbYbAKVw0trBMQ/3swDgYDVR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEBBQUA
-A4IBAQAQZUPUVyB65WHyUrq2Eu1tF0Wilyt5DAcxUWCA06P9L3pweHqWh1k3mlOz
-AgcZU0PkZoAo1gSd7XLpDZuwkJ3ae0rnkYuNCyWvgwk6+qRowq3BUt7gUWKaoxCq
-kqAS434HZfRP7Szmdscu4khm1Ijf9U0GGchWrcag65pR/LCokTh7VEk0pIk+aVzH
-t1sy9EeSie0g9FPb9yPmg9+/ZMtW942dmrxP0BrkeYQdMJK7/ukwJD8IInhNdkTm
-it2A7R/beT9JoYyE9BQmbJBr2n8YyRaELShDq1WMbhDbKG5Eva3MjlxlMukDfkgR
-ZWN46ObYT+60taE6HzjT0K0NqL0T
------END CERTIFICATE-----
diff -Nru igtf-policy-bundle-1.128/src/accredited/BYGCA.signing_policy igtf-policy-bundle-1.133/src/accredited/BYGCA.signing_policy
--- igtf-policy-bundle-1.128/src/accredited/BYGCA.signing_policy 2024-02-28 08:59:40.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/BYGCA.signing_policy 1970-01-01 01:00:00.000000000 +0100
@@ -1,6 +0,0 @@
-# EACL - Belarussian Grid CA 709bed08
-# @(#)$Id$
-#
- access_id_CA X509 '/DC=by/DC=grid/O=uiip.bas-net.by/CN=Belarusian Grid Certification Authority'
- pos_rights globus CA:sign
- cond_subjects globus '"/DC=by/DC=grid/O=uiip.bas-net.by/CN=Belarusian Grid Certification Authority" "/DC=by/DC=grid/*"'
diff -Nru igtf-policy-bundle-1.128/src/accredited/CERN-GridCA.info igtf-policy-bundle-1.133/src/accredited/CERN-GridCA.info
--- igtf-policy-bundle-1.128/src/accredited/CERN-GridCA.info 2024-02-28 08:59:41.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/CERN-GridCA.info 2025-02-11 21:07:50.000000000 +0100
@@ -7,6 +7,6 @@
email = cern-ca-managers@cern.ch
requires = CERN-Root-2
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = 71:A1:FC:1A:77:68:17:B9:5C:84:89:3A:28:2D:66:70:DC:93:83:CD
subjectdn = "/DC=ch/DC=cern/CN=CERN Grid Certification Authority"
diff -Nru igtf-policy-bundle-1.128/src/accredited/CERN-Root-2.info igtf-policy-bundle-1.133/src/accredited/CERN-Root-2.info
--- igtf-policy-bundle-1.128/src/accredited/CERN-Root-2.info 2024-02-28 08:59:41.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/CERN-Root-2.info 2025-02-11 21:07:51.000000000 +0100
@@ -6,6 +6,6 @@
url = http://www.cern.ch/ca
email = cern-ca-managers@cern.ch
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = 57:6E:90:75:DD:66:92:8B:F2:5B:D9:52:D6:37:EA:AD:80:84:CC:9F
subjectdn = "/C=ch/O=CERN/CN=CERN Root Certification Authority 2"
diff -Nru igtf-policy-bundle-1.128/src/accredited/CESNET-CA-4.info igtf-policy-bundle-1.133/src/accredited/CESNET-CA-4.info
--- igtf-policy-bundle-1.128/src/accredited/CESNET-CA-4.info 2024-02-28 08:59:42.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/CESNET-CA-4.info 2025-02-11 21:07:51.000000000 +0100
@@ -10,6 +10,6 @@
requires = CESNET-CA-Root
email = ca@cesnet.cz
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = 7B:2F:BA:0C:D9:3F:EE:D2:B0:69:1F:53:E7:EB:AD:05:A7:23:FC:74
subjectdn = "/DC=cz/DC=cesnet-ca/O=CESNET CA/CN=CESNET CA 4"
diff -Nru igtf-policy-bundle-1.128/src/accredited/CESNET-CA-Root.info igtf-policy-bundle-1.133/src/accredited/CESNET-CA-Root.info
--- igtf-policy-bundle-1.128/src/accredited/CESNET-CA-Root.info 2024-02-28 08:59:42.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/CESNET-CA-Root.info 2025-02-11 21:07:52.000000000 +0100
@@ -9,6 +9,6 @@
policy_url = http://www.cesnet.cz/pki/en/ch-cp-cps.html
email = ca@cesnet.cz
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = E7:84:74:90:F7:11:43:FC:CE:F6:F6:5A:30:DA:1F:23:9E:0F:D7:BA
subjectdn = "/DC=cz/DC=cesnet-ca/O=CESNET CA/CN=CESNET CA Root"
diff -Nru igtf-policy-bundle-1.128/src/accredited/cilogon-basic.info igtf-policy-bundle-1.133/src/accredited/cilogon-basic.info
--- igtf-policy-bundle-1.128/src/accredited/cilogon-basic.info 2024-02-28 09:00:11.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/cilogon-basic.info 2025-02-11 21:08:21.000000000 +0100
@@ -4,6 +4,6 @@
crl_url = http://crl-cilogon.ncsa-security.net/cilogon-basic.crl;http://crl.cilogon.org/cilogon-basic.crl
email = ca@cilogon.org
status = accredited:iota
-version = 1.128
+version = 1.133
sha1fp.0 = 96:D8:FB:A6:F8:03:DA:A8:E7:70:DB:BA:5C:6A:2F:58:93:D8:60:28
subjectdn = "/DC=org/DC=cilogon/C=US/O=CILogon/CN=CILogon Basic CA 1"
diff -Nru igtf-policy-bundle-1.128/src/accredited/cilogon-silver.info igtf-policy-bundle-1.133/src/accredited/cilogon-silver.info
--- igtf-policy-bundle-1.128/src/accredited/cilogon-silver.info 2024-02-28 09:00:12.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/cilogon-silver.info 2025-02-11 21:08:22.000000000 +0100
@@ -4,6 +4,6 @@
crl_url = http://crl-cilogon.ncsa-security.net/cilogon-silver.crl;http://crl.cilogon.org/cilogon-silver.crl
email = ca@cilogon.org
status = accredited:mics
-version = 1.128
+version = 1.133
sha1fp.0 = 4A:54:1C:24:BE:2F:8C:B1:F3:21:E9:3E:2D:7D:A8:87:5F:AB:13:D6
subjectdn = "/DC=org/DC=cilogon/C=US/O=CILogon/CN=CILogon Silver CA 1"
diff -Nru igtf-policy-bundle-1.128/src/accredited/DCAROOT-G1.info igtf-policy-bundle-1.133/src/accredited/DCAROOT-G1.info
--- igtf-policy-bundle-1.128/src/accredited/DCAROOT-G1.info 2024-02-28 08:59:43.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/DCAROOT-G1.info 2025-02-11 21:07:52.000000000 +0100
@@ -9,6 +9,6 @@
email = ca@dutchgrid.nl
status = accredited:classic
url = https://ca.dutchgrid.nl/dcaroot/
-version = 1.128
+version = 1.133
sha1fp.0 = 3C:40:ED:01:2A:05:BB:81:25:CA:05:09:A4:90:08:B3:5D:AC:78:8F
subjectdn = "/DC=nl/DC=dutchgrid/O=Certification Authorities/CN=DCA Root G1 CA"
diff -Nru igtf-policy-bundle-1.128/src/accredited/DFN-GridGermany-Root.info igtf-policy-bundle-1.133/src/accredited/DFN-GridGermany-Root.info
--- igtf-policy-bundle-1.128/src/accredited/DFN-GridGermany-Root.info 2024-02-28 08:59:43.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/DFN-GridGermany-Root.info 2025-02-11 21:07:53.000000000 +0100
@@ -8,6 +8,6 @@
email = dfnpca@dfn-cert.de
status = accredited:classic
url = https://www.pki.dfn.de/grid/
-version = 1.128
+version = 1.133
sha1fp.0 = 30:AB:8B:7C:DA:20:93:E5:59:CE:74:0D:B1:2A:82:38:C8:55:0B:D4
subjectdn = "/C=DE/O=DFN-Verein/OU=DFN-PKI/CN=DFN-Verein PCA Grid - G01"
diff -Nru igtf-policy-bundle-1.128/src/accredited/DigiCert-Assured-ID-Grid-Client-RSA2048-SHA256-2022-CA1.info igtf-policy-bundle-1.133/src/accredited/DigiCert-Assured-ID-Grid-Client-RSA2048-SHA256-2022-CA1.info
--- igtf-policy-bundle-1.128/src/accredited/DigiCert-Assured-ID-Grid-Client-RSA2048-SHA256-2022-CA1.info 2024-02-28 08:59:44.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/DigiCert-Assured-ID-Grid-Client-RSA2048-SHA256-2022-CA1.info 2025-02-11 21:07:54.000000000 +0100
@@ -8,6 +8,6 @@
status = accredited:classic
url = http://www.digicert-grid.com/
requires = DigiCertAssuredIDRootCA-Root
-version = 1.128
+version = 1.133
sha1fp.0 = 95:78:D8:36:3F:CF:2A:BC:58:57:D4:B4:4B:9E:C4:16:0D:95:03:C0
subjectdn = "/C=US/O=DigiCert, Inc./CN=DigiCert Assured ID Grid Client RSA2048 SHA256 2022 CA1"
diff -Nru igtf-policy-bundle-1.128/src/accredited/DigiCert-Assured-ID-Grid-TLS-RSA2048-SHA256-2022-CA1.info igtf-policy-bundle-1.133/src/accredited/DigiCert-Assured-ID-Grid-TLS-RSA2048-SHA256-2022-CA1.info
--- igtf-policy-bundle-1.128/src/accredited/DigiCert-Assured-ID-Grid-TLS-RSA2048-SHA256-2022-CA1.info 2024-02-28 08:59:45.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/DigiCert-Assured-ID-Grid-TLS-RSA2048-SHA256-2022-CA1.info 2025-02-11 21:07:54.000000000 +0100
@@ -8,6 +8,6 @@
status = accredited:classic
url = http://www.digicert-grid.com/
requires = DigiCertAssuredIDRootCA-Root
-version = 1.128
+version = 1.133
sha1fp.0 = DD:E0:C4:B0:5A:36:B1:09:F1:44:ED:51:C5:90:B6:BF:67:E3:05:70
subjectdn = "/C=US/O=DigiCert, Inc./CN=DigiCert Assured ID Grid TLS RSA2048 SHA256 2022 CA1"
diff -Nru igtf-policy-bundle-1.128/src/accredited/DigiCertAssuredIDRootCA-Root.info igtf-policy-bundle-1.133/src/accredited/DigiCertAssuredIDRootCA-Root.info
--- igtf-policy-bundle-1.128/src/accredited/DigiCertAssuredIDRootCA-Root.info 2024-02-28 08:59:45.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/DigiCertAssuredIDRootCA-Root.info 2025-02-11 21:07:55.000000000 +0100
@@ -7,6 +7,6 @@
email = prodseccompliance@digicert.com
status = accredited:classic
url = http://www.digicert-grid.com/
-version = 1.128
+version = 1.133
sha1fp.0 = 05:63:B8:63:0D:62:D7:5A:BB:C8:AB:1E:4B:DF:B5:A8:99:B2:4D:43
subjectdn = "/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Assured ID Root CA"
diff -Nru igtf-policy-bundle-1.128/src/accredited/DigiCertGridCA-1G2-Classic-2015.info igtf-policy-bundle-1.133/src/accredited/DigiCertGridCA-1G2-Classic-2015.info
--- igtf-policy-bundle-1.128/src/accredited/DigiCertGridCA-1G2-Classic-2015.info 2024-02-28 08:59:46.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/DigiCertGridCA-1G2-Classic-2015.info 2025-02-11 21:07:55.000000000 +0100
@@ -8,6 +8,6 @@
status = accredited:classic
url = http://www.digicert-grid.com/
requires = DigiCertGridRootCA-Root
-version = 1.128
+version = 1.133
sha1fp.0 = 62:2C:7B:96:DA:67:46:CD:B5:C9:35:B8:FE:78:3B:77:35:16:FC:E3
subjectdn = "/DC=com/DC=DigiCert-Grid/O=DigiCert Grid/CN=DigiCert Grid CA-1 G2"
diff -Nru igtf-policy-bundle-1.128/src/accredited/DigiCertGridRootCA-Root.info igtf-policy-bundle-1.133/src/accredited/DigiCertGridRootCA-Root.info
--- igtf-policy-bundle-1.128/src/accredited/DigiCertGridRootCA-Root.info 2024-02-28 08:59:46.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/DigiCertGridRootCA-Root.info 2025-02-11 21:07:55.000000000 +0100
@@ -7,6 +7,6 @@
email = prodseccompliance@digicert.com
status = accredited:classic
url = http://www.digicert-grid.com/
-version = 1.128
+version = 1.133
sha1fp.0 = 02:FB:FF:2E:77:A9:CE:9C:FA:A9:3F:F0:83:0E:3E:80:6F:D0:6F:8D
subjectdn = "/DC=com/DC=DigiCert-Grid/O=DigiCert Grid/CN=DigiCert Grid Root CA"
diff -Nru igtf-policy-bundle-1.128/src/accredited/DigiCertGridTrustCAG2-Classic.info igtf-policy-bundle-1.133/src/accredited/DigiCertGridTrustCAG2-Classic.info
--- igtf-policy-bundle-1.128/src/accredited/DigiCertGridTrustCAG2-Classic.info 2024-02-28 08:59:47.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/DigiCertGridTrustCAG2-Classic.info 2025-02-11 21:07:56.000000000 +0100
@@ -8,6 +8,6 @@
status = accredited:classic
url = http://www.DigiCert-Grid.com/
requires = DigiCertAssuredIDRootCA-Root
-version = 1.128
+version = 1.133
sha1fp.0 = 06:01:40:42:57:78:0C:9F:E6:B3:D9:03:72:80:3F:38:EE:3A:60:6A
subjectdn = "/C=US/O=DigiCert Grid/OU=www.digicert.com/CN=DigiCert Grid Trust CA G2"
diff -Nru igtf-policy-bundle-1.128/src/accredited/DigitalTrustIGTFCA.crl_url igtf-policy-bundle-1.133/src/accredited/DigitalTrustIGTFCA.crl_url
--- igtf-policy-bundle-1.128/src/accredited/DigitalTrustIGTFCA.crl_url 2024-02-28 08:59:47.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/DigitalTrustIGTFCA.crl_url 1970-01-01 01:00:00.000000000 +0100
@@ -1,3 +0,0 @@
-http://dl.igtf.net/mirror/DigitalTrust/dtigtfca.crl
-http://crl1.digitaltrust.ae/dtigtfca.crl
-http://crl2.digitaltrust.ae/dtigtfca.crl
diff -Nru igtf-policy-bundle-1.128/src/accredited/DigitalTrustIGTFCA.info igtf-policy-bundle-1.133/src/accredited/DigitalTrustIGTFCA.info
--- igtf-policy-bundle-1.128/src/accredited/DigitalTrustIGTFCA.info 2024-02-28 08:59:47.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/DigitalTrustIGTFCA.info 1970-01-01 01:00:00.000000000 +0100
@@ -1,13 +0,0 @@
-#
-# Information for /C=AE/O=DigitalTrust L.L.C./CN=DigitalTrust IGTF CA
-#
-alias = DigitalTrustIGTFCA
-ca_url = http://cacerts.digitaltrust.ae/dtigtfca.crt
-crl_url = http://dl.igtf.net/mirror/DigitalTrust/dtigtfca.crl;http://crl1.digitaltrust.ae/dtigtfca.crl;http://crl2.digitaltrust.ae/dtigtfca.crl
-email = ca-admins@digitaltrust.ae
-status = accredited:classic
-url = https://ca.digitaltrust.ae/Grid/
-requires = DigitalTrustPrivateRootCAG4
-version = 1.128
-sha1fp.0 = 5F:27:FB:D9:B4:EA:82:66:71:59:CE:52:A3:7B:64:D5:65:6B:9E:18
-subjectdn = "/C=AE/O=DigitalTrust L.L.C./CN=DigitalTrust IGTF CA"
diff -Nru igtf-policy-bundle-1.128/src/accredited/DigitalTrustIGTFCA.namespaces igtf-policy-bundle-1.133/src/accredited/DigitalTrustIGTFCA.namespaces
--- igtf-policy-bundle-1.128/src/accredited/DigitalTrustIGTFCA.namespaces 2024-02-28 08:59:47.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/DigitalTrustIGTFCA.namespaces 1970-01-01 01:00:00.000000000 +0100
@@ -1,17 +0,0 @@
-##############################################################################
-#NAMESPACES-VERSION: 1.0
-#
-# @(#)7f23888f.namespaces
-# CA alias : DigitalTrustIGTFCA
-# subord_of: DigitalTrustPrivateRootCAG4
-# subjectDN: /C=AE/O=DigitalTrust L.L.C./CN=DigitalTrust IGTF CA
-# hash : 7f23888f
-
-TO Issuer "/C=AE/O=DigitalTrust L.L.C./CN=DigitalTrust IGTF CA" \
- PERMIT Subject "/C=AE/O=DigitalTrustGrid/.*"
-
-TO Issuer "/C=AE/O=DigitalTrust L.L.C./CN=DigitalTrust IGTF CA" \
- PERMIT Subject "/DC=com/DC=DigitalTrustGrid/.*"
-
-TO Issuer "/C=AE/O=DigitalTrust L.L.C./CN=DigitalTrust IGTF CA" \
- PERMIT Subject "/DC=org/DC=DigitalTrustGrid/.*"
\ Geen regeleindeteken (LF) aan einde van bestand
diff -Nru igtf-policy-bundle-1.128/src/accredited/DigitalTrustIGTFCA.pem igtf-policy-bundle-1.133/src/accredited/DigitalTrustIGTFCA.pem
--- igtf-policy-bundle-1.128/src/accredited/DigitalTrustIGTFCA.pem 2024-02-28 08:59:47.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/DigitalTrustIGTFCA.pem 1970-01-01 01:00:00.000000000 +0100
@@ -1,42 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIHXTCCBUWgAwIBAgIQFGJp3f5WEUY+YFTUPQ5SMDANBgkqhkiG9w0BAQwFADBV
-MQswCQYDVQQGEwJBRTEcMBoGA1UECgwTRGlnaXRhbFRydXN0IEwuTC5DLjEoMCYG
-A1UEAwwfRGlnaXRhbFRydXN0IFByaXZhdGUgUm9vdCBDQSBHNDAeFw0xOTA4MDEx
-MTE1MjFaFw0yOTA4MDExMTE1MjFaMEoxCzAJBgNVBAYTAkFFMRwwGgYDVQQKDBNE
-aWdpdGFsVHJ1c3QgTC5MLkMuMR0wGwYDVQQDDBREaWdpdGFsVHJ1c3QgSUdURiBD
-QTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMUNKNMhu/WLToGijwFV
-CL5CrIc6lghnQ9TUvqBXL9ajCaw8vpeVpDJSPiXRznC4jTL/KbT03VgoWc4C5xqR
-pb5xe24QJA/zAVD/gKWU/RQ7vJW6QOqGwNjmtPXYbJ+0Xl2aOhJyvKJ5m33bE8tN
-LVSA4TSAzhgBkwJylPXACDT4CkqTFoMC15G9nFUWTstgXlt1jkKIQL2+CZ43HmOv
-W1taLnCHjqb0Zhp6k6hhEwX02luO0MW9/Rgpf3pg/X186ATeWhtsHwf4B38HfkTq
-Llj0RKI4MHdq95QHQb84w29/8ZSbyO2CS0RzRbrmjZ1y/pAMFOfCDDFEiGLM9qzs
-LJ47HaKEtMLamtW8dZzgPyRSVoeIavWCgNNKUJKVHuxl7IXH3Pvt5lTQo6J0AZU0
-7AkTcmzGMXPWT87CIImhfxPGT20aBGJAbyihHEgR0rn20TLBsg4fKBG9ZtiRrJyP
-FS1GjcA5QBLg8yYGlZqvtg8XuRSkL22tKnztmeLUEgr57+RbTs+eTr3vO4+EY7n4
-aRbfqM9BrABouSNbtV1tVkFCOvgiMYmhGNiKQzp1iW5e8/6pOp7sLt776YdlqI4s
-OetYywztnTQRaL5kzMYr2Kv6U1H1bc+bcE0dprifNKJIvBgQtMpfRRU2NK8xGx6s
-0CuAU0aRaHw0J0I/TeGLh0PvAgMBAAGjggIyMIICLjCBgwYIKwYBBQUHAQEEdzB1
-MEoGCCsGAQUFBzAChj5odHRwOi8vY2FjZXJ0cy5kaWdpdGFsdHJ1c3QuYWUvRGln
-aXRhbFRydXN0UHJpdmF0ZVJvb3RDQUc0LmNydDAnBggrBgEFBQcwAYYbaHR0cDov
-L29jc3AuZGlnaXRhbHRydXN0LmFlMB0GA1UdDgQWBBTHJ4EYLYNSJ/VvSkl2Rvqd
-TTtxcTASBgNVHRMBAf8ECDAGAQH/AgEAMB8GA1UdIwQYMBaAFF3Or0/znFzMt8M8
-Xkaopny5asatMG8GA1UdIARoMGYwOgYKYIYQAgIpAgACATAsMCoGCCsGAQUFBwIB
-Fh5odHRwczovL2NhLmRpZ2l0YWx0cnVzdC5hZS9DUFMwDAYKYIYQAgIpAgIDATAM
-BgpghhACAikCAgMCMAwGCmCGEAICKQICAwMwgZEGA1UdHwSBiTCBhjBBoD+gPYY7
-aHR0cDovL2NybDEuZGlnaXRhbHRydXN0LmFlL0RpZ2l0YWxUcnVzdFByaXZhdGVS
-b290Q0FHNC5jcmwwQaA/oD2GO2h0dHA6Ly9jcmwyLmRpZ2l0YWx0cnVzdC5hZS9E
-aWdpdGFsVHJ1c3RQcml2YXRlUm9vdENBRzQuY3JsMA4GA1UdDwEB/wQEAwIBhjA9
-BgNVHSUENjA0BggrBgEFBQcDAgYIKwYBBQUHAwQGCisGAQQBgjcKAwwGCCsGAQUF
-BwMJBggrBgEFBQcDATANBgkqhkiG9w0BAQwFAAOCAgEAyQ+jQDNynqVTFwC+XhLw
-k/OU+TMXVCN9NzGwIF5xHtq1VBk7gVMXal03b5GfcwAYkF7HVfZQzNVFZzFX+QXI
-ZhNv3/s9LIBL1ihW1DFGVifTzZO679Z5Qaq1w/Ib+jBGcwmnpQ3O6okJ8CdnF3Em
-357NY3hOtP+5DhlAUbARxavJrjPRuuLS+pkyezl75AHfNK9VI+U1qB4+JrCSarrm
-LOWX06jETGRSqpaB5Hszqtd9cn6DLjggc2pm0WkCO893ezWLpus6eytAIbPjO9Ln
-bR/cNC2tEVmncIsk4mSiAVG1XTFGzWCd8HGWT/9oBSb8c7igk6VvgPmGHZFHN72P
-xGmW38LvSSA+AvcQrLhUDpeL5C7JXm2VHUkPpkqnK571Oqu+kBUKCfOk8VJSogr3
-4iwRakRukDlEJ5htF9HQiepmF2DZEKfRCr3QXV5uxPBBuVpWFitOiQj3cBZg6i7V
-1Uxn851i1yYoWSlSA3bsFauvie3BdZ5nX0wWzgvbpcxzEPPFLbjsZeN3cMWpWAdl
-APQzWtxVnqwNuFG79lSYqnzlZBx1d/6veZi4fx/GL6//7G7Rdyavg4xDv/uO4ur0
-AkxpFR9V6+x3Cu/9OJ01FNdtynDbMPzF9YJouDuret8Cq4UpNkxHWixJeigWKOgv
-qCTll3+0Fd/nv+gH1Vs8hXo=
------END CERTIFICATE-----
diff -Nru igtf-policy-bundle-1.128/src/accredited/DigitalTrustIGTFCA.signing_policy igtf-policy-bundle-1.133/src/accredited/DigitalTrustIGTFCA.signing_policy
--- igtf-policy-bundle-1.128/src/accredited/DigitalTrustIGTFCA.signing_policy 2024-02-28 08:59:47.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/DigitalTrustIGTFCA.signing_policy 1970-01-01 01:00:00.000000000 +0100
@@ -1,4 +0,0 @@
-# DigitalTrust IGTF CA CA Signing Policy (Client, Robot and Host Private Trust)
-access_id_CA X509 '/C=AE/O=DigitalTrust L.L.C./CN=DigitalTrust IGTF CA'
-pos_rights globus CA:sign
-cond_subjects globus '"/C=AE/O=DigitalTrust L.L.C./CN=DigitalTrust IGTF CA" "/C=AE/O=DigitalTrustGrid/*" "/DC=com/DC=DigitalTrustGrid/*" "/DC=org/DC=DigitalTrustGrid/*"'
diff -Nru igtf-policy-bundle-1.128/src/accredited/DigitalTrustPrivateRootCAG4.crl_url igtf-policy-bundle-1.133/src/accredited/DigitalTrustPrivateRootCAG4.crl_url
--- igtf-policy-bundle-1.128/src/accredited/DigitalTrustPrivateRootCAG4.crl_url 2024-02-28 08:59:48.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/DigitalTrustPrivateRootCAG4.crl_url 1970-01-01 01:00:00.000000000 +0100
@@ -1,3 +0,0 @@
-http://dl.igtf.net/mirror/DigitalTrust/DigitalTrustPrivateRootCAG4.crl
-http://crl1.digitaltrust.ae/DigitalTrustPrivateRootCAG4.crl
-http://crl2.digitaltrust.ae/DigitalTrustPrivateRootCAG4.crl
diff -Nru igtf-policy-bundle-1.128/src/accredited/DigitalTrustPrivateRootCAG4.info igtf-policy-bundle-1.133/src/accredited/DigitalTrustPrivateRootCAG4.info
--- igtf-policy-bundle-1.128/src/accredited/DigitalTrustPrivateRootCAG4.info 2024-02-28 08:59:48.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/DigitalTrustPrivateRootCAG4.info 1970-01-01 01:00:00.000000000 +0100
@@ -1,12 +0,0 @@
-#
-# Information for /C=AE/O=DigitalTrust L.L.C./CN=DigitalTrust Private Root CA G4
-#
-alias = DigitalTrustPrivateRootCAG4
-ca_url = http://cacerts.digitaltrust.ae/DigitalTrustPrivateRootCAG4.crt
-crl_url = http://dl.igtf.net/mirror/DigitalTrust/DigitalTrustPrivateRootCAG4.crl;http://crl1.digitaltrust.ae/DigitalTrustPrivateRootCAG4.crl;http://crl2.digitaltrust.ae/DigitalTrustPrivateRootCAG4.crl
-email = ca-admins@digitaltrust.ae
-status = accredited:classic
-url = https://ca.digitaltrust.ae/Grid/
-version = 1.128
-sha1fp.0 = B8:EF:C0:F6:9D:A3:1A:BF:55:17:D1:0B:3E:A8:5C:05:A2:6F:26:8C
-subjectdn = "/C=AE/O=DigitalTrust L.L.C./CN=DigitalTrust Private Root CA G4"
diff -Nru igtf-policy-bundle-1.128/src/accredited/DigitalTrustPrivateRootCAG4.namespaces igtf-policy-bundle-1.133/src/accredited/DigitalTrustPrivateRootCAG4.namespaces
--- igtf-policy-bundle-1.128/src/accredited/DigitalTrustPrivateRootCAG4.namespaces 2024-02-28 08:59:48.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/DigitalTrustPrivateRootCAG4.namespaces 1970-01-01 01:00:00.000000000 +0100
@@ -1,11 +0,0 @@
-##############################################################################
-#NAMESPACES-VERSION: 1.0
-#
-# @(#)d58bb4bc.namespaces
-# CA alias : DigitalTrustPrivateRootCAG4
-# subord_of:
-# subjectDN: /C=AE/O=DigitalTrust L.L.C./CN=DigitalTrust Private Root CA G4
-# hash : d58bb4bc
-
-TO Issuer "/C=AE/O=DigitalTrust L.L.C./CN=DigitalTrust Private Root CA G4" \
- PERMIT Subject "/C=AE/O=DigitalTrust L.L.C./CN=DigitalTrust IGTF CA"
\ Geen regeleindeteken (LF) aan einde van bestand
diff -Nru igtf-policy-bundle-1.128/src/accredited/DigitalTrustPrivateRootCAG4.pem igtf-policy-bundle-1.133/src/accredited/DigitalTrustPrivateRootCAG4.pem
--- igtf-policy-bundle-1.128/src/accredited/DigitalTrustPrivateRootCAG4.pem 2024-02-28 08:59:48.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/DigitalTrustPrivateRootCAG4.pem 1970-01-01 01:00:00.000000000 +0100
@@ -1,32 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIFdjCCA16gAwIBAgIQBbDKpfnvTAhy5OCdMmrePjANBgkqhkiG9w0BAQwFADBV
-MQswCQYDVQQGEwJBRTEcMBoGA1UECgwTRGlnaXRhbFRydXN0IEwuTC5DLjEoMCYG
-A1UEAwwfRGlnaXRhbFRydXN0IFByaXZhdGUgUm9vdCBDQSBHNDAeFw0xOTA4MDEx
-MTAxMjdaFw0zOTA4MDExMTAxMjdaMFUxCzAJBgNVBAYTAkFFMRwwGgYDVQQKDBNE
-aWdpdGFsVHJ1c3QgTC5MLkMuMSgwJgYDVQQDDB9EaWdpdGFsVHJ1c3QgUHJpdmF0
-ZSBSb290IENBIEc0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1csH
-k8ftnstbTCzWdPnmYiSDE10T3rBVV/lRlkzYW0VyxDDbea5ZCpTj09ZX5D7+ltRf
-uKQUyZPnsLHgL/1MG/fj3tB4VXxoXK1ZgpAa/MUY2V1TSPX9QdGFcOiUjQhjYXpX
-frZPz70NmnnHSZLPJab/GxozyiFXXXIt1f8p7/5GPUIsdtMHgm2xr4CxGNRObr8t
-16aBHTATSfTdaiAhRJyold3Kr+TNsy5BLvioxvx6pNFeI7aQclh4WPthnjx6HS+8
-fzLc8GK0vJBz/yxUDZQOLqz4LqikqlLkBSAAGI39XzmLTdB4xRFpbPJ4Zp800ReD
-8GJLImN/RoOTv1K/uKTTHF6riFZ2rxdP60i9vVO5FxrdYJJGQREgwS6or0hP2zHK
-IrwwLEYLUTYah1vJteUvzvUVGmusO8CWThOiSaxP+PhThUN+mHUKI9EUwGrJUSST
-k5OJxsQ5+8SNpS8ZsZferQQEw2x57WBNizDnhJG8KaKWfXe1+zR4EYGYDn9ecafY
-1ZXKraVqP6MjYg/GA5vzP8LAvs6MRK50Ta7eX+Ytmkp2BL3TNTdFXx79vaasqP5h
-OLmz5EWBU0f9cyNrEhUNEomWSW5p4orAi3XVHBRelpPEVt2fWJAOFi0C1vpCc/lV
-B9sOe9CL85R3dOvwnWnS1bKrh5dfc2V07Qk6TRcCAwEAAaNCMEAwHQYDVR0OBBYE
-FF3Or0/znFzMt8M8Xkaopny5asatMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/
-BAQDAgGGMA0GCSqGSIb3DQEBDAUAA4ICAQAZJWF4lX49cUrbZTGu6fNIeVmfaUmW
-fzePg9yKTn/jip2r9lm0jiuJ6T3JEZCNDi2oWt7SVTkwWokItv9+2SI429vnqpIj
-+0w4tmIjgd2Bc6YkDr3MtKIbPomxOPlng804a7PPhcLokSWF4E+WkwZTgyZAeV2y
-c1FXddbf+fswFFxtzjwbDnj6LttizSBaL3EcrUh6HeJcsrkW7pZjKUQAkZJVmMHY
-2WW69/mzRefO+MIu/K0aJJLKKwJeQh3r6LRhGwsiN2G3NI8XhRTIVwDvvvRVEzXR
-kjCs9EfHogmayOXu3m5fhOQOdsLB/MvqAZ65kZqbS7XvZbW25F+fd1jk5z3ABDpj
-0nulkInydW6jFVtQ2r1ckV9MPmTOH1GOI6zSqxy8ksxV3T6Bsfxb1BcpVwSZacub
-/QX8tzbEHegUpz2wX2h6MbFILNeonZKN7mlhoH3R5cVSM6+0+athdOGXN1fKU16I
-juKhNM3dAsExpszsjxNtxG5ggWtIMoOugQF0MeD4qcSoDaBr9k+a3qnL2ha0zPQ/
-I/qWrM4j8vmWWShjo/+qjg9WWKpouwNRJujQWFeJAnYywnpDjxtt/yv5ad9Lt+pT
-QJ3M5PL4kko2dfc9X1twxYhObjBvQfTm68WQ6xqjYR8jLc++QfJb2NkvX+QGwsbu
-eZYf58FNaALmrA==
------END CERTIFICATE-----
diff -Nru igtf-policy-bundle-1.128/src/accredited/DigitalTrustPrivateRootCAG4.signing_policy igtf-policy-bundle-1.133/src/accredited/DigitalTrustPrivateRootCAG4.signing_policy
--- igtf-policy-bundle-1.128/src/accredited/DigitalTrustPrivateRootCAG4.signing_policy 2024-02-28 08:59:48.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/DigitalTrustPrivateRootCAG4.signing_policy 1970-01-01 01:00:00.000000000 +0100
@@ -1,4 +0,0 @@
-# DigitalTrust Private Root CA G4 Signing Policy (Client, Robot and Host Private Trust)
-access_id_CA X509 '/C=AE/O=DigitalTrust L.L.C./CN=DigitalTrust Private Root CA G4'
-pos_rights globus CA:sign
-cond_subjects globus '"/C=AE/O=DigitalTrust L.L.C./CN=DigitalTrust Private Root CA G4" "/C=AE/O=DigitalTrust L.L.C./CN=DigitalTrust IGTF CA"'
diff -Nru igtf-policy-bundle-1.128/src/accredited/DZeScience.info igtf-policy-bundle-1.133/src/accredited/DZeScience.info
--- igtf-policy-bundle-1.128/src/accredited/DZeScience.info 2024-02-28 08:59:44.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/DZeScience.info 2025-02-11 21:07:53.000000000 +0100
@@ -9,6 +9,6 @@
email = ca@grid.arn.dz
status = accredited:classic
url = http://www.grid.arn.dz
-version = 1.128
+version = 1.133
sha1fp.0 = D8:EF:90:DB:6A:9B:63:47:4C:1D:6E:89:E2:A2:4D:5D:86:FC:2B:2C
subjectdn = "/DC=DZ/DC=ARN/O=DZ e-Science GRID/CN=DZ e-Science CA"
diff -Nru igtf-policy-bundle-1.128/src/accredited/emigtfc4.info igtf-policy-bundle-1.133/src/accredited/emigtfc4.info
--- igtf-policy-bundle-1.128/src/accredited/emigtfc4.info 2024-02-28 09:00:15.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/emigtfc4.info 2025-02-11 21:08:25.000000000 +0100
@@ -10,6 +10,6 @@
email = support@emsign.com
requires = eMudhra-TrustedRootCAC4
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = 47:59:35:24:86:12:3C:6F:46:DC:69:09:BD:C6:A7:C2:46:B6:39:B1
subjectdn = "/C=US/O=eMudhra Inc./CN=emSign Issuing CA IGTF - C4"
diff -Nru igtf-policy-bundle-1.128/src/accredited/emigtfc5.info igtf-policy-bundle-1.133/src/accredited/emigtfc5.info
--- igtf-policy-bundle-1.128/src/accredited/emigtfc5.info 2024-02-28 09:00:16.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/emigtfc5.info 2025-02-11 21:08:26.000000000 +0100
@@ -10,6 +10,6 @@
email = support@emsign.com
requires = eMudhra-TrustedRootCAC5
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = 5D:4F:21:2A:10:FC:A2:E1:27:50:F1:63:C3:6E:69:EF:C2:74:33:36
subjectdn = "/C=US/O=eMudhra Inc./CN=emSign Issuing CA IGTF - C5"
diff -Nru igtf-policy-bundle-1.128/src/accredited/emigtfc5r1.info igtf-policy-bundle-1.133/src/accredited/emigtfc5r1.info
--- igtf-policy-bundle-1.128/src/accredited/emigtfc5r1.info 2024-02-28 09:00:16.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/emigtfc5r1.info 2025-02-11 21:08:26.000000000 +0100
@@ -10,6 +10,6 @@
email = support@emsign.com
requires = eMudhra-TrustedRootCAC5
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = 60:F6:D4:6D:D5:9B:8A:F9:6D:2D:BA:C2:EF:44:6A:FA:62:60:E0:B5
subjectdn = "/C=US/O=eMudhra Inc./CN=emSign Issuing CA IGTF - C5 - 1"
diff -Nru igtf-policy-bundle-1.128/src/accredited/emSignClass1CAG1.info igtf-policy-bundle-1.133/src/accredited/emSignClass1CAG1.info
--- igtf-policy-bundle-1.128/src/accredited/emSignClass1CAG1.info 2024-02-28 09:00:13.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/emSignClass1CAG1.info 2025-02-11 21:08:24.000000000 +0100
@@ -10,6 +10,6 @@
email = support@emsign.com
requires = emSignRootCAG1
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = 35:C3:88:FE:BC:BF:72:EE:67:B9:5B:5E:E4:D4:5E:AD:1A:41:9D:B4
subjectdn = "/C=IN/OU=emSign PKI/O=eMudhra Technologies Limited/CN=emSign Class 1 CA - G1"
diff -Nru igtf-policy-bundle-1.128/src/accredited/emSignRootCAG1.info igtf-policy-bundle-1.133/src/accredited/emSignRootCAG1.info
--- igtf-policy-bundle-1.128/src/accredited/emSignRootCAG1.info 2024-02-28 09:00:14.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/emSignRootCAG1.info 2025-02-11 21:08:24.000000000 +0100
@@ -9,6 +9,6 @@
url = https://emudhra.com/products/digital-certificates
email = support@emsign.com
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = 8A:C7:AD:8F:73:AC:4E:C1:B5:75:4D:A5:40:F4:FC:CF:7C:B5:8E:8C
subjectdn = "/C=IN/OU=emSign PKI/O=eMudhra Technologies Limited/CN=emSign Root CA - G1"
diff -Nru igtf-policy-bundle-1.128/src/accredited/emSignSSLCAG1.info igtf-policy-bundle-1.133/src/accredited/emSignSSLCAG1.info
--- igtf-policy-bundle-1.128/src/accredited/emSignSSLCAG1.info 2024-02-28 09:00:15.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/emSignSSLCAG1.info 2025-02-11 21:08:25.000000000 +0100
@@ -10,6 +10,6 @@
email = support@emsign.com
requires = emSignRootCAG1
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = 47:64:AF:D6:A8:29:92:D9:31:47:25:B9:B8:77:05:AF:F4:E8:4B:E8
subjectdn = "/C=IN/OU=emSign PKI/O=eMudhra Technologies Limited/CN=emSign SSL CA - G1"
diff -Nru igtf-policy-bundle-1.128/src/accredited/eMudhra-TrustedRootCAC4.info igtf-policy-bundle-1.133/src/accredited/eMudhra-TrustedRootCAC4.info
--- igtf-policy-bundle-1.128/src/accredited/eMudhra-TrustedRootCAC4.info 2024-02-28 09:00:12.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/eMudhra-TrustedRootCAC4.info 2025-02-11 21:08:22.000000000 +0100
@@ -9,6 +9,6 @@
url = https://emudhra.com/products/digital-certificates
email = support@emsign.com
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = 3B:6F:67:1F:CD:FC:17:01:64:1C:8D:07:15:18:37:79:01:54:6A:66
subjectdn = "/C=US/OU=emSign PKI/O=eMudhra Inc/CN=emSign Trusted Root CA - C4"
diff -Nru igtf-policy-bundle-1.128/src/accredited/eMudhra-TrustedRootCAC5.info igtf-policy-bundle-1.133/src/accredited/eMudhra-TrustedRootCAC5.info
--- igtf-policy-bundle-1.128/src/accredited/eMudhra-TrustedRootCAC5.info 2024-02-28 09:00:13.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/eMudhra-TrustedRootCAC5.info 2025-02-11 21:08:23.000000000 +0100
@@ -9,6 +9,6 @@
url = https://emudhra.com/products/digital-certificates
email = support@emsign.com
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = 72:F2:9E:E7:F8:EE:B6:DE:9D:EF:CC:02:47:2A:1C:D1:16:1D:AF:1A
subjectdn = "/C=US/O=eMudhra Inc./CN=emSign Trusted Root CA - C5"
diff -Nru igtf-policy-bundle-1.128/src/accredited/GEANTeSciencePersonalCA4.info igtf-policy-bundle-1.133/src/accredited/GEANTeSciencePersonalCA4.info
--- igtf-policy-bundle-1.128/src/accredited/GEANTeSciencePersonalCA4.info 2024-02-28 08:59:49.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/GEANTeSciencePersonalCA4.info 2025-02-11 21:07:59.000000000 +0100
@@ -10,6 +10,6 @@
requires = USERTrustRSACertificationAuthority
email = tcs-pma@lists.geant.org
status = accredited:mics
-version = 1.128
+version = 1.133
sha1fp.0 = AD:5F:20:A4:13:B8:31:5F:1C:5F:0C:9A:ED:79:C9:83:15:76:33:06
subjectdn = "/C=NL/O=GEANT Vereniging/CN=GEANT eScience Personal CA 4"
diff -Nru igtf-policy-bundle-1.128/src/accredited/GEANTeSciencePersonalECCCA4.info igtf-policy-bundle-1.133/src/accredited/GEANTeSciencePersonalECCCA4.info
--- igtf-policy-bundle-1.128/src/accredited/GEANTeSciencePersonalECCCA4.info 2024-02-28 08:59:50.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/GEANTeSciencePersonalECCCA4.info 2025-02-11 21:08:00.000000000 +0100
@@ -10,6 +10,6 @@
requires = USERTrustECCCertificationAuthority
email = tcs-pma@lists.geant.org
status = accredited:mics
-version = 1.128
+version = 1.133
sha1fp.0 = 9A:93:3E:0E:07:65:97:52:DA:AD:19:B0:1C:72:CA:89:E4:D2:F9:DA
subjectdn = "/C=NL/O=GEANT Vereniging/CN=GEANT eScience Personal ECC CA 4"
diff -Nru igtf-policy-bundle-1.128/src/accredited/GEANTeScienceSSLCA4.info igtf-policy-bundle-1.133/src/accredited/GEANTeScienceSSLCA4.info
--- igtf-policy-bundle-1.128/src/accredited/GEANTeScienceSSLCA4.info 2024-02-28 08:59:50.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/GEANTeScienceSSLCA4.info 2025-02-11 21:08:00.000000000 +0100
@@ -10,6 +10,6 @@
requires = USERTrustRSACertificationAuthority
email = tcs-pma@lists.geant.org
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = E9:3B:5F:C1:89:2B:69:31:61:84:F1:DD:1E:A0:C5:F7:71:6F:85:96
subjectdn = "/C=NL/O=GEANT Vereniging/CN=GEANT eScience SSL CA 4"
diff -Nru igtf-policy-bundle-1.128/src/accredited/GEANTeScienceSSLECCCA4.info igtf-policy-bundle-1.133/src/accredited/GEANTeScienceSSLECCCA4.info
--- igtf-policy-bundle-1.128/src/accredited/GEANTeScienceSSLECCCA4.info 2024-02-28 08:59:51.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/GEANTeScienceSSLECCCA4.info 2025-02-11 21:08:01.000000000 +0100
@@ -10,6 +10,6 @@
requires = USERTrustECCCertificationAuthority
email = tcs-pma@lists.geant.org
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = 81:6A:8A:8C:3D:ED:B3:E8:5C:40:61:B5:A3:85:61:39:10:9D:FE:0A
subjectdn = "/C=NL/O=GEANT Vereniging/CN=GEANT eScience SSL ECC CA 4"
diff -Nru igtf-policy-bundle-1.128/src/accredited/GEANTTCSAuthenticationECCCA4B.info igtf-policy-bundle-1.133/src/accredited/GEANTTCSAuthenticationECCCA4B.info
--- igtf-policy-bundle-1.128/src/accredited/GEANTTCSAuthenticationECCCA4B.info 2024-02-28 08:59:48.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/GEANTTCSAuthenticationECCCA4B.info 2025-02-11 21:07:56.000000000 +0100
@@ -9,6 +9,6 @@
email = tcs-pma@lists.geant.org
requires = ResearchandEducationTrustECCRootCA
status = accredited:mics
-version = 1.128
+version = 1.133
sha1fp.0 = 7F:BE:B5:74:F1:DA:A1:3D:5E:EA:A6:9B:2B:EE:FB:EA:6D:DF:BD:03
subjectdn = "/C=NL/O=GEANT Vereniging/CN=GEANT TCS Authentication ECC CA 4B"
diff -Nru igtf-policy-bundle-1.128/src/accredited/GEANTTCSAuthenticationECCCA5.crl_url igtf-policy-bundle-1.133/src/accredited/GEANTTCSAuthenticationECCCA5.crl_url
--- igtf-policy-bundle-1.128/src/accredited/GEANTTCSAuthenticationECCCA5.crl_url 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/GEANTTCSAuthenticationECCCA5.crl_url 2025-02-11 21:07:57.000000000 +0100
@@ -0,0 +1 @@
+http://crl.geant-prv.harica.gr/GEANT-TCS-Client-Auth-E5.crl
diff -Nru igtf-policy-bundle-1.128/src/accredited/GEANTTCSAuthenticationECCCA5.info igtf-policy-bundle-1.133/src/accredited/GEANTTCSAuthenticationECCCA5.info
--- igtf-policy-bundle-1.128/src/accredited/GEANTTCSAuthenticationECCCA5.info 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/GEANTTCSAuthenticationECCCA5.info 2025-02-11 21:07:57.000000000 +0100
@@ -0,0 +1,14 @@
+# @(#)$Id$
+# GEANT TCS Authentication (ECC) CA 5 - private trust for Research and Education for GEANT by HARICA
+#
+alias = GEANTTCSAuthenticationECCCA5
+ca_url = https://wiki.geant.org/download/attachments/929693773/GEANT-TCS-Client-Auth-E5.pem
+crl_url = http://crl.geant-prv.harica.gr/GEANT-TCS-Client-Auth-E5.crl
+policy_url = https://wiki.geant.org/display/TCSNT/TCS+Repository+2025
+url = https://security.geant.org/trusted-certificate-services/
+email = tcs-pma@lists.geant.org
+requires = GEANTTCSRETrustECCRootCA5
+status = accredited:mics
+version = 1.133
+sha1fp.0 = 95:45:0E:B1:BB:D3:E0:DE:5A:FC:BE:86:01:12:52:08:00:F7:7A:85
+subjectdn = "/C=NL/O=GEANT Vereniging/CN=GEANT TCS Authentication ECC CA 5"
diff -Nru igtf-policy-bundle-1.128/src/accredited/GEANTTCSAuthenticationECCCA5.namespaces igtf-policy-bundle-1.133/src/accredited/GEANTTCSAuthenticationECCCA5.namespaces
--- igtf-policy-bundle-1.128/src/accredited/GEANTTCSAuthenticationECCCA5.namespaces 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/GEANTTCSAuthenticationECCCA5.namespaces 2025-02-11 21:07:57.000000000 +0100
@@ -0,0 +1,11 @@
+##############################################################################
+#NAMESPACES-VERSION: 1.0
+#
+# @(#)GEANTTCSAuthenticationECCCA5.signing_policy.namespaces
+# CA alias : GEANTTCSAuthenticationECCCA5
+# subord_of: GEANTTCSRETrustECCRootCA5
+# subjectDN: /C=NL/O=GEANT Vereniging/CN=GEANT TCS Authentication ECC CA 5
+#
+TO Issuer "/C=NL/O=GEANT Vereniging/CN=GEANT TCS Authentication ECC CA 5" \
+ PERMIT Subject "/DC=org/DC=terena/DC=tcs/.*"
+
diff -Nru igtf-policy-bundle-1.128/src/accredited/GEANTTCSAuthenticationECCCA5.pem igtf-policy-bundle-1.133/src/accredited/GEANTTCSAuthenticationECCCA5.pem
--- igtf-policy-bundle-1.128/src/accredited/GEANTTCSAuthenticationECCCA5.pem 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/GEANTTCSAuthenticationECCCA5.pem 2025-02-11 21:07:57.000000000 +0100
@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff -Nru igtf-policy-bundle-1.128/src/accredited/GEANTTCSAuthenticationECCCA5.signing_policy igtf-policy-bundle-1.133/src/accredited/GEANTTCSAuthenticationECCCA5.signing_policy
--- igtf-policy-bundle-1.128/src/accredited/GEANTTCSAuthenticationECCCA5.signing_policy 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/GEANTTCSAuthenticationECCCA5.signing_policy 2025-02-11 21:07:57.000000000 +0100
@@ -0,0 +1,4 @@
+# EACL for the issuing Client Authentication (ECC) CA for the RE community for GEANT by HARICA
+ access_id_CA X509 '/C=NL/O=GEANT Vereniging/CN=GEANT TCS Authentication ECC CA 5'
+ pos_rights globus CA:sign
+ cond_subjects globus '"/C=NL/O=GEANT Vereniging/CN=GEANT TCS Authentication ECC CA 5" "/DC=org/DC=terena/DC=tcs/*"'
diff -Nru igtf-policy-bundle-1.128/src/accredited/GEANTTCSAuthenticationRSACA4B.info igtf-policy-bundle-1.133/src/accredited/GEANTTCSAuthenticationRSACA4B.info
--- igtf-policy-bundle-1.128/src/accredited/GEANTTCSAuthenticationRSACA4B.info 2024-02-28 08:59:49.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/GEANTTCSAuthenticationRSACA4B.info 2025-02-11 21:07:57.000000000 +0100
@@ -9,6 +9,6 @@
email = tcs-pma@lists.geant.org
requires = ResearchandEducationTrustRSARootCA
status = accredited:mics
-version = 1.128
+version = 1.133
sha1fp.0 = CE:26:13:AF:EB:4A:D8:EC:10:12:8E:85:4B:57:D8:D5:66:FE:86:66
subjectdn = "/C=NL/O=GEANT Vereniging/CN=GEANT TCS Authentication RSA CA 4B"
diff -Nru igtf-policy-bundle-1.128/src/accredited/GEANTTCSAuthenticationRSACA5.crl_url igtf-policy-bundle-1.133/src/accredited/GEANTTCSAuthenticationRSACA5.crl_url
--- igtf-policy-bundle-1.128/src/accredited/GEANTTCSAuthenticationRSACA5.crl_url 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/GEANTTCSAuthenticationRSACA5.crl_url 2025-02-11 21:07:58.000000000 +0100
@@ -0,0 +1 @@
+http://crl.geant-prv.harica.gr/GEANT-TCS-Client-Auth-R5.crl
diff -Nru igtf-policy-bundle-1.128/src/accredited/GEANTTCSAuthenticationRSACA5.info igtf-policy-bundle-1.133/src/accredited/GEANTTCSAuthenticationRSACA5.info
--- igtf-policy-bundle-1.128/src/accredited/GEANTTCSAuthenticationRSACA5.info 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/GEANTTCSAuthenticationRSACA5.info 2025-02-11 21:07:58.000000000 +0100
@@ -0,0 +1,14 @@
+# @(#)$Id$
+# GEANT TCS Authentication (RSA) CA 5 - private trust for Research and Education for GEANT by HARICA
+#
+alias = GEANTTCSAuthenticationRSACA5
+ca_url = https://wiki.geant.org/download/attachments/929693773/GEANT-TCS-Client-Auth-R5.pem
+crl_url = http://crl.geant-prv.harica.gr/GEANT-TCS-Client-Auth-R5.crl
+policy_url = https://wiki.geant.org/display/TCSNT/TCS+Repository+2025
+url = https://security.geant.org/trusted-certificate-services/
+email = tcs-pma@lists.geant.org
+requires = GEANTTCSRETrustRSARootCA5
+status = accredited:mics
+version = 1.133
+sha1fp.0 = 3E:5A:BA:94:11:1B:54:A3:86:19:1F:42:69:AD:1A:59:58:ED:0E:3D
+subjectdn = "/C=NL/O=GEANT Vereniging/CN=GEANT TCS Authentication RSA CA 5"
diff -Nru igtf-policy-bundle-1.128/src/accredited/GEANTTCSAuthenticationRSACA5.namespaces igtf-policy-bundle-1.133/src/accredited/GEANTTCSAuthenticationRSACA5.namespaces
--- igtf-policy-bundle-1.128/src/accredited/GEANTTCSAuthenticationRSACA5.namespaces 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/GEANTTCSAuthenticationRSACA5.namespaces 2025-02-11 21:07:58.000000000 +0100
@@ -0,0 +1,11 @@
+##############################################################################
+#NAMESPACES-VERSION: 1.0
+#
+# @(#)GEANTTCSAuthenticationRSACA5.signing_policy.namespaces
+# CA alias : GEANTTCSAuthenticationRSACA5
+# subord_of: GEANTTCSRETrustRSARootCA5
+# subjectDN: /C=NL/O=GEANT Vereniging/CN=GEANT TCS Authentication RSA CA 5
+#
+TO Issuer "/C=NL/O=GEANT Vereniging/CN=GEANT TCS Authentication RSA CA 5" \
+ PERMIT Subject "/DC=org/DC=terena/DC=tcs/.*"
+
diff -Nru igtf-policy-bundle-1.128/src/accredited/GEANTTCSAuthenticationRSACA5.pem igtf-policy-bundle-1.133/src/accredited/GEANTTCSAuthenticationRSACA5.pem
--- igtf-policy-bundle-1.128/src/accredited/GEANTTCSAuthenticationRSACA5.pem 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/GEANTTCSAuthenticationRSACA5.pem 2025-02-11 21:07:58.000000000 +0100
@@ -0,0 +1,34 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff -Nru igtf-policy-bundle-1.128/src/accredited/GEANTTCSAuthenticationRSACA5.signing_policy igtf-policy-bundle-1.133/src/accredited/GEANTTCSAuthenticationRSACA5.signing_policy
--- igtf-policy-bundle-1.128/src/accredited/GEANTTCSAuthenticationRSACA5.signing_policy 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/GEANTTCSAuthenticationRSACA5.signing_policy 2025-02-11 21:07:58.000000000 +0100
@@ -0,0 +1,4 @@
+# EACL for the issuing Client Authentication (RSA) CA for the RE community for GEANT by HARICA
+ access_id_CA X509 '/C=NL/O=GEANT Vereniging/CN=GEANT TCS Authentication RSA CA 5'
+ pos_rights globus CA:sign
+ cond_subjects globus '"/C=NL/O=GEANT Vereniging/CN=GEANT TCS Authentication RSA CA 5" "/DC=org/DC=terena/DC=tcs/*"'
diff -Nru igtf-policy-bundle-1.128/src/accredited/GEANTTCSRETrustECCRootCA5.crl_url igtf-policy-bundle-1.133/src/accredited/GEANTTCSRETrustECCRootCA5.crl_url
--- igtf-policy-bundle-1.128/src/accredited/GEANTTCSRETrustECCRootCA5.crl_url 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/GEANTTCSRETrustECCRootCA5.crl_url 2025-02-11 21:07:58.000000000 +0100
@@ -0,0 +1 @@
+http://crl.geant-prv.harica.gr/GEANT-TCS-Root-E5.crl
diff -Nru igtf-policy-bundle-1.128/src/accredited/GEANTTCSRETrustECCRootCA5.info igtf-policy-bundle-1.133/src/accredited/GEANTTCSRETrustECCRootCA5.info
--- igtf-policy-bundle-1.128/src/accredited/GEANTTCSRETrustECCRootCA5.info 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/GEANTTCSRETrustECCRootCA5.info 2025-02-11 21:07:58.000000000 +0100
@@ -0,0 +1,13 @@
+# @(#)$Id$
+# CN=Research and Education Trust ECC Root CA 5,O=GEANT Vereniging,C=NL
+#
+alias = GEANTTCSRETrustECCRootCA5
+ca_url = https://wiki.geant.org/download/attachments/929693773/GEANT-TCS-Root-E5.pem
+crl_url = http://crl.geant-prv.harica.gr/GEANT-TCS-Root-E5.crl
+policy_url = https://wiki.geant.org/display/TCSNT/TCS+Repository+2025
+url = https://security.geant.org/trusted-certificate-services/
+email = tcs-pma@lists.geant.org
+status = accredited:classic
+version = 1.133
+sha1fp.0 = 2D:1F:B8:B8:78:5B:03:2B:C0:E4:0A:43:83:5E:6F:A2:48:AB:75:2B
+subjectdn = "/C=NL/O=GEANT Vereniging/CN=Research and Education Trust ECC Root CA 5"
diff -Nru igtf-policy-bundle-1.128/src/accredited/GEANTTCSRETrustECCRootCA5.namespaces igtf-policy-bundle-1.133/src/accredited/GEANTTCSRETrustECCRootCA5.namespaces
--- igtf-policy-bundle-1.128/src/accredited/GEANTTCSRETrustECCRootCA5.namespaces 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/GEANTTCSRETrustECCRootCA5.namespaces 2025-02-11 21:07:58.000000000 +0100
@@ -0,0 +1,16 @@
+##############################################################################
+#NAMESPACES-VERSION: 1.0
+#
+# @(#)GEANTTCSRETrustECCRootCA5.signing_policy.namespaces
+# CA alias : GEANTTCSRETrustECCRootCA5
+# subord_of:
+# subjectDN: /C=NL/O=GEANT Vereniging/CN=Research and Education Trust ECC Root CA 5
+# hash : GEANTTCSRETrustECCRootCA5.signing_policy
+# (generated automatically from GEANTTCSRETrustECCRootCA5.signing_policy)
+#
+TO Issuer "/C=NL/O=GEANT Vereniging/CN=Research and Education Trust ECC Root CA 5" \
+ PERMIT Subject "/C=NL/O=GEANT Vereniging/CN=GEANT TCS Authentication ECC CA 5"
+
+TO Issuer "/C=NL/O=GEANT Vereniging/CN=GEANT TCS Authentication ECC CA 5" \
+ PERMIT Subject "/DC=org/DC=terena/DC=tcs/.*"
+
diff -Nru igtf-policy-bundle-1.128/src/accredited/GEANTTCSRETrustECCRootCA5.pem igtf-policy-bundle-1.133/src/accredited/GEANTTCSRETrustECCRootCA5.pem
--- igtf-policy-bundle-1.128/src/accredited/GEANTTCSRETrustECCRootCA5.pem 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/GEANTTCSRETrustECCRootCA5.pem 2025-02-11 21:07:58.000000000 +0100
@@ -0,0 +1,15 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff -Nru igtf-policy-bundle-1.128/src/accredited/GEANTTCSRETrustECCRootCA5.signing_policy igtf-policy-bundle-1.133/src/accredited/GEANTTCSRETrustECCRootCA5.signing_policy
--- igtf-policy-bundle-1.128/src/accredited/GEANTTCSRETrustECCRootCA5.signing_policy 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/GEANTTCSRETrustECCRootCA5.signing_policy 2025-02-11 21:07:58.000000000 +0100
@@ -0,0 +1,4 @@
+# EACL for the Research and Education Root for GEANT TCS Gen5 ECC
+ access_id_CA X509 '/C=NL/O=GEANT Vereniging/CN=Research and Education Trust ECC Root CA 5'
+ pos_rights globus CA:sign
+ cond_subjects globus '"/C=NL/O=GEANT Vereniging/CN=Research and Education Trust ECC Root CA 5" "/C=NL/O=GEANT Vereniging/CN=GEANT TCS Authentication ECC CA 5"'
diff -Nru igtf-policy-bundle-1.128/src/accredited/GEANTTCSRETrustRSARootCA5.crl_url igtf-policy-bundle-1.133/src/accredited/GEANTTCSRETrustRSARootCA5.crl_url
--- igtf-policy-bundle-1.128/src/accredited/GEANTTCSRETrustRSARootCA5.crl_url 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/GEANTTCSRETrustRSARootCA5.crl_url 2025-02-11 21:07:59.000000000 +0100
@@ -0,0 +1 @@
+http://crl.geant-prv.harica.gr/GEANT-TCS-Root-R5.crl
diff -Nru igtf-policy-bundle-1.128/src/accredited/GEANTTCSRETrustRSARootCA5.info igtf-policy-bundle-1.133/src/accredited/GEANTTCSRETrustRSARootCA5.info
--- igtf-policy-bundle-1.128/src/accredited/GEANTTCSRETrustRSARootCA5.info 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/GEANTTCSRETrustRSARootCA5.info 2025-02-11 21:07:59.000000000 +0100
@@ -0,0 +1,13 @@
+# @(#)$Id$
+# CN=Research and Education Trust RSA Root CA 5,O=GEANT Vereniging,C=NL
+#
+alias = GEANTTCSRETrustRSARootCA5
+ca_url = https://wiki.geant.org/download/attachments/929693773/GEANT-TCS-Root-R5.pem
+crl_url = http://crl.geant-prv.harica.gr/GEANT-TCS-Root-R5.crl
+policy_url = https://wiki.geant.org/display/TCSNT/TCS+Repository+2025
+url = https://security.geant.org/trusted-certificate-services/
+email = tcs-pma@lists.geant.org
+status = accredited:classic
+version = 1.133
+sha1fp.0 = 44:9D:FA:FA:B8:F8:40:CC:1F:9D:7A:F9:BE:93:72:35:14:3C:71:0B
+subjectdn = "/C=NL/O=GEANT Vereniging/CN=Research and Education Trust RSA Root CA 5"
diff -Nru igtf-policy-bundle-1.128/src/accredited/GEANTTCSRETrustRSARootCA5.namespaces igtf-policy-bundle-1.133/src/accredited/GEANTTCSRETrustRSARootCA5.namespaces
--- igtf-policy-bundle-1.128/src/accredited/GEANTTCSRETrustRSARootCA5.namespaces 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/GEANTTCSRETrustRSARootCA5.namespaces 2025-02-11 21:07:59.000000000 +0100
@@ -0,0 +1,16 @@
+##############################################################################
+#NAMESPACES-VERSION: 1.0
+#
+# @(#)GEANTTCSRETrustRSARootCA5.signing_policy.namespaces
+# CA alias : GEANTTCSRETrustRSARootCA5
+# subord_of:
+# subjectDN: /C=NL/O=GEANT Vereniging/CN=Research and Education Trust RSA Root CA 5
+# hash : GEANTTCSRETrustRSARootCA5.signing_policy
+# (generated automatically from GEANTTCSRETrustRSARootCA5.signing_policy)
+#
+TO Issuer "/C=NL/O=GEANT Vereniging/CN=Research and Education Trust RSA Root CA 5" \
+ PERMIT Subject "/C=NL/O=GEANT Vereniging/CN=GEANT TCS Authentication RSA CA 5"
+
+TO Issuer "/C=NL/O=GEANT Vereniging/CN=GEANT TCS Authentication RSA CA 5" \
+ PERMIT Subject "/DC=org/DC=terena/DC=tcs/.*"
+
diff -Nru igtf-policy-bundle-1.128/src/accredited/GEANTTCSRETrustRSARootCA5.pem igtf-policy-bundle-1.133/src/accredited/GEANTTCSRETrustRSARootCA5.pem
--- igtf-policy-bundle-1.128/src/accredited/GEANTTCSRETrustRSARootCA5.pem 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/GEANTTCSRETrustRSARootCA5.pem 2025-02-11 21:07:59.000000000 +0100
@@ -0,0 +1,33 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff -Nru igtf-policy-bundle-1.128/src/accredited/GEANTTCSRETrustRSARootCA5.signing_policy igtf-policy-bundle-1.133/src/accredited/GEANTTCSRETrustRSARootCA5.signing_policy
--- igtf-policy-bundle-1.128/src/accredited/GEANTTCSRETrustRSARootCA5.signing_policy 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/GEANTTCSRETrustRSARootCA5.signing_policy 2025-02-11 21:07:59.000000000 +0100
@@ -0,0 +1,4 @@
+# EACL for the Research and Education Root for GEANT TCS Gen5 RSA
+ access_id_CA X509 '/C=NL/O=GEANT Vereniging/CN=Research and Education Trust RSA Root CA 5'
+ pos_rights globus CA:sign
+ cond_subjects globus '"/C=NL/O=GEANT Vereniging/CN=Research and Education Trust RSA Root CA 5" "/C=NL/O=GEANT Vereniging/CN=GEANT TCS Authentication RSA CA 5"'
diff -Nru igtf-policy-bundle-1.128/src/accredited/GridCanada.info igtf-policy-bundle-1.133/src/accredited/GridCanada.info
--- igtf-policy-bundle-1.128/src/accredited/GridCanada.info 2024-02-28 08:59:51.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/GridCanada.info 2025-02-11 21:08:01.000000000 +0100
@@ -7,6 +7,6 @@
url = http://www.gridcanada.ca/ca
email = ca@gridcanada.ca
status = accredited:classic
-version = 1.128
-sha1fp.0 = 33:66:97:CD:4C:F1:6B:C3:54:98:47:49:5B:8D:38:89:EC:07:16:9F
+version = 1.133
+sha1fp.0 = EC:7C:F3:83:F3:B5:55:99:48:76:3E:66:AA:02:C6:FC:1D:CC:83:5E
subjectdn = "/C=CA/O=Grid/CN=Grid Canada Certificate Authority"
diff -Nru igtf-policy-bundle-1.128/src/accredited/GridCanada.pem igtf-policy-bundle-1.133/src/accredited/GridCanada.pem
--- igtf-policy-bundle-1.128/src/accredited/GridCanada.pem 2024-02-28 08:59:51.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/GridCanada.pem 2025-02-11 21:08:01.000000000 +0100
@@ -1,25 +1,25 @@
-----BEGIN CERTIFICATE-----
-MIIENzCCAx+gAwIBAgIBEDANBgkqhkiG9w0BAQsFADBIMQswCQYDVQQGEwJDQTEN
-MAsGA1UEChMER3JpZDEqMCgGA1UEAxMhR3JpZCBDYW5hZGEgQ2VydGlmaWNhdGUg
-QXV0aG9yaXR5MB4XDTA2MDExMjIxMjkwN1oXDTI2MDExMjIxMjkwN1owSDELMAkG
-A1UEBhMCQ0ExDTALBgNVBAoTBEdyaWQxKjAoBgNVBAMTIUdyaWQgQ2FuYWRhIENl
-cnRpZmljYXRlIEF1dGhvcml0eTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
-ggEBALrYbibzXxtyojoolKeivzeah39J11AKfyHs+bflv9LUGpIhfbmQ9fC1Hawt
-qNT2y15XI96kK7jVW7si6BpUPAsrKsxvz7yrWHf5C6qCYCuRQhDzSabcLqBO17x/
-11lTT1BbEJoKQ3BSuzh02ewqA4CiOPZYcL382xFNCA5Tf4FNaCT+xXuD/Mwso2kW
-zH8rAPDgslwKdU7DbmHhiq2A/w+sunF69Rl4+Z9oo7khdYlN6rnZcm8qG8SRrpt9
-ggHMpY9LVMp/M8az6sfTv7qlWlXMtHI0vUVBTZryT/Nxi+6KJdrw3om1V/0rt8cf
-2gmw/aibrE+qq7lFKSvozASW/UsCAwEAAaOCASowggEmMA8GA1UdEwEB/wQFMAMB
-Af8wHQYDVR0OBBYEFOisEvEg7sjXj0xqAdGmAr/OrpkYMHAGA1UdIwRpMGeAFOis
-EvEg7sjXj0xqAdGmAr/OrpkYoUykSjBIMQswCQYDVQQGEwJDQTENMAsGA1UEChME
-R3JpZDEqMCgGA1UEAxMhR3JpZCBDYW5hZGEgQ2VydGlmaWNhdGUgQXV0aG9yaXR5
-ggEQMA4GA1UdDwEB/wQEAwIBBjAbBgNVHREEFDASgRBjYUBncmlkY2FuYWRhLmNh
-MBsGA1UdEgQUMBKBEGNhQGdyaWRjYW5hZGEuY2EwOAYDVR0fBDEwLzAtoCugKYYn
-aHR0cDovL3d3dy5ncmlkY2FuYWRhLmNhL2NhL2JmZmJkN2QwLnIwMA0GCSqGSIb3
-DQEBCwUAA4IBAQB71W2dgdvF4JXM6Qx1UdL3Gl2yyFooof5L5pCCnMT7c/FQuZ36
-eogJejWrrgd7QE1JCERwYQd6RGFbVHy3QlOCL6ul+DBSSGPZgCAKIP+dR0toX5Yv
-neQXc1DsViv9xrbvkwsH4q/CDzXjn6N3OJHJcxySC0tYQ9HzLy67xZJ5Cz6nsZg/
-Vgd+ugLf+5sd2MeZZthzdlyjiBAus04435Bth7XXA5/hUtVJpnYURKrbJJos8mYG
-VWAhbGFcUNZ8q+vHinAF5GA5jwW++13ejQrA9/c0zms3A45BSDsQ+nCssMu2S9bP
-EszeWZbv+uKR8+uz1RO0VW9sOhtl4W4vOhiN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-----END CERTIFICATE-----
diff -Nru igtf-policy-bundle-1.128/src/accredited/HARICAGEANTTLSECC1.crl_url igtf-policy-bundle-1.133/src/accredited/HARICAGEANTTLSECC1.crl_url
--- igtf-policy-bundle-1.128/src/accredited/HARICAGEANTTLSECC1.crl_url 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HARICAGEANTTLSECC1.crl_url 2025-02-11 21:08:01.000000000 +0100
@@ -0,0 +1 @@
+http://crl.harica.gr/HARICA-GEANT-TLS-E1.crl
diff -Nru igtf-policy-bundle-1.128/src/accredited/HARICAGEANTTLSECC1.info igtf-policy-bundle-1.133/src/accredited/HARICAGEANTTLSECC1.info
--- igtf-policy-bundle-1.128/src/accredited/HARICAGEANTTLSECC1.info 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HARICAGEANTTLSECC1.info 2025-02-11 21:08:01.000000000 +0100
@@ -0,0 +1,14 @@
+# @(#)HARICAGEANTTLSECC1 Issuing CA GEANT TCS Gen5 OV dedicated
+# /C=GR/O=Hellenic Academic and Research Institutions CA/CN=GEANT TLS ECC 1
+#
+alias = HARICAGEANTTLSECC1
+ca_url = https://repo.harica.gr/certs/HARICA-GEANT-TLS-E1.der
+crl_url = http://crl.harica.gr/HARICA-GEANT-TLS-E1.crl
+policy_url = https://wiki.geant.org/display/TCSNT/TCS+Repository+2025
+url = https://security.geant.org/trusted-certificate-services/
+email = tcs-pma@lists.geant.org
+requires = HARICATLSECCRootCA2021
+status = accredited:classic
+version = 1.133
+sha1fp.0 = CC:73:33:46:67:05:F1:43:BE:7D:76:DD:B8:E7:74:40:7A:3D:91:C8
+subjectdn = "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=GEANT TLS ECC 1"
diff -Nru igtf-policy-bundle-1.128/src/accredited/HARICAGEANTTLSECC1.namespaces igtf-policy-bundle-1.133/src/accredited/HARICAGEANTTLSECC1.namespaces
--- igtf-policy-bundle-1.128/src/accredited/HARICAGEANTTLSECC1.namespaces 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HARICAGEANTTLSECC1.namespaces 2025-02-11 21:08:01.000000000 +0100
@@ -0,0 +1,11 @@
+##############################################################################
+#NAMESPACES-VERSION: 1.0
+#
+# @(#)HARICAGEANTTLSECC1.namespaces
+# CA alias : HARICAGEANTTLSECC1
+# subord_of: /C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA TLS ECC Root CA 2021
+# subjectDN: /C=GR/O=Hellenic Academic and Research Institutions CA/CN=GEANT TLS ECC 1
+#
+TO Issuer "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=GEANT TLS ECC 1" \
+ PERMIT Subject "/DC=org/DC=terena/DC=tcs/.*"
+
diff -Nru igtf-policy-bundle-1.128/src/accredited/HARICAGEANTTLSECC1.pem igtf-policy-bundle-1.133/src/accredited/HARICAGEANTTLSECC1.pem
--- igtf-policy-bundle-1.128/src/accredited/HARICAGEANTTLSECC1.pem 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HARICAGEANTTLSECC1.pem 2025-02-11 21:08:01.000000000 +0100
@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----
+MIIDNzCCArygAwIBAgIQQv3c4SYWB+Gl5pNaQAFh3TAKBggqhkjOPQQDAzBsMQsw
+CQYDVQQGEwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJlc2Vh
+cmNoIEluc3RpdHV0aW9ucyBDQTEkMCIGA1UEAwwbSEFSSUNBIFRMUyBFQ0MgUm9v
+dCBDQSAyMDIxMB4XDTI1MDEwMzExMTQyMVoXDTM5MTIzMTExMTQyMFowYDELMAkG
+A1UEBhMCR1IxNzA1BgNVBAoMLkhlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJj
+aCBJbnN0aXR1dGlvbnMgQ0ExGDAWBgNVBAMMD0dFQU5UIFRMUyBFQ0MgMTB2MBAG
+ByqGSM49AgEGBSuBBAAiA2IABANPWLwh0Za2UqtbLV7/qNRm78zsttgSuvhn73bU
+GtxETsVOEZeMUfMjgHw8EwrsSJI9oj0CgZQFFSEY1NJfcxA/NJiOYJUKPsFbpOrY
+dr0q4g+aBZsXWeh7bMCzx24g/aOCAS0wggEpMBIGA1UdEwEB/wQIMAYBAf8CAQAw
+HwYDVR0jBBgwFoAUyRtTgRL+BNUW0aq8mm+3oJUZbsowTQYIKwYBBQUHAQEEQTA/
+MD0GCCsGAQUFBzAChjFodHRwOi8vY3J0LmhhcmljYS5nci9IQVJJQ0EtVExTLVJv
+b3QtMjAyMS1FQ0MuY2VyMBEGA1UdIAQKMAgwBgYEVR0gADAdBgNVHSUEFjAUBggr
+BgEFBQcDAgYIKwYBBQUHAwEwQgYDVR0fBDswOTA3oDWgM4YxaHR0cDovL2NybC5o
+YXJpY2EuZ3IvSEFSSUNBLVRMUy1Sb290LTIwMjEtRUNDLmNybDAdBgNVHQ4EFgQU
+6ZkGjRcfq/uWGlrIW15dXuzanI8wDgYDVR0PAQH/BAQDAgGGMAoGCCqGSM49BAMD
+A2kAMGYCMQD2M1caaY2OwmthgmANUQg3LBLI0/2LiCdxa2zNq0G59wVzbjEk0cR/
+px52OegIwRACMQCk+iTmBlR6Xfv6igiiaFiPYfN2HfbcYLWbot5DZ2H1b4JVJV+V
+rga7uu50SDG9hf4=
+-----END CERTIFICATE-----
diff -Nru igtf-policy-bundle-1.128/src/accredited/HARICAGEANTTLSECC1.signing_policy igtf-policy-bundle-1.133/src/accredited/HARICAGEANTTLSECC1.signing_policy
--- igtf-policy-bundle-1.128/src/accredited/HARICAGEANTTLSECC1.signing_policy 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HARICAGEANTTLSECC1.signing_policy 2025-02-11 21:08:01.000000000 +0100
@@ -0,0 +1,5 @@
+# EACL for the HARICA OV TLS ECC ICA (GEANT TCS Gen5)
+ access_id_CA X509 '/C=GR/O=Hellenic Academic and Research Institutions CA/CN=GEANT TLS ECC 1'
+ pos_rights globus CA:sign
+ cond_subjects globus '"/C=GR/O=Hellenic Academic and Research Institutions CA/CN=GEANT TLS ECC 1" "/DC=org/DC=terena/DC=tcs/*"'
+
diff -Nru igtf-policy-bundle-1.128/src/accredited/HARICAGEANTTLSRSA1.crl_url igtf-policy-bundle-1.133/src/accredited/HARICAGEANTTLSRSA1.crl_url
--- igtf-policy-bundle-1.128/src/accredited/HARICAGEANTTLSRSA1.crl_url 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HARICAGEANTTLSRSA1.crl_url 2025-02-11 21:08:02.000000000 +0100
@@ -0,0 +1 @@
+http://crl.harica.gr/HARICA-GEANT-TLS-R1.crl
diff -Nru igtf-policy-bundle-1.128/src/accredited/HARICAGEANTTLSRSA1.info igtf-policy-bundle-1.133/src/accredited/HARICAGEANTTLSRSA1.info
--- igtf-policy-bundle-1.128/src/accredited/HARICAGEANTTLSRSA1.info 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HARICAGEANTTLSRSA1.info 2025-02-11 21:08:02.000000000 +0100
@@ -0,0 +1,14 @@
+# @(#)HARICAGEANTTLSRSA1 Issuing CA GEANT TCS Gen5 OV dedicated
+# /C=GR/O=Hellenic Academic and Research Institutions CA/CN=GEANT TLS RSA 1
+#
+alias = HARICAGEANTTLSRSA1
+ca_url = https://repo.harica.gr/certs/HARICA-GEANT-TLS-R1.der
+crl_url = http://crl.harica.gr/HARICA-GEANT-TLS-R1.crl
+policy_url = https://wiki.geant.org/display/TCSNT/TCS+Repository+2025
+url = https://security.geant.org/trusted-certificate-services/
+email = tcs-pma@lists.geant.org
+requires = HARICATLSRSARootCA2021
+status = accredited:classic
+version = 1.133
+sha1fp.0 = BE:7F:0B:36:F8:8A:22:DD:DE:D3:62:DB:9A:F7:9C:8E:65:82:B9:19
+subjectdn = "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=GEANT TLS RSA 1"
diff -Nru igtf-policy-bundle-1.128/src/accredited/HARICAGEANTTLSRSA1.namespaces igtf-policy-bundle-1.133/src/accredited/HARICAGEANTTLSRSA1.namespaces
--- igtf-policy-bundle-1.128/src/accredited/HARICAGEANTTLSRSA1.namespaces 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HARICAGEANTTLSRSA1.namespaces 2025-02-11 21:08:02.000000000 +0100
@@ -0,0 +1,11 @@
+##############################################################################
+#NAMESPACES-VERSION: 1.0
+#
+# @(#)HARICAGEANTTLSRSA1.namespaces
+# CA alias : HARICAGEANTTLSRSA1
+# subord_of: /C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA TLS RSA Root CA 2021
+# subjectDN: /C=GR/O=Hellenic Academic and Research Institutions CA/CN=GEANT TLS RSA 1
+#
+TO Issuer "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=GEANT TLS RSA 1" \
+ PERMIT Subject "/DC=org/DC=terena/DC=tcs/.*"
+
diff -Nru igtf-policy-bundle-1.128/src/accredited/HARICAGEANTTLSRSA1.pem igtf-policy-bundle-1.133/src/accredited/HARICAGEANTTLSRSA1.pem
--- igtf-policy-bundle-1.128/src/accredited/HARICAGEANTTLSRSA1.pem 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HARICAGEANTTLSRSA1.pem 2025-02-11 21:08:02.000000000 +0100
@@ -0,0 +1,35 @@
+-----BEGIN CERTIFICATE-----
+MIIGBTCCA+2gAwIBAgIQFNV782kiKCGaVWf6kWUbIjANBgkqhkiG9w0BAQsFADBs
+MQswCQYDVQQGEwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJl
+c2VhcmNoIEluc3RpdHV0aW9ucyBDQTEkMCIGA1UEAwwbSEFSSUNBIFRMUyBSU0Eg
+Um9vdCBDQSAyMDIxMB4XDTI1MDEwMzExMTUwMFoXDTM5MTIzMTExMTQ1OVowYDEL
+MAkGA1UEBhMCR1IxNzA1BgNVBAoMLkhlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNl
+YXJjaCBJbnN0aXR1dGlvbnMgQ0ExGDAWBgNVBAMMD0dFQU5UIFRMUyBSU0EgMTCC
+AaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAKEEaZSzEzznAPk8IEa17GSG
+yJzPTj4cwRY7/vcq2BPT5+IRGxQtaCdgLXIEl2cdPdIkj2eyakFmgMjAtyeju8V8
+dRayQCD/bWjJ7thDlowgLljQaXirxnYbT8bzRHAhCZqBakYgi5KWw9dANLyDHGpX
+UdY259ab0lWEaFE5Uu6IzQSMJOAy4l/Twym8GUiy0qMDEBFSlm31C9BXpdHKKAlh
+vIjMiKoDeTWl5vZaLB2MMRGY1yW2ftPgIP0/MkX1uFITlvHmmMTngxplH1nybEIJ
+FiwHg1KiLk1TprcZgeO2gxE5Lz3wTFWrsUlAzrh5xWmscWkjNi/4BpeuiT5+NExF
+czboLnXOfjuci/7bsnPi1/aZN/iKNbJRnngFoLaKVMmqCS7Xo34f+BITatryQZFE
+u2oDKExQGlxDBCfYMLgLucX/onpLzUSgeQITNLx6i5tGGbUYH+9Dy3GI66L/5tPj
+qzlOsydki8ZYGE5SBJeWCZ2IrhUe0WzZ2b6Zhk6JAQIDAQABo4IBLTCCASkwEgYD
+VR0TAQH/BAgwBgEB/wIBADAfBgNVHSMEGDAWgBQKSCOmYKSSCjPqk1vFV+olTb0S
+7jBNBggrBgEFBQcBAQRBMD8wPQYIKwYBBQUHMAKGMWh0dHA6Ly9jcnQuaGFyaWNh
+LmdyL0hBUklDQS1UTFMtUm9vdC0yMDIxLVJTQS5jZXIwEQYDVR0gBAowCDAGBgRV
+HSAAMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATBCBgNVHR8EOzA5MDeg
+NaAzhjFodHRwOi8vY3JsLmhhcmljYS5nci9IQVJJQ0EtVExTLVJvb3QtMjAyMS1S
+U0EuY3JsMB0GA1UdDgQWBBSGAXI/jKlw4jEGUxbOAV9becg8OzAOBgNVHQ8BAf8E
+BAMCAYYwDQYJKoZIhvcNAQELBQADggIBABkssjQzYrOo4GMsKegaChP16yNe6Sck
+cWBymM455R2rMeuQ3zlxUNOEt+KUfgueOA2urp4j6TlPbs/XxpwuN3I1f09Luk5b
++ZgRXM7obE6ZLTerVQWKoTShyl34R2XlK8pEy7+67Ht4lcJzt+K6K5gEuoPSGQDP
+ef+fUfmXrFcgBMcMbtfDb9dubFKNZZxo5nAXiqhFMOIyByag3H+tOTuH8zuId9pH
+RDsUpAIHJ9/W2WBfLcKav7IKRlNBRD/sPBy903J9WHPKwl8kQSDA+aa7XCYk7bJt
+Eyf+7GM9F5cZ7+YyknXqnv/rtQEkTKZdQo5Us18VFe9qqj94tXbLdk7PejJYNB4O
+Zlli44Ld7rtqfFlUych7gIxFOmiyxMQQYrYmUi+74lEZvfoNhuref0CupuKpz6O3
+dLv6kO9T10uNdDBoBQTkge3UzHafTIe3R2o3ujXKUGPwyc9m7/FETyKLUCwSU/5O
+AVOeBCU8QtkKKjM8AmbpKpe3pHWcyq3R7B3LmIALkMPTydyDfxen65IDqREbVq8N
+xjhkJThUz40JqOlN6uqKqeDISj/IoucYwsqW24AlO7ZzNmohQmMi8ep23H4hBSh0
+GBTe2XvkuzaNf92syK8l2HzO+13GLCjzYLTPvXTO9UpK8DGyfGZOuamuwbAnbNpE
+3RfjV9IaUQGJ
+-----END CERTIFICATE-----
diff -Nru igtf-policy-bundle-1.128/src/accredited/HARICAGEANTTLSRSA1.signing_policy igtf-policy-bundle-1.133/src/accredited/HARICAGEANTTLSRSA1.signing_policy
--- igtf-policy-bundle-1.128/src/accredited/HARICAGEANTTLSRSA1.signing_policy 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HARICAGEANTTLSRSA1.signing_policy 2025-02-11 21:08:02.000000000 +0100
@@ -0,0 +1,5 @@
+# EACL for the HARICA OV TLS RSA ICA (GEANT TCS Gen5)
+ access_id_CA X509 '/C=GR/O=Hellenic Academic and Research Institutions CA/CN=GEANT TLS RSA 1'
+ pos_rights globus CA:sign
+ cond_subjects globus '"/C=GR/O=Hellenic Academic and Research Institutions CA/CN=GEANT TLS RSA 1" "/DC=org/DC=terena/DC=tcs/*"'
+
diff -Nru igtf-policy-bundle-1.128/src/accredited/HARICAOVTLSECC.crl_url igtf-policy-bundle-1.133/src/accredited/HARICAOVTLSECC.crl_url
--- igtf-policy-bundle-1.128/src/accredited/HARICAOVTLSECC.crl_url 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HARICAOVTLSECC.crl_url 2025-02-11 21:08:02.000000000 +0100
@@ -0,0 +1 @@
+http://crl.harica.gr/HARICA-OV-TLS-Sub-E1.crl
diff -Nru igtf-policy-bundle-1.128/src/accredited/HARICAOVTLSECC.info igtf-policy-bundle-1.133/src/accredited/HARICAOVTLSECC.info
--- igtf-policy-bundle-1.128/src/accredited/HARICAOVTLSECC.info 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HARICAOVTLSECC.info 2025-02-11 21:08:02.000000000 +0100
@@ -0,0 +1,13 @@
+# @(#)HARICAOVTLSECC Issuing CA GEANT TCS Gen5 OV Base
+#
+alias = HARICAOVTLSECC
+ca_url = https://repo.harica.gr/certs/HARICA-OV-TLS-Sub-E1.der
+crl_url = http://crl.harica.gr/HARICA-OV-TLS-Sub-E1.crl
+policy_url = https://repo.harica.gr/procedures
+url = https://www.harica.gr/
+email = tcs-pma@lists.geant.org
+requires = HARICATLSECCRootCA2021
+status = accredited:classic
+version = 1.133
+sha1fp.0 = 15:5C:A9:53:5D:FE:9B:16:3E:20:1E:71:7F:C9:B0:DE:1E:49:FD:2C
+subjectdn = "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA OV TLS ECC"
diff -Nru igtf-policy-bundle-1.128/src/accredited/HARICAOVTLSECC.namespaces igtf-policy-bundle-1.133/src/accredited/HARICAOVTLSECC.namespaces
--- igtf-policy-bundle-1.128/src/accredited/HARICAOVTLSECC.namespaces 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HARICAOVTLSECC.namespaces 2025-02-11 21:08:02.000000000 +0100
@@ -0,0 +1,11 @@
+##############################################################################
+#NAMESPACES-VERSION: 1.0
+#
+# @(#)HARICAOVTLSECC.namespaces
+# CA alias : HARICAOVTLSECC
+# subord_of: /C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA TLS ECC Root CA 2021
+# subjectDN: /C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA OV TLS ECC
+#
+TO Issuer "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA OV TLS ECC" \
+ PERMIT Subject "/DC=org/DC=terena/DC=tcs/.*"
+
diff -Nru igtf-policy-bundle-1.128/src/accredited/HARICAOVTLSECC.pem igtf-policy-bundle-1.133/src/accredited/HARICAOVTLSECC.pem
--- igtf-policy-bundle-1.128/src/accredited/HARICAOVTLSECC.pem 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HARICAOVTLSECC.pem 2025-02-11 21:08:02.000000000 +0100
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff -Nru igtf-policy-bundle-1.128/src/accredited/HARICAOVTLSECC.signing_policy igtf-policy-bundle-1.133/src/accredited/HARICAOVTLSECC.signing_policy
--- igtf-policy-bundle-1.128/src/accredited/HARICAOVTLSECC.signing_policy 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HARICAOVTLSECC.signing_policy 2025-02-11 21:08:02.000000000 +0100
@@ -0,0 +1,5 @@
+# EACL for the HARICA OV TLS ECC ICA (GEANT TCS Gen5)
+ access_id_CA X509 '/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA OV TLS ECC'
+ pos_rights globus CA:sign
+ cond_subjects globus '"/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA OV TLS ECC" "/DC=org/DC=terena/DC=tcs/*"'
+
diff -Nru igtf-policy-bundle-1.128/src/accredited/HARICAOVTLSRSA.crl_url igtf-policy-bundle-1.133/src/accredited/HARICAOVTLSRSA.crl_url
--- igtf-policy-bundle-1.128/src/accredited/HARICAOVTLSRSA.crl_url 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HARICAOVTLSRSA.crl_url 2025-02-11 21:08:03.000000000 +0100
@@ -0,0 +1 @@
+http://crl.harica.gr/HARICA-OV-TLS-Sub-R1.crl
diff -Nru igtf-policy-bundle-1.128/src/accredited/HARICAOVTLSRSA.info igtf-policy-bundle-1.133/src/accredited/HARICAOVTLSRSA.info
--- igtf-policy-bundle-1.128/src/accredited/HARICAOVTLSRSA.info 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HARICAOVTLSRSA.info 2025-02-11 21:08:03.000000000 +0100
@@ -0,0 +1,13 @@
+# @(#)HARICAOVTLSRSA Issuing CA GEANT TCS Gen5 OV Base
+#
+alias = HARICAOVTLSRSA
+ca_url = https://repo.harica.gr/certs/HARICA-OV-TLS-Sub-R1.der
+crl_url = http://crl.harica.gr/HARICA-OV-TLS-Sub-R1.crl
+policy_url = https://repo.harica.gr/procedures
+url = https://www.harica.gr/
+email = tcs-pma@lists.geant.org
+requires = HARICATLSRSARootCA2021
+status = accredited:classic
+version = 1.133
+sha1fp.0 = 0E:B2:CA:9D:D9:89:CF:6E:A0:89:EF:48:10:05:80:E7:5F:E4:52:90
+subjectdn = "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA OV TLS RSA"
diff -Nru igtf-policy-bundle-1.128/src/accredited/HARICAOVTLSRSA.namespaces igtf-policy-bundle-1.133/src/accredited/HARICAOVTLSRSA.namespaces
--- igtf-policy-bundle-1.128/src/accredited/HARICAOVTLSRSA.namespaces 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HARICAOVTLSRSA.namespaces 2025-02-11 21:08:03.000000000 +0100
@@ -0,0 +1,11 @@
+##############################################################################
+#NAMESPACES-VERSION: 1.0
+#
+# @(#)HARICAOVTLSRSA.namespaces
+# CA alias : HARICAOVTLSRSA
+# subord_of: /C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA TLS RSA Root CA 2021
+# subjectDN: /C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA OV TLS RSA
+#
+TO Issuer "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA OV TLS RSA" \
+ PERMIT Subject "/DC=org/DC=terena/DC=tcs/.*"
+
diff -Nru igtf-policy-bundle-1.128/src/accredited/HARICAOVTLSRSA.pem igtf-policy-bundle-1.133/src/accredited/HARICAOVTLSRSA.pem
--- igtf-policy-bundle-1.128/src/accredited/HARICAOVTLSRSA.pem 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HARICAOVTLSRSA.pem 2025-02-11 21:08:03.000000000 +0100
@@ -0,0 +1,39 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff -Nru igtf-policy-bundle-1.128/src/accredited/HARICAOVTLSRSA.signing_policy igtf-policy-bundle-1.133/src/accredited/HARICAOVTLSRSA.signing_policy
--- igtf-policy-bundle-1.128/src/accredited/HARICAOVTLSRSA.signing_policy 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HARICAOVTLSRSA.signing_policy 2025-02-11 21:08:03.000000000 +0100
@@ -0,0 +1,5 @@
+# EACL for the HARICA OV TLS RSA ICA (GEANT TCS Gen5)
+ access_id_CA X509 '/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA OV TLS RSA'
+ pos_rights globus CA:sign
+ cond_subjects globus '"/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA OV TLS RSA" "/DC=org/DC=terena/DC=tcs/*"'
+
diff -Nru igtf-policy-bundle-1.128/src/accredited/HARICATLSECCRootCA2021.crl_url igtf-policy-bundle-1.133/src/accredited/HARICATLSECCRootCA2021.crl_url
--- igtf-policy-bundle-1.128/src/accredited/HARICATLSECCRootCA2021.crl_url 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HARICATLSECCRootCA2021.crl_url 2025-02-11 21:08:03.000000000 +0100
@@ -0,0 +1 @@
+http://crl.harica.gr/HARICA-TLS-Root-2021-ECC.crl
diff -Nru igtf-policy-bundle-1.128/src/accredited/HARICATLSECCRootCA2021.info igtf-policy-bundle-1.133/src/accredited/HARICATLSECCRootCA2021.info
--- igtf-policy-bundle-1.128/src/accredited/HARICATLSECCRootCA2021.info 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HARICATLSECCRootCA2021.info 2025-02-11 21:08:03.000000000 +0100
@@ -0,0 +1,14 @@
+# @(#)HARICATLSECCRootCA2021 self-signed root
+#
+alias = HARICATLSECCRootCA2021
+ca_url = https://repo.harica.gr/certs/HARICA-TLS-Root-2021-ECC.der
+crl_url = http://crl.harica.gr/HARICA-TLS-Root-2021-ECC.crl
+policy_url = https://repo.harica.gr/procedures
+url = https://www.harica.gr/
+email = tcs-pma@lists.geant.org
+requires = HellenicAcademicandResearchInstitutionsECCRootCA2015
+status = accredited:classic
+version = 1.133
+sha1fp.0 = BC:B0:C1:9D:E9:98:92:70:19:38:57:E9:8D:A7:B4:5D:6E:EE:01:48
+subjectdn = "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA TLS ECC Root CA 2021"
+
diff -Nru igtf-policy-bundle-1.128/src/accredited/HARICATLSECCRootCA2021.namespaces igtf-policy-bundle-1.133/src/accredited/HARICATLSECCRootCA2021.namespaces
--- igtf-policy-bundle-1.128/src/accredited/HARICATLSECCRootCA2021.namespaces 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HARICATLSECCRootCA2021.namespaces 2025-02-11 21:08:03.000000000 +0100
@@ -0,0 +1,19 @@
+##############################################################################
+#NAMESPACES-VERSION: 1.0
+#
+# @(#)HARICATLSECCRootCA2021.namespaces
+# CA alias : HARICATLSECCRootCA2021
+# subjectDN: /C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA TLS ECC Root CA 2021
+#
+TO Issuer "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA TLS ECC Root CA 2021" \
+ PERMIT Subject "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA OV TLS ECC"
+
+TO Issuer "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA TLS ECC Root CA 2021" \
+ PERMIT Subject "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=GEANT TLS ECC 1"
+
+TO Issuer "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA OV TLS ECC" \
+ PERMIT Subject "/DC=org/DC=terena/DC=tcs/.*"
+
+TO Issuer "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=GEANT TLS ECC 1" \
+ PERMIT Subject "/DC=org/DC=terena/DC=tcs/.*"
+
diff -Nru igtf-policy-bundle-1.128/src/accredited/HARICATLSECCRootCA2021.pem igtf-policy-bundle-1.133/src/accredited/HARICATLSECCRootCA2021.pem
--- igtf-policy-bundle-1.128/src/accredited/HARICATLSECCRootCA2021.pem 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HARICATLSECCRootCA2021.pem 2025-02-11 21:08:03.000000000 +0100
@@ -0,0 +1,15 @@
+-----BEGIN CERTIFICATE-----
+MIICVDCCAdugAwIBAgIQZ3SdjXfYO2rbIvT/WeK/zjAKBggqhkjOPQQDAzBsMQsw
+CQYDVQQGEwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJlc2Vh
+cmNoIEluc3RpdHV0aW9ucyBDQTEkMCIGA1UEAwwbSEFSSUNBIFRMUyBFQ0MgUm9v
+dCBDQSAyMDIxMB4XDTIxMDIxOTExMDExMFoXDTQ1MDIxMzExMDEwOVowbDELMAkG
+A1UEBhMCR1IxNzA1BgNVBAoMLkhlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJj
+aCBJbnN0aXR1dGlvbnMgQ0ExJDAiBgNVBAMMG0hBUklDQSBUTFMgRUNDIFJvb3Qg
+Q0EgMjAyMTB2MBAGByqGSM49AgEGBSuBBAAiA2IABDgI/rGgltJ6rK9JOtDA4MM7
+KKrxcm1lAEeIhPyaJmuqS7psBAqIXhfyVYf8MLA04jRYVxqEU+kw2anylnTDUR9Y
+STHMmE5gEYd103KUkE+bECUqqHgtvpBBWJAVcqeht6NCMEAwDwYDVR0TAQH/BAUw
+AwEB/zAdBgNVHQ4EFgQUyRtTgRL+BNUW0aq8mm+3oJUZbsowDgYDVR0PAQH/BAQD
+AgGGMAoGCCqGSM49BAMDA2cAMGQCMBHervjcToiwqfAircJRQO9gcS3ujwLEXQNw
+SaSS6sUUiHCm0w2wqsosQJz76YJumgIwK0eaB8bRwoF8yguWGEEbo/QwCZ61IygN
+nxS2PFOiTAZpffpskcYqSUXm7LcT4Tps
+-----END CERTIFICATE-----
diff -Nru igtf-policy-bundle-1.128/src/accredited/HARICATLSECCRootCA2021.signing_policy igtf-policy-bundle-1.133/src/accredited/HARICATLSECCRootCA2021.signing_policy
--- igtf-policy-bundle-1.128/src/accredited/HARICATLSECCRootCA2021.signing_policy 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HARICATLSECCRootCA2021.signing_policy 2025-02-11 21:08:03.000000000 +0100
@@ -0,0 +1,5 @@
+# EACL for the HARICA TLS ECC Root CA 2021
+ access_id_CA X509 '/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA TLS ECC Root CA 2021'
+ pos_rights globus CA:sign
+ cond_subjects globus '"/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA TLS ECC Root CA 2021" "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA OV TLS ECC" "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=GEANT TLS ECC 1"'
+
diff -Nru igtf-policy-bundle-1.128/src/accredited/HARICATLSRSARootCA2021.crl_url igtf-policy-bundle-1.133/src/accredited/HARICATLSRSARootCA2021.crl_url
--- igtf-policy-bundle-1.128/src/accredited/HARICATLSRSARootCA2021.crl_url 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HARICATLSRSARootCA2021.crl_url 2025-02-11 21:08:04.000000000 +0100
@@ -0,0 +1 @@
+http://crl.harica.gr/HARICA-TLS-Root-2021-RSA.crl
diff -Nru igtf-policy-bundle-1.128/src/accredited/HARICATLSRSARootCA2021.info igtf-policy-bundle-1.133/src/accredited/HARICATLSRSARootCA2021.info
--- igtf-policy-bundle-1.128/src/accredited/HARICATLSRSARootCA2021.info 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HARICATLSRSARootCA2021.info 2025-02-11 21:08:04.000000000 +0100
@@ -0,0 +1,14 @@
+# @(#)HARICATLSRSARootCA2021 self-signed root
+#
+alias = HARICATLSRSARootCA2021
+ca_url = https://repo.harica.gr/certs/HARICA-TLS-Root-2021-RSA.der
+crl_url = http://crl.harica.gr/HARICA-TLS-Root-2021-RSA.crl
+policy_url = https://repo.harica.gr/procedures
+url = https://www.harica.gr/
+email = tcs-pma@lists.geant.org
+requires = HellenicAcademicandResearchInstitutionsRootCA2015
+status = accredited:classic
+version = 1.133
+sha1fp.0 = 02:2D:05:82:FA:88:CE:14:0C:06:79:DE:7F:14:10:E9:45:D7:A5:6D
+subjectdn = "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA TLS RSA Root CA 2021"
+
diff -Nru igtf-policy-bundle-1.128/src/accredited/HARICATLSRSARootCA2021.namespaces igtf-policy-bundle-1.133/src/accredited/HARICATLSRSARootCA2021.namespaces
--- igtf-policy-bundle-1.128/src/accredited/HARICATLSRSARootCA2021.namespaces 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HARICATLSRSARootCA2021.namespaces 2025-02-11 21:08:04.000000000 +0100
@@ -0,0 +1,19 @@
+##############################################################################
+#NAMESPACES-VERSION: 1.0
+#
+# @(#)HARICATLSRSARootCA2021.namespaces
+# CA alias : HARICATLSRSARootCA2021
+# subjectDN: /C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA TLS RSA Root CA 2021
+#
+TO Issuer "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA TLS RSA Root CA 2021" \
+ PERMIT Subject "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA OV TLS RSA"
+
+TO Issuer "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA TLS RSA Root CA 2021" \
+ PERMIT Subject "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=GEANT TLS RSA 1"
+
+TO Issuer "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA OV TLS RSA" \
+ PERMIT Subject "/DC=org/DC=terena/DC=tcs/.*"
+
+TO Issuer "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=GEANT TLS RSA 1" \
+ PERMIT Subject "/DC=org/DC=terena/DC=tcs/.*"
+
diff -Nru igtf-policy-bundle-1.128/src/accredited/HARICATLSRSARootCA2021.pem igtf-policy-bundle-1.133/src/accredited/HARICATLSRSARootCA2021.pem
--- igtf-policy-bundle-1.128/src/accredited/HARICATLSRSARootCA2021.pem 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HARICATLSRSARootCA2021.pem 2025-02-11 21:08:04.000000000 +0100
@@ -0,0 +1,33 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff -Nru igtf-policy-bundle-1.128/src/accredited/HARICATLSRSARootCA2021.signing_policy igtf-policy-bundle-1.133/src/accredited/HARICATLSRSARootCA2021.signing_policy
--- igtf-policy-bundle-1.128/src/accredited/HARICATLSRSARootCA2021.signing_policy 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HARICATLSRSARootCA2021.signing_policy 2025-02-11 21:08:04.000000000 +0100
@@ -0,0 +1,5 @@
+# EACL for the HARICA TLS RSA Root CA 2021
+ access_id_CA X509 '/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA TLS RSA Root CA 2021'
+ pos_rights globus CA:sign
+ cond_subjects globus '"/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA TLS RSA Root CA 2021" "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA OV TLS RSA" "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=GEANT TLS RSA 1"'
+
diff -Nru igtf-policy-bundle-1.128/src/accredited/HellasGrid-CA-2016.info igtf-policy-bundle-1.133/src/accredited/HellasGrid-CA-2016.info
--- igtf-policy-bundle-1.128/src/accredited/HellasGrid-CA-2016.info 2024-02-28 08:59:52.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HellasGrid-CA-2016.info 2025-02-11 21:08:05.000000000 +0100
@@ -9,6 +9,6 @@
policy_url = https://www.grid.auth.gr/pki/hellasgrid-ca/documents/cps/HellasGrid-CA-CP-CPS.pdf
email = ca@hellasgrid.gr
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = 01:D3:A5:3C:4C:DF:9C:D9:10:3B:1B:8B:D4:CB:D1:7D:42:73:2C:5F
subjectdn = "/C=GR/O=HellasGrid/OU=Certification Authorities/CN=HellasGrid CA 2016"
diff -Nru igtf-policy-bundle-1.128/src/accredited/HellenicAcademicandResearchInstitutionsECCRootCA2015.crl_url igtf-policy-bundle-1.133/src/accredited/HellenicAcademicandResearchInstitutionsECCRootCA2015.crl_url
--- igtf-policy-bundle-1.128/src/accredited/HellenicAcademicandResearchInstitutionsECCRootCA2015.crl_url 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HellenicAcademicandResearchInstitutionsECCRootCA2015.crl_url 2025-02-11 21:08:05.000000000 +0100
@@ -0,0 +1 @@
+http://crl.harica.gr/HaricaECCRootCA2015.crl
diff -Nru igtf-policy-bundle-1.128/src/accredited/HellenicAcademicandResearchInstitutionsECCRootCA2015.info igtf-policy-bundle-1.133/src/accredited/HellenicAcademicandResearchInstitutionsECCRootCA2015.info
--- igtf-policy-bundle-1.128/src/accredited/HellenicAcademicandResearchInstitutionsECCRootCA2015.info 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HellenicAcademicandResearchInstitutionsECCRootCA2015.info 2025-02-11 21:08:05.000000000 +0100
@@ -0,0 +1,12 @@
+# @(#)Hellenic Academic and Research Institutions ECC RootCA 2016
+#
+alias = HellenicAcademicandResearchInstitutionsECCRootCA2015
+ca_url = https://repo.harica.gr/certs/HaricaECCRootCA2015.der
+crl_url = http://crl.harica.gr/HaricaECCRootCA2015.crl
+policy_url = https://repo.harica.gr/procedures
+url = https://www.harica.gr/
+email = tcs-pma@lists.geant.org
+status = accredited:classic
+version = 1.133
+sha1fp.0 = 9F:F1:71:8D:92:D5:9A:F3:7D:74:97:B4:BC:6F:84:68:0B:BA:B6:66
+subjectdn = "/C=GR/L=Athens/O=Hellenic Academic and Research Institutions Cert. Authority/CN=Hellenic Academic and Research Institutions ECC RootCA 2015"
diff -Nru igtf-policy-bundle-1.128/src/accredited/HellenicAcademicandResearchInstitutionsECCRootCA2015.namespaces igtf-policy-bundle-1.133/src/accredited/HellenicAcademicandResearchInstitutionsECCRootCA2015.namespaces
--- igtf-policy-bundle-1.128/src/accredited/HellenicAcademicandResearchInstitutionsECCRootCA2015.namespaces 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HellenicAcademicandResearchInstitutionsECCRootCA2015.namespaces 2025-02-11 21:08:05.000000000 +0100
@@ -0,0 +1,13 @@
+##############################################################################
+#NAMESPACES-VERSION: 1.0
+#
+# @(#)HellenicAcademicandResearchInstitutionsECCRootCA2015.signing_policy.namespaces
+# CA alias : HellenicAcademicandResearchInstitutionsECCRootCA2015
+# subord_of:
+# subjectDN: /C=GR/L=Athens/O=Hellenic Academic and Research Institutions Cert. Authority/CN=Hellenic Academic and Research Institutions ECC RootCA 2015
+# hash : HellenicAcademicandResearchInstitutionsECCRootCA2015.signing_policy
+# (generated automatically from HellenicAcademicandResearchInstitutionsECCRootCA2015.signing_policy)
+#
+TO Issuer "/C=GR/L=Athens/O=Hellenic Academic and Research Institutions Cert. Authority/CN=Hellenic Academic and Research Institutions ECC RootCA 2015" \
+ PERMIT Subject "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA TLS ECC Root CA 2021"
+
diff -Nru igtf-policy-bundle-1.128/src/accredited/HellenicAcademicandResearchInstitutionsECCRootCA2015.pem igtf-policy-bundle-1.133/src/accredited/HellenicAcademicandResearchInstitutionsECCRootCA2015.pem
--- igtf-policy-bundle-1.128/src/accredited/HellenicAcademicandResearchInstitutionsECCRootCA2015.pem 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HellenicAcademicandResearchInstitutionsECCRootCA2015.pem 2025-02-11 21:08:05.000000000 +0100
@@ -0,0 +1,17 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff -Nru igtf-policy-bundle-1.128/src/accredited/HellenicAcademicandResearchInstitutionsECCRootCA2015.signing_policy igtf-policy-bundle-1.133/src/accredited/HellenicAcademicandResearchInstitutionsECCRootCA2015.signing_policy
--- igtf-policy-bundle-1.128/src/accredited/HellenicAcademicandResearchInstitutionsECCRootCA2015.signing_policy 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HellenicAcademicandResearchInstitutionsECCRootCA2015.signing_policy 2025-02-11 21:08:05.000000000 +0100
@@ -0,0 +1,5 @@
+# EACL for the older root Hellenic Academic and Research Institutions ECC Root CA 2015 that may be present in client-supplied chains
+ access_id_CA X509 '/C=GR/L=Athens/O=Hellenic Academic and Research Institutions Cert. Authority/CN=Hellenic Academic and Research Institutions ECC RootCA 2015'
+ pos_rights globus CA:sign
+ cond_subjects globus '"/C=GR/L=Athens/O=Hellenic Academic and Research Institutions Cert. Authority/CN=Hellenic Academic and Research Institutions ECC RootCA 2015" "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA TLS ECC Root CA 2021"'
+
diff -Nru igtf-policy-bundle-1.128/src/accredited/HellenicAcademicandResearchInstitutionsRootCA2015.crl_url igtf-policy-bundle-1.133/src/accredited/HellenicAcademicandResearchInstitutionsRootCA2015.crl_url
--- igtf-policy-bundle-1.128/src/accredited/HellenicAcademicandResearchInstitutionsRootCA2015.crl_url 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HellenicAcademicandResearchInstitutionsRootCA2015.crl_url 2025-02-11 21:08:06.000000000 +0100
@@ -0,0 +1 @@
+http://crl.harica.gr/HaricaRootCA2015.crl
diff -Nru igtf-policy-bundle-1.128/src/accredited/HellenicAcademicandResearchInstitutionsRootCA2015.info igtf-policy-bundle-1.133/src/accredited/HellenicAcademicandResearchInstitutionsRootCA2015.info
--- igtf-policy-bundle-1.128/src/accredited/HellenicAcademicandResearchInstitutionsRootCA2015.info 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HellenicAcademicandResearchInstitutionsRootCA2015.info 2025-02-11 21:08:06.000000000 +0100
@@ -0,0 +1,12 @@
+# @(#)HellenicAcademicandResearchInstitutionsRootCA2015 self-signed root
+#
+alias = HellenicAcademicandResearchInstitutionsRootCA2015
+ca_url = https://repo.harica.gr/certs/HaricaRootCA2015.der
+crl_url = http://crl.harica.gr/HaricaRootCA2015.crl
+policy_url = https://repo.harica.gr/procedures
+url = https://www.harica.gr/
+email = tcs-pma@lists.geant.org
+status = accredited:classic
+version = 1.133
+sha1fp.0 = 01:0C:06:95:A6:98:19:14:FF:BF:5F:C6:B0:B6:95:EA:29:E9:12:A6
+subjectdn = "/C=GR/L=Athens/O=Hellenic Academic and Research Institutions Cert. Authority/CN=Hellenic Academic and Research Institutions RootCA 2015"
diff -Nru igtf-policy-bundle-1.128/src/accredited/HellenicAcademicandResearchInstitutionsRootCA2015.namespaces igtf-policy-bundle-1.133/src/accredited/HellenicAcademicandResearchInstitutionsRootCA2015.namespaces
--- igtf-policy-bundle-1.128/src/accredited/HellenicAcademicandResearchInstitutionsRootCA2015.namespaces 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HellenicAcademicandResearchInstitutionsRootCA2015.namespaces 2025-02-11 21:08:06.000000000 +0100
@@ -0,0 +1,13 @@
+##############################################################################
+#NAMESPACES-VERSION: 1.0
+#
+# @(#)HellenicAcademicandResearchInstitutionsRootCA2015.signing_policy.namespaces
+# CA alias : HellenicAcademicandResearchInstitutionsRootCA2015
+# subord_of:
+# subjectDN: /C=GR/L=Athens/O=Hellenic Academic and Research Institutions Cert. Authority/CN=Hellenic Academic and Research Institutions RootCA 2015
+# hash : HellenicAcademicandResearchInstitutionsRootCA2015.signing_policy
+# (generated automatically from HellenicAcademicandResearchInstitutionsRootCA2015.signing_policy)
+#
+TO Issuer "/C=GR/L=Athens/O=Hellenic Academic and Research Institutions Cert. Authority/CN=Hellenic Academic and Research Institutions RootCA 2015" \
+ PERMIT Subject "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA TLS RSA Root CA 2021"
+
diff -Nru igtf-policy-bundle-1.128/src/accredited/HellenicAcademicandResearchInstitutionsRootCA2015.pem igtf-policy-bundle-1.133/src/accredited/HellenicAcademicandResearchInstitutionsRootCA2015.pem
--- igtf-policy-bundle-1.128/src/accredited/HellenicAcademicandResearchInstitutionsRootCA2015.pem 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HellenicAcademicandResearchInstitutionsRootCA2015.pem 2025-02-11 21:08:06.000000000 +0100
@@ -0,0 +1,35 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff -Nru igtf-policy-bundle-1.128/src/accredited/HellenicAcademicandResearchInstitutionsRootCA2015.signing_policy igtf-policy-bundle-1.133/src/accredited/HellenicAcademicandResearchInstitutionsRootCA2015.signing_policy
--- igtf-policy-bundle-1.128/src/accredited/HellenicAcademicandResearchInstitutionsRootCA2015.signing_policy 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HellenicAcademicandResearchInstitutionsRootCA2015.signing_policy 2025-02-11 21:08:06.000000000 +0100
@@ -0,0 +1,5 @@
+# EACL for the older root Hellenic Academic and Research Institutions Root CA 2015 that may be present in client-supplied chains
+ access_id_CA X509 '/C=GR/L=Athens/O=Hellenic Academic and Research Institutions Cert. Authority/CN=Hellenic Academic and Research Institutions RootCA 2015'
+ pos_rights globus CA:sign
+ cond_subjects globus '"/C=GR/L=Athens/O=Hellenic Academic and Research Institutions Cert. Authority/CN=Hellenic Academic and Research Institutions RootCA 2015" "/C=GR/O=Hellenic Academic and Research Institutions CA/CN=HARICA TLS RSA Root CA 2021"'
+
diff -Nru igtf-policy-bundle-1.128/src/accredited/HKU-CA-2.crl_url igtf-policy-bundle-1.133/src/accredited/HKU-CA-2.crl_url
--- igtf-policy-bundle-1.128/src/accredited/HKU-CA-2.crl_url 2024-02-28 08:59:52.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HKU-CA-2.crl_url 1970-01-01 01:00:00.000000000 +0100
@@ -1 +0,0 @@
-http://ca.grid.hku.hk/crl/cacrl2.der
diff -Nru igtf-policy-bundle-1.128/src/accredited/HKU-CA-2.info igtf-policy-bundle-1.133/src/accredited/HKU-CA-2.info
--- igtf-policy-bundle-1.128/src/accredited/HKU-CA-2.info 2024-02-28 08:59:52.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HKU-CA-2.info 1970-01-01 01:00:00.000000000 +0100
@@ -1,8 +0,0 @@
-alias = HKU-CA-2
-crl_url = http://ca.grid.hku.hk/crl/cacrl2.der
-email = gridca@hku.hk
-status = accredited:classic
-url = http://ca.grid.hku.hk/
-version = 1.128
-sha1fp.0 = B2:6C:D3:AA:28:E5:1A:0E:9A:1D:8F:C4:80:5C:4E:0B:6F:6A:19:C7
-subjectdn = "/DC=HK/DC=HKU/DC=GRID/CN=HKU Grid CA 2"
diff -Nru igtf-policy-bundle-1.128/src/accredited/HKU-CA-2.namespaces igtf-policy-bundle-1.133/src/accredited/HKU-CA-2.namespaces
--- igtf-policy-bundle-1.128/src/accredited/HKU-CA-2.namespaces 2024-02-28 08:59:52.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HKU-CA-2.namespaces 1970-01-01 01:00:00.000000000 +0100
@@ -1,13 +0,0 @@
-##############################################################################
-#NAMESPACES-VERSION: 1.0
-#
-# @(#)HKUGridCA2.signing_policy.namespaces
-# CA alias : HKU-CA-2
-# subord_of:
-# subjectDN: /DC=HK/DC=HKU/DC=GRID/CN=HKU Grid CA 2
-# hash : HKUGridCA2.signing_policy
-# (generated automatically from HKUGridCA2.signing_policy)
-#
-TO Issuer "/DC=HK/DC=HKU/DC=GRID/CN=HKU Grid CA 2" \
- PERMIT Subject "/DC=HK/DC=HKU/DC=GRID/.*"
-
diff -Nru igtf-policy-bundle-1.128/src/accredited/HKU-CA-2.pem igtf-policy-bundle-1.133/src/accredited/HKU-CA-2.pem
--- igtf-policy-bundle-1.128/src/accredited/HKU-CA-2.pem 2024-02-28 08:59:52.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HKU-CA-2.pem 1970-01-01 01:00:00.000000000 +0100
@@ -1,33 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIFwjCCA6qgAwIBAgIBADANBgkqhkiG9w0BAQsFADBXMRIwEAYKCZImiZPyLGQB
-GRYCSEsxEzARBgoJkiaJk/IsZAEZFgNIS1UxFDASBgoJkiaJk/IsZAEZFgRHUklE
-MRYwFAYDVQQDDA1IS1UgR3JpZCBDQSAyMB4XDTE4MDQzMDExNTMyMVoXDTM4MDQy
-NTExNTMyMVowVzESMBAGCgmSJomT8ixkARkWAkhLMRMwEQYKCZImiZPyLGQBGRYD
-SEtVMRQwEgYKCZImiZPyLGQBGRYER1JJRDEWMBQGA1UEAwwNSEtVIEdyaWQgQ0Eg
-MjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANN6V502Ti4DyXMm+6j6
-4TLKyVbNc144uT2W10CaPgrsxP/fguLjHaPyPgCvdDXE6P0s0PMnk+SfP7f+4891
-msXxMSI/l3cn0N4tV8XvOd0N1buB8pFm+AcvGeW3sTsRVURmISli6jluH1lhHPpN
-LhreWEhcV9+XaSttxtlNv4lz1PzwPHUwHnFDUCro+A1y4gloaBrRRC8GsdjWhkzh
-00dU+g4XFVonUNLmDXUHVDZEpa2rTXLR2TRZ6BfhLBxW09m1wlCikidLoxlk7gwN
-SROkR4HnXvctei3fwlcSQBb1o43zWttf/c3zAB1T5qnURigfA1YkIkVkJGTU6Vb6
-LUtXtghGdRLjCy+tYyPAV2/yExgM7s+SypGO2CPtuLuefqBtz3EENaXRyl8/9SEh
-opszBoGUx4z1+YDm/qxFf35NzIYJu6CpaJKSGCEkA56sS4evDVnzUwqdzLHuDOpP
-4uq26VTNGy2BOuzf+kqaBLyVL7IlqCCwBduf+aVFrLt6jXoWdRCLfI66N3CHywH+
-g5EOEe4PQAP1vUJExZFkIrnUvgdnGt68n7Zm5dWn/+/STDPY+goHaeE/3JcIzHKm
-yRc8w7pyhJHp6XZPM2AkeJ3EW+svY66Zk2HgiH3bFPefGQlpyBn8vOashaHuM+J+
-g3GzrOZ+jYnZSM7lMXx/Px0NAgMBAAGjgZgwgZUwDwYDVR0TAQH/BAUwAwEB/zAO
-BgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFJmkCnCxv6vfglEmkqlCfZifXwd9MB8G
-A1UdIwQYMBaAFJmkCnCxv6vfglEmkqlCfZifXwd9MBgGA1UdEQQRMA+BDWdyaWRj
-YUBoa3UuaGswGAYDVR0SBBEwD4ENZ3JpZGNhQGhrdS5oazANBgkqhkiG9w0BAQsF
-AAOCAgEAjkH1TFZcQugcyG2RcN5dJLVk4jnmljqf6FVPvvuopxvQ4VcAbPmFImhk
-KXCU46rF7gW3gcebWEIpO1ADm1VyENLZvrmj8BeEr7XsvKyAyCDdy7evWucKk3Va
-zBJ+AsKZx+214JT3l4IajM0yUDXAK3BTrQw58UPuqnJtezz11LHCswEoqg0EqOfP
-SrwebDC6VqdPZ819BDV8aHSx7geh+B4LVavG0MzXGpO0K78zg5ISqbkk6kG+7pit
-PA/t7n9ZAzMtbEQlgrRMkUpZXDiuNbT8ZWmaddmIui5BOR8s6Gl/BGtdgjsGMi2w
-+G9TJJvctn/3g4U0oIs9HKzVzJRRHuMrJIlDJqkRieDgIAu6OJUOWs7/x7woRnKc
-/7JZBDMpbsvlXkbPnA8ysoPtXlDS0ZV/dxNJcr8u0WU/xDXmL47DVtmigsL2Fjx4
-Pw0iP7pS1/WmEkxHg8K19O/q/ldgB1IMa5JY2GIQpfNXSfq1Im48Z253Gzqwmxsg
-FSrFxcM5nvY4pIIvxnH1uqfi17VBvq+YCiYxj24LF5fuWeGJADKPcuBDx/4ypKqZ
-6ceS0s8yUiqDH4duTgZFVwt/0OBdEgQUDk/cWfSNkTtSYDhTIW1eizR7sOjkDQ58
-YjP0Hz8pI+jF0V+k3l/nEk0w49lXMzYA5K72fgA6m/UbLPh9o+o=
------END CERTIFICATE-----
diff -Nru igtf-policy-bundle-1.128/src/accredited/HKU-CA-2.signing_policy igtf-policy-bundle-1.133/src/accredited/HKU-CA-2.signing_policy
--- igtf-policy-bundle-1.128/src/accredited/HKU-CA-2.signing_policy 2024-02-28 08:59:52.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HKU-CA-2.signing_policy 1970-01-01 01:00:00.000000000 +0100
@@ -1,5 +0,0 @@
-#
-#
-access_id_CA X509 '/DC=HK/DC=HKU/DC=GRID/CN=HKU Grid CA 2'
-pos_rights globus CA:sign
-cond_subjects globus '"/DC=HK/DC=HKU/DC=GRID/*"'
diff -Nru igtf-policy-bundle-1.128/src/accredited/HPCI.info igtf-policy-bundle-1.133/src/accredited/HPCI.info
--- igtf-policy-bundle-1.128/src/accredited/HPCI.info 2024-02-28 08:59:52.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/HPCI.info 2025-02-11 21:08:04.000000000 +0100
@@ -8,6 +8,6 @@
status = accredited:mics
url = https://www.hpci.nii.ac.jp/ca/
policy_url = https://www.hpci.nii.ac.jp/ca/CP_CPS.html
-version = 1.128
+version = 1.133
sha1fp.0 = AD:4A:2B:02:11:0D:E3:0A:E0:41:22:02:83:F7:A5:54:EA:43:CC:3E
subjectdn = "/C=JP/O=NII/OU=HPCI/CN=HPCI CA"
diff -Nru igtf-policy-bundle-1.128/src/accredited/IGCA2.info igtf-policy-bundle-1.133/src/accredited/IGCA2.info
--- igtf-policy-bundle-1.128/src/accredited/IGCA2.info 2024-02-28 08:59:53.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/IGCA2.info 2025-02-11 21:08:06.000000000 +0100
@@ -7,6 +7,6 @@
email = igca@cdac.in
status = accredited:classic
url = http://ca.garudaindia.in/
-version = 1.128
+version = 1.133
sha1fp.0 = 54:32:0D:7D:57:6B:7F:B3:05:DF:FF:B5:50:E5:82:F8:46:39:7A:21
subjectdn = "/DC=IN/DC=GARUDAINDIA/CN=Indian Grid Certification Authority 2"
diff -Nru igtf-policy-bundle-1.128/src/accredited/IHEP-2013.info igtf-policy-bundle-1.133/src/accredited/IHEP-2013.info
--- igtf-policy-bundle-1.128/src/accredited/IHEP-2013.info 2024-02-28 08:59:53.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/IHEP-2013.info 2025-02-11 21:08:07.000000000 +0100
@@ -8,6 +8,6 @@
email = ihepca@maillist.ihep.ac.cn
status = accredited:classic
url = https://cagrid.ihep.ac.cn/
-version = 1.128
+version = 1.133
sha1fp.0 = B3:24:D7:42:95:36:B2:CC:1E:F9:75:5C:C4:D2:47:7F:CE:E0:B8:19
subjectdn = "/C=CN/O=HEP/CN=Institute of High Energy Physics Certification Authority"
diff -Nru igtf-policy-bundle-1.128/src/accredited/InCommon-RSA-IGTF-Server-CA-3.info igtf-policy-bundle-1.133/src/accredited/InCommon-RSA-IGTF-Server-CA-3.info
--- igtf-policy-bundle-1.128/src/accredited/InCommon-RSA-IGTF-Server-CA-3.info 2024-02-28 08:59:55.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/InCommon-RSA-IGTF-Server-CA-3.info 2025-02-11 21:08:08.000000000 +0100
@@ -6,6 +6,6 @@
requires = USERTrustRSACertificationAuthority
email = admin@incommon.org
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = 6A:F9:A4:7F:00:4F:34:14:35:0D:A7:76:BF:9C:D3:A2:17:D1:D0:16
subjectdn = "/C=US/O=Internet2/CN=InCommon RSA IGTF Server CA 3"
diff -Nru igtf-policy-bundle-1.128/src/accredited/IRAN-GRID-GCG-G2.info igtf-policy-bundle-1.133/src/accredited/IRAN-GRID-GCG-G2.info
--- igtf-policy-bundle-1.128/src/accredited/IRAN-GRID-GCG-G2.info 2024-02-28 08:59:54.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/IRAN-GRID-GCG-G2.info 2025-02-11 21:08:07.000000000 +0100
@@ -8,6 +8,6 @@
email = ca-manager@ipm.ir
status = accredited:classic
url = http://irangrid.ipm.ac.ir/
-version = 1.128
+version = 1.133
sha1fp.0 = 9D:3B:E5:46:9D:2E:E4:AB:57:DD:36:F4:ED:24:D7:70:41:C6:76:69
subjectdn = "/C=IR/O=IPM/OU=GCG/CN=IRAN-GRID-G2 CA"
diff -Nru igtf-policy-bundle-1.128/src/accredited/KEK.info igtf-policy-bundle-1.133/src/accredited/KEK.info
--- igtf-policy-bundle-1.128/src/accredited/KEK.info 2024-02-28 08:59:55.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/KEK.info 2025-02-11 21:08:08.000000000 +0100
@@ -3,6 +3,6 @@
email = kekgridca-contact@ml.post.kek.jp
status = accredited:classic
url = https://gridca.kek.jp/
-version = 1.128
+version = 1.133
sha1fp.0 = 7F:F3:8B:69:A2:9A:1F:F2:EA:FF:99:7F:EB:40:9B:B7:DD:47:5A:1D
subjectdn = "/C=JP/O=KEK/OU=CRC/CN=KEK GRID Certificate Authority"
diff -Nru igtf-policy-bundle-1.128/src/accredited/KISTIv3.info igtf-policy-bundle-1.133/src/accredited/KISTIv3.info
--- igtf-policy-bundle-1.128/src/accredited/KISTIv3.info 2024-02-28 08:59:55.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/KISTIv3.info 2025-02-11 21:08:09.000000000 +0100
@@ -4,6 +4,6 @@
status = accredited:classic
url = http://ca.gridcenter.or.kr/
policy_url = http://ca.gridcenter.or.kr/cps/KISTI-CA-CPCPS-3.0.pdf
-version = 1.128
+version = 1.133
sha1fp.0 = 06:52:34:EE:81:0A:E5:9C:43:68:54:84:8C:8A:D4:DF:0D:75:A7:45
subjectdn = "/C=KR/O=KISTI/CN=KISTI Certification Authority"
diff -Nru igtf-policy-bundle-1.128/src/accredited/LIPCA.crl_url igtf-policy-bundle-1.133/src/accredited/LIPCA.crl_url
--- igtf-policy-bundle-1.128/src/accredited/LIPCA.crl_url 2024-02-28 08:59:56.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/LIPCA.crl_url 1970-01-01 01:00:00.000000000 +0100
@@ -1 +0,0 @@
-http://ca.lip.pt/crl/crl.der
diff -Nru igtf-policy-bundle-1.128/src/accredited/LIPCA.info igtf-policy-bundle-1.133/src/accredited/LIPCA.info
--- igtf-policy-bundle-1.128/src/accredited/LIPCA.info 2024-02-28 08:59:56.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/LIPCA.info 1970-01-01 01:00:00.000000000 +0100
@@ -1,12 +0,0 @@
-#
-# @(#)$Id: 11b4a5a2.info,v 1.5 2011/08/04 17:56:37 pmacvsdg Exp $
-# Information for CA LIPCA
-# obtained from 11b4a5a2 in LIPCA/
-alias = LIPCA
-crl_url = http://ca.lip.pt/crl/crl.der
-email = ca@lip.pt
-status = accredited:classic
-url = http://ca.lip.pt/
-version = 1.128
-sha1fp.0 = 06:BA:B3:02:A6:8E:3F:55:48:F9:4C:1B:3A:E6:B2:E4:BA:ED:5A:F7
-subjectdn = "/C=PT/O=LIPCA/CN=LIP Certification Authority"
diff -Nru igtf-policy-bundle-1.128/src/accredited/LIPCA.namespaces igtf-policy-bundle-1.133/src/accredited/LIPCA.namespaces
--- igtf-policy-bundle-1.128/src/accredited/LIPCA.namespaces 2024-02-28 08:59:56.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/LIPCA.namespaces 1970-01-01 01:00:00.000000000 +0100
@@ -1,13 +0,0 @@
-##############################################################################
-#NAMESPACES-VERSION: 1.0
-#
-# @(#)11b4a5a2.namespaces
-# CA alias : LIPCA
-# subord_of:
-# subjectDN: /C=PT/O=LIPCA/CN=LIP Certification Authority
-# hash : 11b4a5a2
-# (generated automatically from ./LIPCA/11b4a5a2.signing_policy)
-#
-TO Issuer "/C=PT/O=LIPCA/CN=LIP Certification Authority" \
- PERMIT Subject "/C=PT/O=LIPCA/.*"
-
diff -Nru igtf-policy-bundle-1.128/src/accredited/LIPCA.pem igtf-policy-bundle-1.133/src/accredited/LIPCA.pem
--- igtf-policy-bundle-1.128/src/accredited/LIPCA.pem 2024-02-28 08:59:56.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/LIPCA.pem 1970-01-01 01:00:00.000000000 +0100
@@ -1,20 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDQzCCAiugAwIBAgIBADANBgkqhkiG9w0BAQUFADBDMQswCQYDVQQGEwJQVDEO
-MAwGA1UEChMFTElQQ0ExJDAiBgNVBAMTG0xJUCBDZXJ0aWZpY2F0aW9uIEF1dGhv
-cml0eTAeFw0wNDA2MDMxNjQyNTlaFw0yNDA2MDIxNjQyNTlaMEMxCzAJBgNVBAYT
-AlBUMQ4wDAYDVQQKEwVMSVBDQTEkMCIGA1UEAxMbTElQIENlcnRpZmljYXRpb24g
-QXV0aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjv/8Bi+
-WGQBCgDP4LzS/sFXbKCqUrEGhFQaZdikE8B5zt7AZFihi/xh470vCQ1i8mhPYwlD
-EDEBe/j2yyBp5fdYmkZjMdzOUjHTY+IDlvhIE9iD19yiYHM+x38HgYofzZ1oS92u
-1R4RWEHBDBQjUvCzaVwzTf/giguf6/mUKg0M8pxWAXgilHLrUpbff1fmDEKM6LGN
-p8Ey1G+3k7VdFzSt8VC0W+DZV8EWJcnpYdnZ0z+2J1FfiqoJpLRNM4efirJBIMBE
-l0GMI94PlbpnH0WBgHpSn1h9tORnVsqDop+dJz4aoPMeouQNirHIwNy4EvDwZ8XS
-vChDmiq04M00SQIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRC
-rm73hh6e6Gjvz3lTOGJOAPJC7DAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQEF
-BQADggEBAHqUt6tYo+R/Des2nMcsA5pvNKJgP5MlaiPsMK0rDEVclB1LFa6hDXU3
-YK0npUf4O+xYd4rrSRtoy+vzsnq8PPvndr3DKlJNYy1mmZJHig2JsipCUu/KCKi9
-H6ZXtBBrNPovrl/IdysBcDwvl93dMv0l1CnCLDUI6IvlH52HUCDym1ykYdAQxJTO
-tTY/jF/jpJXfKLl1fhC1ldxBvNdMFg6OfUv7wZ7Uyd5rWnPNHGsoxLRs4kCqFqC9
-2CkR9S4ipmvra9qLzFuGIrYkTRhwNqgk/SWdp5dObUC31Rhap8taN3zWnXH8zV1f
-ZFnUwPIYwDoXAKYbxEZL1VuzlC3Itr0=
------END CERTIFICATE-----
diff -Nru igtf-policy-bundle-1.128/src/accredited/LIPCA.signing_policy igtf-policy-bundle-1.133/src/accredited/LIPCA.signing_policy
--- igtf-policy-bundle-1.128/src/accredited/LIPCA.signing_policy 2024-02-28 08:59:56.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/LIPCA.signing_policy 1970-01-01 01:00:00.000000000 +0100
@@ -1,4 +0,0 @@
-# LIP Certification Authority
-access_id_CA X509 '/C=PT/O=LIPCA/CN=LIP Certification Authority'
-pos_rights globus CA:sign
-cond_subjects globus '"/C=PT/O=LIPCA/*"'
diff -Nru igtf-policy-bundle-1.128/src/accredited/MaGrid.info igtf-policy-bundle-1.133/src/accredited/MaGrid.info
--- igtf-policy-bundle-1.128/src/accredited/MaGrid.info 2024-02-28 08:59:57.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/MaGrid.info 2025-02-11 21:08:10.000000000 +0100
@@ -5,6 +5,6 @@
ca_url = http://ra.magrid.ma/pub/cacert/cacert.pem
email = magrid@cnrst.ma
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = 65:AD:EF:26:0B:4A:5C:05:72:3F:B6:92:99:0B:96:CA:7B:99:6E:F4
subjectdn = "/C=MA/O=MaGrid/CN=MaGrid CA"
diff -Nru igtf-policy-bundle-1.128/src/accredited/MARGI.crl_url igtf-policy-bundle-1.133/src/accredited/MARGI.crl_url
--- igtf-policy-bundle-1.128/src/accredited/MARGI.crl_url 2024-02-28 08:59:56.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/MARGI.crl_url 1970-01-01 01:00:00.000000000 +0100
@@ -1 +0,0 @@
-http://www.margi.marnet.net.mk/CA/margi-v2.crl
diff -Nru igtf-policy-bundle-1.128/src/accredited/MARGI.info igtf-policy-bundle-1.133/src/accredited/MARGI.info
--- igtf-policy-bundle-1.128/src/accredited/MARGI.info 2024-02-28 08:59:56.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/MARGI.info 1970-01-01 01:00:00.000000000 +0100
@@ -1,13 +0,0 @@
-#
-# @(#)$Id: 7d0d064a.info,v 1.1 2008/03/14 08:34:26 pmacvsdg Exp $
-# CA: MARGI (mk)
-#
-alias = MARGI
-url = www.margi.marnet.net.mk
-ca_url = www.margi-ca.marnet.net.mk
-crl_url = http://www.margi.marnet.net.mk/CA/margi-v2.crl
-email = margi-ca@margi.marnet.net.mk
-status = accredited:classic
-version = 1.128
-sha1fp.0 = 8F:F9:FF:6C:59:A8:FE:0F:85:B6:54:E7:90:A4:41:EC:02:92:C2:76
-subjectdn = "/C=MK/O=MARGI/CN=MARGI-CA"
diff -Nru igtf-policy-bundle-1.128/src/accredited/MARGI.namespaces igtf-policy-bundle-1.133/src/accredited/MARGI.namespaces
--- igtf-policy-bundle-1.128/src/accredited/MARGI.namespaces 2024-02-28 08:59:56.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/MARGI.namespaces 1970-01-01 01:00:00.000000000 +0100
@@ -1,13 +0,0 @@
-##############################################################################
-#NAMESPACES-VERSION: 1.0
-#
-# @(#)$Id$
-# CA alias : MARGI
-# subord_of:
-# subjectDN: /C=MK/O=MARGI/CN=MARGI-CA
-# hash : 7d0d064a
-# (generated automatically from 7d0d064a.signing_policy)
-#
-TO Issuer "/C=MK/O=MARGI/CN=MARGI-CA" \
- PERMIT Subject "/C=MK/O=MARGI/.*"
-
diff -Nru igtf-policy-bundle-1.128/src/accredited/MARGI.pem igtf-policy-bundle-1.133/src/accredited/MARGI.pem
--- igtf-policy-bundle-1.128/src/accredited/MARGI.pem 2024-02-28 08:59:56.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/MARGI.pem 1970-01-01 01:00:00.000000000 +0100
@@ -1,22 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDkjCCAnqgAwIBAgIBADANBgkqhkiG9w0BAQUFADAwMQswCQYDVQQGEwJNSzEO
-MAwGA1UEChMFTUFSR0kxETAPBgNVBAMTCE1BUkdJLUNBMB4XDTA4MDEyNTE1Mjcx
-NVoXDTI4MDEyMDE1MjcxNVowMDELMAkGA1UEBhMCTUsxDjAMBgNVBAoTBU1BUkdJ
-MREwDwYDVQQDEwhNQVJHSS1DQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
-ggEBAKrkupZTcmlsSlxo4B12VAW+LYn2GakcxBvFdJx3bMtJX6fnfvSidZPrBcJ8
-BPAb4LdQwFj9FIP9+XnYLpP0V5mkvHoMc+JdtgqpTUfrargPS4R1Ud3iMwSirFRy
-+w3QQt/wAnPrRd5nSIEYueMg8wIOD4gPGaF0CEva82TVCF993Fgh81aeMOcExOzv
-LxPzvo6EA+cZGqpcM7EAKEqFWuxOQBsgClUIDI+omE+KLao2xluSOcyBO/LdMXAe
-6G5X/sCVVbOtEeM5PH1nax3k4z/jM64P+vCg09fuq0gd0kWz5gNE3oUdtGhy/Doq
-pGbcLZTRsNePL6Ptn2mVthKY/5cCAwEAAaOBtjCBszAPBgNVHRMBAf8EBTADAQH/
-MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQU2Nzk2ZMcQ1GLmDBSA9xD0OC2c8gw
-HwYDVR0jBBgwFoAU2Nzk2ZMcQ1GLmDBSA9xD0OC2c8gwJwYDVR0RBCAwHoEcbWFy
-Z2ktY2FAbWFyZ2kubWFybmV0Lm5ldC5tazAnBgNVHRIEIDAegRxtYXJnaS1jYUBt
-YXJnaS5tYXJuZXQubmV0Lm1rMA0GCSqGSIb3DQEBBQUAA4IBAQA9d2frbLY4MCEN
-9laBxwwq9v6hzeQNX8Krx7uxhA4QxM9EqbOpU1XaJxwWjrkzee4LIjTHBKf7AHGn
-bwcZuuGFFECu2wOozFA1+8eYLsp55Yi55dRfygmMXBWQZUsHsTi0wKU14yNKSKWh
-hds4TYJT+Xk9BFpfw0PKj+J6LxMpbdp1d2RZC0nL/iQyXOsctyvjsZ5i55/CKDNa
-O3qBL0bAawatQxrEfr5T7/nPcSuRX92mpGp+CfNSYMTR5GQGPA0gtHOJ55NaKSLx
-TDb3zd6SzzM9fe6xWEwbAWl+H+MvLzd+hJaryVqSBjayzY+Oep0/MI6QgfKO4HzY
-eUvIhZYy
------END CERTIFICATE-----
diff -Nru igtf-policy-bundle-1.128/src/accredited/MARGI.signing_policy igtf-policy-bundle-1.133/src/accredited/MARGI.signing_policy
--- igtf-policy-bundle-1.128/src/accredited/MARGI.signing_policy 2024-02-28 08:59:56.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/MARGI.signing_policy 1970-01-01 01:00:00.000000000 +0100
@@ -1,6 +0,0 @@
-# EACL MARGI CA
-# @(#)$Id$
-#
-access_id_CA X509 '/C=MK/O=MARGI/CN=MARGI-CA'
-pos_rights globus CA:sign
-cond_subjects globus '"/C=MK/O=MARGI/CN=MARGI-CA" "/C=MK/O=MARGI/*"'
diff -Nru igtf-policy-bundle-1.128/src/accredited/MREN-CA.crl_url igtf-policy-bundle-1.133/src/accredited/MREN-CA.crl_url
--- igtf-policy-bundle-1.128/src/accredited/MREN-CA.crl_url 2024-02-28 08:59:57.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/MREN-CA.crl_url 2025-02-11 21:08:09.000000000 +0100
@@ -1 +1 @@
-http://www.mren-ca.ac.me/ca/crl-v2.crl
+http://mren-ca.ucg.ac.me/ca/crl-v2.crl
diff -Nru igtf-policy-bundle-1.128/src/accredited/MREN-CA.info igtf-policy-bundle-1.133/src/accredited/MREN-CA.info
--- igtf-policy-bundle-1.128/src/accredited/MREN-CA.info 2024-02-28 08:59:57.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/MREN-CA.info 2025-02-11 21:08:09.000000000 +0100
@@ -1,10 +1,10 @@
-# @(#)$Id: 3232b9bc.info,v 1.3 2008/07/28 13:08:32 pmacvsdg Exp $
+# @(#)MREN CA
alias = MREN-CA
url = http://mren-ca.ac.me/
ca_url = http://www.mren-ca.ac.me/ca/ca.crt
-crl_url = http://www.mren-ca.ac.me/ca/crl-v2.crl
+crl_url = http://mren-ca.ucg.ac.me/ca/crl-v2.crl
email = mren-ca@ac.me
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = B5:3C:77:51:15:8F:BD:D4:B5:74:C0:02:E2:8C:EC:8E:02:33:99:6A
subjectdn = "/DC=me/DC=ac/DC=MREN/CN=MREN-CA"
diff -Nru igtf-policy-bundle-1.128/src/accredited/NIKHEF.info igtf-policy-bundle-1.133/src/accredited/NIKHEF.info
--- igtf-policy-bundle-1.128/src/accredited/NIKHEF.info 2024-02-28 08:59:58.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/NIKHEF.info 2025-02-11 21:08:10.000000000 +0100
@@ -9,6 +9,6 @@
email = ca@dutchgrid.nl
status = accredited:classic
url = http://ca.dutchgrid.nl/medium/
-version = 1.128
+version = 1.133
sha1fp.0 = F8:4D:ED:9B:42:34:58:F4:3B:AF:BF:0A:6E:1A:84:5C:18:34:5A:A3
subjectdn = "/C=NL/O=NIKHEF/CN=NIKHEF medium-security certification auth"
diff -Nru igtf-policy-bundle-1.128/src/accredited/NorduGrid-2015.info igtf-policy-bundle-1.133/src/accredited/NorduGrid-2015.info
--- igtf-policy-bundle-1.128/src/accredited/NorduGrid-2015.info 2024-02-28 08:59:58.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/NorduGrid-2015.info 2025-02-11 21:08:11.000000000 +0100
@@ -5,6 +5,6 @@
email = ca@nordugrid.org
crl_url = http://ca.nordugrid.org/NorduGrid-2015.crl
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = 7D:4E:B2:72:27:1D:CB:FF:04:67:59:F0:60:27:22:2B:B8:02:98:EF
subjectdn = "/O=Grid/O=NorduGrid/CN=NorduGrid Certification Authority 2015"
diff -Nru igtf-policy-bundle-1.128/src/accredited/PK-Grid-2007.info igtf-policy-bundle-1.133/src/accredited/PK-Grid-2007.info
--- igtf-policy-bundle-1.128/src/accredited/PK-Grid-2007.info 2024-02-28 08:59:59.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/PK-Grid-2007.info 2025-02-11 21:08:11.000000000 +0100
@@ -6,6 +6,6 @@
url = http://www.ncp.edu.pk/pk-grid-ca/
email = pkgrid-ca@ncp.edu.pk
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = A9:39:DC:47:B9:AC:C9:22:88:59:DC:25:C7:62:AE:24:CC:89:37:45
subjectdn = "/C=PK/O=NCP/CN=PK-GRID-CA"
diff -Nru igtf-policy-bundle-1.128/src/accredited/PKIUNAMgrid.info igtf-policy-bundle-1.133/src/accredited/PKIUNAMgrid.info
--- igtf-policy-bundle-1.128/src/accredited/PKIUNAMgrid.info 2024-02-28 08:59:59.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/PKIUNAMgrid.info 2025-02-11 21:08:12.000000000 +0100
@@ -9,5 +9,5 @@
email = camanager@unam.mx
status = accredited:classic
sha1fp.0 = 1D:05:8F:6A:75:5A:A8:36:12:88:22:D2:8A:3A:31:EA:6C:2B:5A:B8
-version = 1.128
+version = 1.133
subjectdn = "/C=MX/O=UNAM/OU=UNAMgrid/CN=PKIUNAMgrid"
diff -Nru igtf-policy-bundle-1.128/src/accredited/PolishGrid-2019.info igtf-policy-bundle-1.133/src/accredited/PolishGrid-2019.info
--- igtf-policy-bundle-1.128/src/accredited/PolishGrid-2019.info 2024-02-28 09:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/PolishGrid-2019.info 2025-02-11 21:08:12.000000000 +0100
@@ -7,6 +7,6 @@
crl_url = http://www.man.poznan.pl/plgrid-ca/2019/crl.crl
ca_url = http://www.man.poznan.pl/plgrid-ca/PolishGridCA-2019.pem
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = DD:D9:1C:6A:B8:BE:B5:B3:98:F0:81:F1:F2:35:56:4E:07:07:15:09
subjectdn = "/C=PL/O=GRID/CN=Polish Grid CA 2019"
diff -Nru igtf-policy-bundle-1.128/src/accredited/RCauth-Pilot-ICA-G1.info igtf-policy-bundle-1.133/src/accredited/RCauth-Pilot-ICA-G1.info
--- igtf-policy-bundle-1.128/src/accredited/RCauth-Pilot-ICA-G1.info 2024-02-28 09:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/RCauth-Pilot-ICA-G1.info 2025-02-11 21:08:13.000000000 +0100
@@ -10,6 +10,6 @@
email = ca@rcauth.eu
status = accredited:iota
url = https://www.rcauth.eu/
-version = 1.128
+version = 1.133
sha1fp.0 = 8B:F3:1F:7D:46:57:B4:19:F5:D7:CB:A8:17:4E:E6:F9:C9:18:29:4D
subjectdn = "/DC=eu/DC=rcauth/O=Certification Authorities/CN=Research and Collaboration Authentication Pilot G1 CA"
diff -Nru igtf-policy-bundle-1.128/src/accredited/RDIG.info igtf-policy-bundle-1.133/src/accredited/RDIG.info
--- igtf-policy-bundle-1.128/src/accredited/RDIG.info 2024-02-28 09:00:01.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/RDIG.info 2025-02-11 21:08:13.000000000 +0100
@@ -8,6 +8,6 @@
email = rdig-ca-support@grid.kiae.ru
status = accredited:classic
url = http://ca.grid.kiae.ru/RDIG/
-version = 1.128
-sha1fp.0 = 69:E3:8A:00:77:1B:03:E7:E8:FD:CF:A5:F5:E9:4E:8D:E9:78:C4:A6
+version = 1.133
+sha1fp.0 = 69:94:15:0F:7D:8A:81:B2:4B:67:94:B6:B5:EF:F9:2E:63:A8:B4:21
subjectdn = "/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA"
diff -Nru igtf-policy-bundle-1.128/src/accredited/RDIG.pem igtf-policy-bundle-1.133/src/accredited/RDIG.pem
--- igtf-policy-bundle-1.128/src/accredited/RDIG.pem 2024-02-28 09:00:01.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/RDIG.pem 2025-02-11 21:08:13.000000000 +0100
@@ -1,33 +1,31 @@
-----BEGIN CERTIFICATE-----
-MIIFrjCCBJagAwIBAgIBADANBgkqhkiG9w0BAQUFADBFMQswCQYDVQQGEwJSVTEN
-MAsGA1UEChMEUkRJRzEnMCUGA1UEAxMeUnVzc2lhbiBEYXRhLUludGVuc2l2ZSBH
-cmlkIENBMB4XDTA1MDgwODIwMDA0OFoXDTI1MDgwMzIwMDA0OFowRTELMAkGA1UE
-BhMCUlUxDTALBgNVBAoTBFJESUcxJzAlBgNVBAMTHlJ1c3NpYW4gRGF0YS1JbnRl
-bnNpdmUgR3JpZCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMcK
-xI/r0U8LpUWzdz8idKvRtPLzaa6kTFsPX9m3xXcic84kBEoHGCofAl5dsMwYa/iM
-0oCyetIKAPaBK07ZHCUEXznbVMSZZ29ecqu4issS8PAR6f3neO1fBGDA3PRyqR4Q
-5japLTxmLCdyL4D71aT1G3qtgeIYtCbT6auJBxB/O1ExSEEjmNXtgVDZ6JoLrxhQ
-9NxyksJ8oHjvk5B6E7iuvcVwW+JnJD2VrmuMnpaoHvl8yxB+6R0PPpCxNGe/XTJa
-XYbKcFk37LIrcUQVEPME/3FdCO344XRSm2MBM37fD5XJH9td+FBk5DaTxuCzyj63
-Y/ROoyIQxLZw6Jh1xR0CAwEAAaOCAqcwggKjMA8GA1UdEwEB/wQFMAMBAf8wDgYD
-VR0PAQH/BAQDAgEGMBEGCWCGSAGG+EIBAQQEAwIABzAdBgNVHQ4EFgQUtxr5ff7S
-HmGpqYwhaIt+YIy5cFkwbQYDVR0jBGYwZIAUtxr5ff7SHmGpqYwhaIt+YIy5cFmh
-SaRHMEUxCzAJBgNVBAYTAlJVMQ0wCwYDVQQKEwRSRElHMScwJQYDVQQDEx5SdXNz
-aWFuIERhdGEtSW50ZW5zaXZlIEdyaWQgQ0GCAQAwPQYDVR0SBDYwNIEUcmRpZy1j
-YUBncmlkLmtpYWUucnWGHGh0dHA6Ly9jYS5ncmlkLmtpYWUucnUvUkRJRy8wPwYI
-KwYBBQUHAQEEMzAxMC8GCCsGAQUFBzAChiNodHRwOi8vY2EuZ3JpZC5raWFlLnJ1
-L1JESUcvY2EuaHRtbDA2BgNVHR8ELzAtMCugKaAnhiVodHRwOi8vY2EuZ3JpZC5r
-aWFlLnJ1L1JESUcvY2FjcmwucGVtMEsGA1UdIAREMEIwQAYLKwYBBAGBrHsBAQEw
-MTAvBggrBgEFBQcCARYjaHR0cDovL2NhLmdyaWQua2lhZS5ydS9SRElHL3BvbGlj
-eS8wKwYJYIZIAYb4QgECBB4WHGh0dHA6Ly9jYS5ncmlkLmtpYWUucnUvUkRJRy8w
-FgYJYIZIAYb4QgEIBAkWB3BvbGljeS8wHQYJYIZIAYb4QgEEBBAWDmNnaS1iaW4v
-Z2V0Y3JsMCAGCWCGSAGG+EIBAwQTFhFjZ2ktYmluL2NoZWNrcmV2PzBUBglghkgB
-hvhCAQ0ERxZFSXNzdWllZCBieSBSRElHIENlcnRpZmljYXRpb24gQXV0aG9yaXR5
-LCBodHRwOi8vY2EuZ3JpZC5raWFlLnJ1L1JESUcvMA0GCSqGSIb3DQEBBQUAA4IB
-AQB5XlkIBjEEhoJNtFTNUExtQc/jy8XOIGg7pgk/W15+i/XquBwaTw7hKbzrvwmI
-cCzhkk52At18EI03xT0Zp3r3RfxelrFVJ/MBgwPDTZXXWrEy8wAjx2WzXOD+Fph9
-wzzikXQyxNuzYdP/XK/7gdGfDv0u/YrmjE/WmTUTteT0OKyVeiOSz1UgcdmxXXvj
-Y9q9WFplLxJYsUn5pLoPERyFcfDn9H5HcvPRmfcziRJTQVr8K50V+w9xdcHINfSe
-Pje9tNSSR2rR+7cTr24L1OFvoTyB9wispM9Nx54QzRRLcDywRdJR0B/AzUnnuIKS
-Tv3e9SSWW6fCU/J7ajc9sdoW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-----END CERTIFICATE-----
diff -Nru igtf-policy-bundle-1.128/src/accredited/ResearchandEducationTrustECCRootCA.info igtf-policy-bundle-1.133/src/accredited/ResearchandEducationTrustECCRootCA.info
--- igtf-policy-bundle-1.128/src/accredited/ResearchandEducationTrustECCRootCA.info 2024-02-28 09:00:02.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/ResearchandEducationTrustECCRootCA.info 2025-02-11 21:08:14.000000000 +0100
@@ -8,6 +8,6 @@
url = https://security.geant.org/trusted-certificate-services/
email = tcs-pma@lists.geant.org
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = 2E:60:72:13:C0:06:73:23:38:CA:83:D6:87:56:09:3F:F2:1E:E2:96
subjectdn = "/O=Research and Education Trust/CN=Research and Education Trust ECC Root CA"
diff -Nru igtf-policy-bundle-1.128/src/accredited/ResearchandEducationTrustRSARootCA.info igtf-policy-bundle-1.133/src/accredited/ResearchandEducationTrustRSARootCA.info
--- igtf-policy-bundle-1.128/src/accredited/ResearchandEducationTrustRSARootCA.info 2024-02-28 09:00:03.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/ResearchandEducationTrustRSARootCA.info 2025-02-11 21:08:14.000000000 +0100
@@ -8,6 +8,6 @@
url = https://security.geant.org/trusted-certificate-services/
email = tcs-pma@lists.geant.org
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = 82:B6:21:AA:3E:55:62:54:38:3C:17:EB:43:0A:10:1F:B5:4A:37:F6
subjectdn = "/O=Research and Education Trust/CN=Research and Education Trust RSA Root CA"
diff -Nru igtf-policy-bundle-1.128/src/accredited/REUNA-ca.info igtf-policy-bundle-1.133/src/accredited/REUNA-ca.info
--- igtf-policy-bundle-1.128/src/accredited/REUNA-ca.info 2024-02-28 09:00:01.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/REUNA-ca.info 2025-02-11 21:08:14.000000000 +0100
@@ -8,5 +8,5 @@
email = reuna-ca@reuna.cl
status = accredited:classic
sha1fp.0 = 94:CE:21:D2:CB:3E:DF:2A:02:C1:EC:00:3B:2D:C0:18:A0:53:DE:85
-version = 1.128
+version = 1.133
subjectdn = "/C=CL/O=REUNACA/CN=REUNA Certification Authority"
diff -Nru igtf-policy-bundle-1.128/src/accredited/RomanianGRID.info igtf-policy-bundle-1.133/src/accredited/RomanianGRID.info
--- igtf-policy-bundle-1.128/src/accredited/RomanianGRID.info 2024-02-28 09:00:03.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/RomanianGRID.info 2025-02-11 21:08:15.000000000 +0100
@@ -7,6 +7,6 @@
policy_url = http://www.romaniangrid.ro/docs/RomanianGRID_CA_v1.4.pdf
email = grid-ca@rosa.ro
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = 18:1F:F6:66:28:41:94:6E:57:C3:D3:4D:F8:B3:B6:31:4E:FB:26:09
subjectdn = "/DC=RO/DC=RomanianGRID/O=ROSA/OU=Certification Authority/CN=RomanianGRID CA"
diff -Nru igtf-policy-bundle-1.128/src/accredited/seegrid-ca-2013.info igtf-policy-bundle-1.133/src/accredited/seegrid-ca-2013.info
--- igtf-policy-bundle-1.128/src/accredited/seegrid-ca-2013.info 2024-02-28 09:00:17.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/seegrid-ca-2013.info 2025-02-11 21:08:27.000000000 +0100
@@ -9,6 +9,6 @@
crl_url = http://crl.hellasgrid.gr/seegrid-ca-2013/crl-v2.pem
email = see-grid-ca@hellasgrid.gr
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = DD:8C:D9:6E:18:AB:53:92:40:15:BF:DA:EB:F9:6F:31:EB:4F:69:66
subjectdn = "/DC=ORG/DC=SEE-GRID/CN=SEE-GRID CA 2013"
diff -Nru igtf-policy-bundle-1.128/src/accredited/SiGNET-CA.info igtf-policy-bundle-1.133/src/accredited/SiGNET-CA.info
--- igtf-policy-bundle-1.128/src/accredited/SiGNET-CA.info 2024-02-28 09:00:04.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/SiGNET-CA.info 2025-02-11 21:08:16.000000000 +0100
@@ -9,6 +9,6 @@
email = signet-ca@ijs.si
status = accredited:classic
url = http://signet-ca.ijs.si/
-version = 1.128
+version = 1.133
sha1fp.0 = 15:01:9E:62:9D:F2:5C:C6:5F:A7:13:7E:E3:85:3A:DD:20:BC:54:44
subjectdn = "/C=SI/O=SiGNET/CN=SiGNET CA"
diff -Nru igtf-policy-bundle-1.128/src/accredited/SlovakGrid.info igtf-policy-bundle-1.133/src/accredited/SlovakGrid.info
--- igtf-policy-bundle-1.128/src/accredited/SlovakGrid.info 2024-02-28 09:00:05.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/SlovakGrid.info 2025-02-11 21:08:16.000000000 +0100
@@ -7,6 +7,6 @@
email = ca.ui@sav.sk
crl_url = http://ups.savba.sk/ca/slovakgrid.crl
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = 24:C9:E7:2C:BE:65:9A:90:0F:A5:40:46:02:6D:E2:0D:B4:B8:F3:5A
subjectdn = "/C=SK/O=SlovakGrid/CN=SlovakGrid CA"
diff -Nru igtf-policy-bundle-1.128/src/accredited/SRCE.info igtf-policy-bundle-1.133/src/accredited/SRCE.info
--- igtf-policy-bundle-1.128/src/accredited/SRCE.info 2024-02-28 09:00:04.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/SRCE.info 2025-02-11 21:08:15.000000000 +0100
@@ -4,6 +4,6 @@
crl_url = http://ra.srce.hr/cacrl.crl
email = srce-ca@srce.hr
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = 68:20:69:5A:4E:95:F4:48:BB:8F:BE:DE:67:77:84:C0:0D:E5:46:C0
subjectdn = "/C=HR/O=edu/OU=srce/CN=SRCE CA"
diff -Nru igtf-policy-bundle-1.128/src/accredited/TERENAeSciencePersonalCA3.crl_url igtf-policy-bundle-1.133/src/accredited/TERENAeSciencePersonalCA3.crl_url
--- igtf-policy-bundle-1.128/src/accredited/TERENAeSciencePersonalCA3.crl_url 2024-02-28 09:00:06.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/TERENAeSciencePersonalCA3.crl_url 1970-01-01 01:00:00.000000000 +0100
@@ -1,2 +0,0 @@
-http://crl4.digicert.com/TERENAeSciencePersonalCA3.crl
-http://crl3.digicert.com/TERENAeSciencePersonalCA3.crl
diff -Nru igtf-policy-bundle-1.128/src/accredited/TERENAeSciencePersonalCA3.info igtf-policy-bundle-1.133/src/accredited/TERENAeSciencePersonalCA3.info
--- igtf-policy-bundle-1.128/src/accredited/TERENAeSciencePersonalCA3.info 2024-02-28 09:00:06.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/TERENAeSciencePersonalCA3.info 1970-01-01 01:00:00.000000000 +0100
@@ -1,15 +0,0 @@
-#
-# @(#)$Id: e732ef10.info,v 1.2 2015/05/20 16:24:11 pmacvsdg Exp $
-# Information for C=NL, ST=Noord-Holland, L=Amsterdam, O=TERENA, CN=TERENA eScience Personal CA 3
-#
-alias = TERENAeSciencePersonalCA3
-url = https://www.terena.org/activities/tcs/
-ca_url = http://cacerts.digicert.com/TERENAeSciencePersonalCA3.crt
-crl_url = http://crl4.digicert.com/TERENAeSciencePersonalCA3.crl;http://crl3.digicert.com/TERENAeSciencePersonalCA3.crl
-policy_url = https://www.terena.org/activities/tcs/repository/
-requires = DigiCertAssuredIDRootCA-Root
-email = tcs-pma@terena.org
-status = accredited:mics
-version = 1.128
-sha1fp.0 = B1:3C:DB:C0:6C:11:38:35:C9:54:20:F7:A0:D7:8F:51:34:6D:72:7E
-subjectdn = "/C=NL/ST=Noord-Holland/L=Amsterdam/O=TERENA/CN=TERENA eScience Personal CA 3"
diff -Nru igtf-policy-bundle-1.128/src/accredited/TERENAeSciencePersonalCA3.namespaces igtf-policy-bundle-1.133/src/accredited/TERENAeSciencePersonalCA3.namespaces
--- igtf-policy-bundle-1.128/src/accredited/TERENAeSciencePersonalCA3.namespaces 2024-02-28 09:00:06.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/TERENAeSciencePersonalCA3.namespaces 1970-01-01 01:00:00.000000000 +0100
@@ -1,13 +0,0 @@
-##############################################################################
-#NAMESPACES-VERSION: 1.0
-#
-# @(#)e732ef10.namespaces
-# CA alias : TERENAeSciencePersonalCA3
-# subord_of: DigiCertAssuredIDRootCA-Root
-# subjectDN: /C=NL/ST=Noord-Holland/L=Amsterdam/O=TERENA/CN=TERENA eScience Personal CA 3
-# hash : e732ef10
-# (generated automatically from e732ef10.signing_policy)
-#
-TO Issuer "/C=NL/ST=Noord-Holland/L=Amsterdam/O=TERENA/CN=TERENA eScience Personal CA 3" \
- PERMIT Subject "/DC=org/DC=terena/DC=tcs/.*"
-
diff -Nru igtf-policy-bundle-1.128/src/accredited/TERENAeSciencePersonalCA3.pem igtf-policy-bundle-1.133/src/accredited/TERENAeSciencePersonalCA3.pem
--- igtf-policy-bundle-1.128/src/accredited/TERENAeSciencePersonalCA3.pem 2024-02-28 09:00:06.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/TERENAeSciencePersonalCA3.pem 1970-01-01 01:00:00.000000000 +0100
@@ -1,29 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIFCTCCA/GgAwIBAgIQArfJ3a3SvQnrWcRckAxgeDANBgkqhkiG9w0BAQsFADBl
-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
-d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJv
-b3QgQ0EwHhcNMTQxMTE4MTIwMDAwWhcNMjQxMTE4MTIwMDAwWjByMQswCQYDVQQG
-EwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJQW1zdGVyZGFt
-MQ8wDQYDVQQKEwZURVJFTkExJjAkBgNVBAMTHVRFUkVOQSBlU2NpZW5jZSBQZXJz
-b25hbCBDQSAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKfSY+QH
-o9cT5EtRldy7wXXphZpFEf/50swaHarFN3b9gQkQ99K+ILeaEbGLcqgxhdp5yLcV
-dUpMFaA8RXkcziB2DWLwUR2ohrwkIxF8z0U6HDklX1qZqv8wC/0DhKqSaIHjPtCA
-RoiXABDSbIZe1HH42GwZzeakrZO+H+dlVhX/2ohezFSZ7FK96K4kL12Ds7PDfzV8
-skMopmrQW7piVQjbMxdV/lxwhnzzb8ZTRVvZLb+2sytG2pop3y3LIermwnSDWXPj
-aH9pVN/OzQg4IKIdyrGFXGU0roYe6qejI8ROVajmaHdYaV18wzpIyvgwDAue4mV7
-LJ3KduHmjdPFZQIDAQABo4IBpjCCAaIwEgYDVR0TAQH/BAgwBgEB/wIBADAOBgNV
-HQ8BAf8EBAMCAYYweQYIKwYBBQUHAQEEbTBrMCQGCCsGAQUFBzABhhhodHRwOi8v
-b2NzcC5kaWdpY2VydC5jb20wQwYIKwYBBQUHMAKGN2h0dHA6Ly9jYWNlcnRzLmRp
-Z2ljZXJ0LmNvbS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcnQwgYEGA1UdHwR6
-MHgwOqA4oDaGNGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEFzc3Vy
-ZWRJRFJvb3RDQS5jcmwwOqA4oDaGNGh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9E
-aWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCow
-KAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0O
-BBYEFIyfES7m43oEpR5Vi0YIBKbtl3CmMB8GA1UdIwQYMBaAFEXroq/0ksuCMS1R
-i6enIZ3zbcgPMA0GCSqGSIb3DQEBCwUAA4IBAQCORxFfdTnp/FhxQqCZHrtgL/m/
-5Fk1dqh/2DSNV7G6LtoRyoYeCMjZBTsQP01IritqkJ0OYQEtEyK7PUidSnvg413f
-3EwYsO5QmEluYZM4oBVfokor54p6SLWn1qmAUlsSE5dShwUvWAbJIRKjuRi5YgzD
-4gII6lAUPx9amTJWTUCLhbtFGhVELmVKSRa+PtM6cz8bAYllNprgKBiLcG2j+eRG
-LITO/r/yfsepCIQCbeQ54PHzpjr0fRelcNvxNBGeqEPINX3YcDNdNUtTiOidbVIp
-da+xEv7LzalVlW+2JFBAXD6PKaXx50yP7sbJ9rbJbFnn7DhicTWFFEjAG/RK
------END CERTIFICATE-----
diff -Nru igtf-policy-bundle-1.128/src/accredited/TERENAeSciencePersonalCA3.signing_policy igtf-policy-bundle-1.133/src/accredited/TERENAeSciencePersonalCA3.signing_policy
--- igtf-policy-bundle-1.128/src/accredited/TERENAeSciencePersonalCA3.signing_policy 2024-02-28 09:00:06.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/TERENAeSciencePersonalCA3.signing_policy 1970-01-01 01:00:00.000000000 +0100
@@ -1,5 +0,0 @@
-# EACL - TERENAeSciencePersonalCA3
-#
-access_id_CA X509 '/C=NL/ST=Noord-Holland/L=Amsterdam/O=TERENA/CN=TERENA eScience Personal CA 3'
-pos_rights globus CA:sign
-cond_subjects globus '"/DC=org/DC=terena/DC=tcs/*"'
diff -Nru igtf-policy-bundle-1.128/src/accredited/TERENA-eScience-SSL-CA-3.crl_url igtf-policy-bundle-1.133/src/accredited/TERENA-eScience-SSL-CA-3.crl_url
--- igtf-policy-bundle-1.128/src/accredited/TERENA-eScience-SSL-CA-3.crl_url 2024-02-28 09:00:05.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/TERENA-eScience-SSL-CA-3.crl_url 1970-01-01 01:00:00.000000000 +0100
@@ -1,2 +0,0 @@
-http://crl4.digicert.com/TERENAeScienceSSLCA3.crl
-http://crl3.digicert.com/TERENAeScienceSSLCA3.crl
diff -Nru igtf-policy-bundle-1.128/src/accredited/TERENA-eScience-SSL-CA-3.info igtf-policy-bundle-1.133/src/accredited/TERENA-eScience-SSL-CA-3.info
--- igtf-policy-bundle-1.128/src/accredited/TERENA-eScience-SSL-CA-3.info 2024-02-28 09:00:05.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/TERENA-eScience-SSL-CA-3.info 1970-01-01 01:00:00.000000000 +0100
@@ -1,15 +0,0 @@
-#
-# @(#)$Id: 1db3b27f.info,v 1.2 2015/05/20 16:24:11 pmacvsdg Exp $
-# Information for C=NL, ST=Noord-Holland, L=Amsterdam, O=TERENA, CN=TERENA eScience SSL CA 3
-#
-alias = TERENA-eScience-SSL-CA-3
-url = https://www.terena.org/activities/tcs/
-ca_url = http://cacerts.digicert.com/TERENAeScienceSSLCA3.crt
-crl_url = http://crl4.digicert.com/TERENAeScienceSSLCA3.crl;http://crl3.digicert.com/TERENAeScienceSSLCA3.crl
-policy_url = https://www.terena.org/activities/tcs/repository/
-requires = DigiCertAssuredIDRootCA-Root
-email = tcs-pma@terena.org
-status = accredited:classic
-version = 1.128
-sha1fp.0 = F3:51:BD:13:1E:DC:6C:06:7B:34:84:EC:08:EB:53:4C:7F:A7:57:25
-subjectdn = "/C=NL/ST=Noord-Holland/L=Amsterdam/O=TERENA/CN=TERENA eScience SSL CA 3"
diff -Nru igtf-policy-bundle-1.128/src/accredited/TERENA-eScience-SSL-CA-3.namespaces igtf-policy-bundle-1.133/src/accredited/TERENA-eScience-SSL-CA-3.namespaces
--- igtf-policy-bundle-1.128/src/accredited/TERENA-eScience-SSL-CA-3.namespaces 2024-02-28 09:00:05.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/TERENA-eScience-SSL-CA-3.namespaces 1970-01-01 01:00:00.000000000 +0100
@@ -1,13 +0,0 @@
-##############################################################################
-#NAMESPACES-VERSION: 1.0
-#
-# @(#)1db3b27f.namespaces
-# CA alias : TERENA-eScience-SSL-CA-3
-# subord_of: DigiCertAssuredIDRootCA-Root
-# subjectDN: /C=NL/ST=Noord-Holland/L=Amsterdam/O=TERENA/CN=TERENA eScience SSL CA 3
-# hash : 1db3b27f
-# (generated automatically from 1db3b27f.signing_policy)
-#
-TO Issuer "/C=NL/ST=Noord-Holland/L=Amsterdam/O=TERENA/CN=TERENA eScience SSL CA 3" \
- PERMIT Subject "/DC=org/DC=terena/DC=tcs/.*"
-
diff -Nru igtf-policy-bundle-1.128/src/accredited/TERENA-eScience-SSL-CA-3.pem igtf-policy-bundle-1.133/src/accredited/TERENA-eScience-SSL-CA-3.pem
--- igtf-policy-bundle-1.128/src/accredited/TERENA-eScience-SSL-CA-3.pem 2024-02-28 09:00:05.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/TERENA-eScience-SSL-CA-3.pem 1970-01-01 01:00:00.000000000 +0100
@@ -1,29 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIFBDCCA+ygAwIBAgIQDLagvlAOP6QGtXVwDg/+bDANBgkqhkiG9w0BAQsFADBl
-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
-d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJv
-b3QgQ0EwHhcNMTQxMTE4MTIwMDAwWhcNMjQxMTE4MTIwMDAwWjBtMQswCQYDVQQG
-EwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJQW1zdGVyZGFt
-MQ8wDQYDVQQKEwZURVJFTkExITAfBgNVBAMTGFRFUkVOQSBlU2NpZW5jZSBTU0wg
-Q0EgMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMpYsx0hE/klfhLT
-BNrBXBA9fVAFiSjl4alcdS4N7hzZS72EA+/ViQQaN6jU2X/xvjP6DfrUGXbgWBmC
-4vFBZkgVxaM3amHQP9rJ0MaQ6NXmRhiPuDFD9TaXTqs4q71wpkVaJwbZuROq9fwy
-ZTofePEksl9jcg8CdkKLR6nOSmZyPUx0TuUvjEYCwjkRtZ3u0joIeabWO5+7ZOzq
-pXV7pdzWGv/7V9wm86FweMzMDFvecNeiNtPGh/g3nQLAOwDZJd2oVQINIw5Qohub
-eiF4//VY+1XpVG0y4etxpj9QNxJtpBQRnjgFy3MForsd2zpTXj7KyX/bKUYNGZFI
-B7QhJp0CAwEAAaOCAaYwggGiMBIGA1UdEwEB/wQIMAYBAf8CAQAwDgYDVR0PAQH/
-BAQDAgGGMHkGCCsGAQUFBwEBBG0wazAkBggrBgEFBQcwAYYYaHR0cDovL29jc3Au
-ZGlnaWNlcnQuY29tMEMGCCsGAQUFBzAChjdodHRwOi8vY2FjZXJ0cy5kaWdpY2Vy
-dC5jb20vRGlnaUNlcnRBc3N1cmVkSURSb290Q0EuY3J0MIGBBgNVHR8EejB4MDqg
-OKA2hjRodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRBc3N1cmVkSURS
-b290Q0EuY3JsMDqgOKA2hjRodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNl
-cnRBc3N1cmVkSURSb290Q0EuY3JsMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsG
-AQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMB0GA1UdDgQWBBQp
-qhtuMPkwZ2OlhyYMrPGBnGl0STAfBgNVHSMEGDAWgBRF66Kv9JLLgjEtUYunpyGd
-823IDzANBgkqhkiG9w0BAQsFAAOCAQEAp5f8mAuKmxksInIi5q2HM3UvKUzbWXN7
-YBOUA2FRm+5bXWRiyJduedZ1mzsiOyzZLVU4P4DTL24xzdCt4aOyB8wi/ivCwUWW
-4uAgh3iDd6eG+XWV4uao9dXy3Hz+pkxWLJ/YR13qn6LU2m7Jmri2gsYGIxCWBd98
-jF+IEWjmstX4yXlMIEx5/seK9HoNnEnjYY7ycDF2qr+lE+lETt+csHL5xv05hzIZ
-/yhEX/wN5BkNZJQedhgKCg3OQow6tUTPjgnQLMvcLbGAmTIWoiEpc+00Q0tZWR48
-1cUR0MF0J3TDbY0q8pP8jJ/YHKofUNyEFEoS0q/4+eC34bmTWuKoqA==
------END CERTIFICATE-----
diff -Nru igtf-policy-bundle-1.128/src/accredited/TERENA-eScience-SSL-CA-3.signing_policy igtf-policy-bundle-1.133/src/accredited/TERENA-eScience-SSL-CA-3.signing_policy
--- igtf-policy-bundle-1.128/src/accredited/TERENA-eScience-SSL-CA-3.signing_policy 2024-02-28 09:00:05.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/TERENA-eScience-SSL-CA-3.signing_policy 1970-01-01 01:00:00.000000000 +0100
@@ -1,5 +0,0 @@
-# EACL - TERENAeScienceSSLCA3
-#
-access_id_CA X509 '/C=NL/ST=Noord-Holland/L=Amsterdam/O=TERENA/CN=TERENA eScience SSL CA 3'
-pos_rights globus CA:sign
-cond_subjects globus '"/DC=org/DC=terena/DC=tcs/*"'
diff -Nru igtf-policy-bundle-1.128/src/accredited/TRGrid2024.crl_url igtf-policy-bundle-1.133/src/accredited/TRGrid2024.crl_url
--- igtf-policy-bundle-1.128/src/accredited/TRGrid2024.crl_url 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/TRGrid2024.crl_url 2025-02-11 21:08:17.000000000 +0100
@@ -0,0 +1 @@
+http://www.truba.gov.tr/trgridca/crl/crl.der
diff -Nru igtf-policy-bundle-1.128/src/accredited/TRGrid2024.info igtf-policy-bundle-1.133/src/accredited/TRGrid2024.info
--- igtf-policy-bundle-1.128/src/accredited/TRGrid2024.info 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/TRGrid2024.info 2025-02-11 21:08:17.000000000 +0100
@@ -0,0 +1,13 @@
+# TRGrid 2024 CA Information
+#
+# @(#)$Id$
+#
+alias = TRGrid2024
+ca_url = http://www.truba.gov.tr/trgridca/cacert/3ca6d4a0.0
+crl_url = http://www.truba.gov.tr/trgridca/crl/crl.der
+email = ca@truba.gov.tr
+status = accredited:classic
+url = http://www.truba.gov.tr/index.php/en/certification-authority/
+version = 1.133
+sha1fp.0 = A9:A8:50:91:98:4A:AE:F3:71:BE:AF:95:20:39:C3:5C:07:B9:28:7E
+subjectdn = "/C=TR/O=TRGrid/CN=TR-Grid CA 2024"
diff -Nru igtf-policy-bundle-1.128/src/accredited/TRGrid2024.namespaces igtf-policy-bundle-1.133/src/accredited/TRGrid2024.namespaces
--- igtf-policy-bundle-1.128/src/accredited/TRGrid2024.namespaces 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/TRGrid2024.namespaces 2025-02-11 21:08:17.000000000 +0100
@@ -0,0 +1,13 @@
+##############################################################################
+#NAMESPACES-VERSION: 1.0
+#
+# @(#)TRGRID2024.signing_policy.namespaces
+# CA alias : TRGrid2024
+# subord_of:
+# subjectDN: /C=TR/O=TRGrid/CN=TR-Grid CA 2024
+# hash : TRGRID2024.signing_policy
+# (generated automatically from TRGRID2024.signing_policy)
+#
+TO Issuer "/C=TR/O=TRGrid/CN=TR-Grid CA 2024" \
+ PERMIT Subject "/C=TR/O=TRGrid/.*"
+
diff -Nru igtf-policy-bundle-1.128/src/accredited/TRGrid2024.pem igtf-policy-bundle-1.133/src/accredited/TRGrid2024.pem
--- igtf-policy-bundle-1.128/src/accredited/TRGrid2024.pem 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/TRGrid2024.pem 2025-02-11 21:08:17.000000000 +0100
@@ -0,0 +1,34 @@
+-----BEGIN CERTIFICATE-----
+MIIF4DCCA8igAwIBAgIJAIJj04s3byJmMA0GCSqGSIb3DQEBDQUAMDgxCzAJBgNV
+BAYTAlRSMQ8wDQYDVQQKEwZUUkdyaWQxGDAWBgNVBAMTD1RSLUdyaWQgQ0EgMjAy
+NDAeFw0yNDEyMDQwOTU5MDhaFw00NDExMjkwOTU5MDhaMDgxCzAJBgNVBAYTAlRS
+MQ8wDQYDVQQKEwZUUkdyaWQxGDAWBgNVBAMTD1RSLUdyaWQgQ0EgMjAyNDCCAiIw
+DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANefpqPWGgNKufNnbIxIm5KyYeb1
+1ZjP98FZ43MrXVTXYOw2RY4C3P4YLENeNEnaYPcoWuZbmR0L6DF834Syd+MoSQQn
+hvg+YaFHY5ZDpMOw/dpn9R3EaYCXnWxEGPNma8hS9KotrMGby496lOpq6f2BWFqx
+oSnOxTu/uiQ882o2MUPH8pRU6qK53FPgCtEtsE9G/0vr35oE5vlLWFFEf8iKH9kC
+TQ2sjWEB+2YkiTRi/s/OKukqCsLny26qJNZER6jBX+V9AudS2m9AzMjkLBBSdPP9
+opSUsdja2VRDgZ/YOR8kCiPbzo2N7KB0vGKMGQa3ZjRlMa0u3SmX7vfpRqC7bX/Y
+4noKltwPyf8ZChb82EGZRd9JFDf1SfZjxAMUH/OoORGcdY6sKJy0ZaXn4KTJxywM
+oIxMxIhPvT1zwpWWPf5kWz+34uMSa8hTlI3pF3euXGG6samqNhzDm7V71K86gDtE
+YczkLfao+qf+zbt4BY1uLmhmBrJRlOGpt1rDTjPfP+ctHWEJ2+MRYJBxa83kdem6
+KyekW3yaxJPq6LZRIiJ91J/ofKukv0YtdcOSsKAL1NDZMFZ6x863JCvl6Kr5mE00
+EeI+N4aXXjdKjNTUXuAm1jDRe5IkkGVWS0n21xVQ/5fV7ZFByKlZy/WpHbuUHWqS
+IVCZf8vVzTUKsFmDAgMBAAGjgewwgekwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8B
+Af8EBAMCAQYwHQYDVR0OBBYEFOsHYdTvg0ol17RF3NO6iJPagTFcMGgGA1UdIwRh
+MF+AFOsHYdTvg0ol17RF3NO6iJPagTFcoTykOjA4MQswCQYDVQQGEwJUUjEPMA0G
+A1UEChMGVFJHcmlkMRgwFgYDVQQDEw9UUi1HcmlkIENBIDIwMjSCCQCCY9OLN28i
+ZjA9BgNVHR8ENjA0MDKgMKAuhixodHRwOi8vd3d3LnRydWJhLmdvdi50ci90cmdy
+aWRjYS9jcmwvY3JsLmRlcjANBgkqhkiG9w0BAQ0FAAOCAgEAvFYxG412P91jiVii
+A+0nVf+W45q/88WImghH8xKzfv9liqnq2Xv+eqVCo4pd5qfhuXCBrmWMblqB7+L+
+BetPTtnUPqkw9hDGESsbO0jepHWNlZrcFzkDgPg91O4nmoB2A0yN8d44KGIxHRYS
+GIQ47B/lX5YUDqd18QY9LPGYwPKNpNcAhx+QX2nhN2jnykpO4yS6VZxqcxgwMscy
+lN9SD0ouSmV9vcIyU/JX0Nwxf/G0fy/H6JsDzx2oTeHFBtHIm2OvSugjqFGETScm
+K58RGPunvknkE6SOHYPzdxKHfXXA8KhsbsyvnO3rKpSe7EUO3tFQErzi0k4CfEHd
+8j0O/EyjhPHCXIOqHuofbpYgSNsQfh0vk8kXlDHsmKqcHARQ+skCcO2ImTzAoMwe
+S4ynT2Qc6Y4ph4JHMuv8oOII/XhGY+my4N5i7sp0DAD57rnm1fo7HHSXuM2CChFx
+P34PFGYeYqHC971NOUJnBUHzPxtdYNaK5yiUvqc0gnJkaIaG+usL0vfsLxSI7psy
+Roh7lyp/iNJBw9abl+m1xz7boe1XGgThqBYR7TYB3gJfYA3pULrkaYuf4QaOFeJz
+5NJqzJDPoBhM5GZyBqNR89N2p6nWlcnvaxG4i1+pTDoB0AOawpUBIKYfrU4xpz/2
+kgh+8XLkSDUohXo7Q2mqIRwn/rg=
+-----END CERTIFICATE-----
diff -Nru igtf-policy-bundle-1.128/src/accredited/TRGrid2024.signing_policy igtf-policy-bundle-1.133/src/accredited/TRGrid2024.signing_policy
--- igtf-policy-bundle-1.128/src/accredited/TRGrid2024.signing_policy 1970-01-01 01:00:00.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/TRGrid2024.signing_policy 2025-02-11 21:08:17.000000000 +0100
@@ -0,0 +1,5 @@
+# @(#)$Id$
+#
+access_id_CA X509 '/C=TR/O=TRGrid/CN=TR-Grid CA 2024'
+pos_rights globus CA:sign
+cond_subjects globus '"/C=TR/O=TRGrid/*"'
diff -Nru igtf-policy-bundle-1.128/src/accredited/TRGrid.info igtf-policy-bundle-1.133/src/accredited/TRGrid.info
--- igtf-policy-bundle-1.128/src/accredited/TRGrid.info 2024-02-28 09:00:06.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/TRGrid.info 2025-02-11 21:08:17.000000000 +0100
@@ -8,6 +8,6 @@
email = ca@grid.org.tr
status = accredited:classic
url = http://www.grid.org.tr/ca
-version = 1.128
+version = 1.133
sha1fp.0 = A2:31:9E:C8:90:AF:D9:6D:F4:4A:59:31:F2:E6:D2:D5:39:EC:1D:F0
subjectdn = "/C=TR/O=TRGrid/CN=TR-Grid CA"
diff -Nru igtf-policy-bundle-1.128/src/accredited/TSU-GE.crl_url igtf-policy-bundle-1.133/src/accredited/TSU-GE.crl_url
--- igtf-policy-bundle-1.128/src/accredited/TSU-GE.crl_url 2024-02-28 09:00:07.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/TSU-GE.crl_url 1970-01-01 01:00:00.000000000 +0100
@@ -1 +0,0 @@
-http://grid-ca.tsu.ge/tsu.crl
diff -Nru igtf-policy-bundle-1.128/src/accredited/TSU-GE.info igtf-policy-bundle-1.133/src/accredited/TSU-GE.info
--- igtf-policy-bundle-1.128/src/accredited/TSU-GE.info 2024-02-28 09:00:07.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/TSU-GE.info 1970-01-01 01:00:00.000000000 +0100
@@ -1,12 +0,0 @@
-# @(#)$Id: 4b3f5558.info,v 1.1 2014/11/23 17:36:33 pmacvsdg Exp $
-#
-alias = TSU-GE
-ca_url = https://grid-ca.tsu.ge/Root_Certificate/cacert.pem
-crl_url = http://grid-ca.tsu.ge/tsu.crl
-policy_url = https://grid-ca.tsu.ge/index.php?a=main&pid=3&lang=eng
-email = grid-ca@tsu.ge
-status = accredited:classic
-url = https://grid-ca.tsu.ge/
-version = 1.128
-sha1fp.0 = 5C:2A:A9:D0:C1:D2:04:50:21:66:9A:57:E9:FB:D6:53:1B:3C:55:B1
-subjectdn = "/DC=GE/DC=TSU/CN=TSU Root CA"
diff -Nru igtf-policy-bundle-1.128/src/accredited/TSU-GE.namespaces igtf-policy-bundle-1.133/src/accredited/TSU-GE.namespaces
--- igtf-policy-bundle-1.128/src/accredited/TSU-GE.namespaces 2024-02-28 09:00:07.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/TSU-GE.namespaces 1970-01-01 01:00:00.000000000 +0100
@@ -1,13 +0,0 @@
-##############################################################################
-#NAMESPACES-VERSION: 1.0
-#
-# @(#)4b3f5558.namespaces
-# CA alias :
-# subord_of:
-# subjectDN: /DC=GE/DC=TSU/CN=TSU Root CA
-# hash : 4b3f5558
-# (generated automatically from 4b3f5558.signing_policy)
-#
-TO Issuer "/DC=GE/DC=TSU/CN=TSU Root CA" \
- PERMIT Subject "/DC=GE/DC=TSU/.*"
-
diff -Nru igtf-policy-bundle-1.128/src/accredited/TSU-GE.pem igtf-policy-bundle-1.133/src/accredited/TSU-GE.pem
--- igtf-policy-bundle-1.128/src/accredited/TSU-GE.pem 2024-02-28 09:00:07.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/TSU-GE.pem 1970-01-01 01:00:00.000000000 +0100
@@ -1,33 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIFwjCCA6qgAwIBAgIBADANBgkqhkiG9w0BAQsFADA/MRIwEAYKCZImiZPyLGQB
-GRYCR0UxEzARBgoJkiaJk/IsZAEZFgNUU1UxFDASBgNVBAMTC1RTVSBSb290IENB
-MB4XDTE0MTExNjIwMjI0MVoXDTI0MTExNjIwMjI0MVowPzESMBAGCgmSJomT8ixk
-ARkWAkdFMRMwEQYKCZImiZPyLGQBGRYDVFNVMRQwEgYDVQQDEwtUU1UgUm9vdCBD
-QTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALgZetzvfv/zGmtZqe/q
-zp6oi8kqegibd/tLuYoySFdqYtFEQI9oGLDCxLphkE5ZvrTWj49jM/OWhhTawbTE
-4PSQIwVEWvmRVzCFam3IrHdPABw+Bcf1a/k8auNXarmbyXiIlDbOis0m2s3mbHHy
-G8ktZhrBDZ6POLJTM6HoXPk+d7kOx2CWVCMmDavIbSU2PevoA3pd94YHzIsytaDb
-gLXNygMdJdUag9ZnUOE9HO9UKzANZ2rFALnU5w5O/fjrBsiLYAVy+XNQuGLaHG8H
-ct1ocnJYvkAjnfX4gb17C4T8ykvs751SsbNlEtdEPn649X/ceBfydPIQEwZXEN2d
-ndJTx/f31zP7qQ0qWe/G8xZQVaZPhcfQ8xMYWsMDwvpPPdeKOthYaJq/lvXFTlFP
-4yuANZUQB08CrhXzhMOfmhuTiGj6KtL7dZBVDNQV5BD4vcMGg7+DOAvTrfDk29RU
-hHq00B+O4R/pOIUH3MWotNwqjRwnWzMhcbvaUVTugm9/CBeZSedbuH+tdb22iKjR
-vrWPQzUdHOV1fGWpYx8d2/Fr+RByLvddJGoXJ56sukD1aRkDWGaYf7JZxUC6QPIx
-h0NAlzViL7qOCw8qUwI9CZeqKGfquKTpiysgMUFUjo4bLdfnuz+AwqqynE7j0Ikg
-oQEHTfi246uoFIOp31J2X27fAgMBAAGjgcgwgcUwHQYDVR0OBBYEFIyrYzTl+Yd+
-DDERUDa9Eg1cSwloMB8GA1UdIwQYMBaAFIyrYzTl+Yd+DDERUDa9Eg1cSwloMA8G
-A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMDAGA1UdEgQpMCeBDmdyaWQt
-Y2FAdHN1LmdlhhVodHRwOi8vZ3JpZC1jYS50c3UuZ2UwMAYDVR0RBCkwJ4EOZ3Jp
-ZC1jYUB0c3UuZ2WGFWh0dHA6Ly9ncmlkLWNhLnRzdS5nZTANBgkqhkiG9w0BAQsF
-AAOCAgEAfFrAZoCxy9HH4L2rEVIukrfjSSHgVZJ5Lq3Dg0qKRfGSf4ubuOS3hfjs
-IIhsB7F8ZNlBLjwMFPYW5q0AX6VHFr6lWdnohbqssMDRdyvjUNxBUYEamwN4nAeq
-/CU1tiMgF+sbOpmmei5aIfFaGj5mIVUehLy+Zn4sTFoYOyNCcirR7XAMCVGYew+0
-i/GLmLz21KKhVPMNgVMEVEz/QzwoP22+uZm+/FH4a/StB5GMGaXwb3ApLUZGImsA
-Z6icQ4VVmtiISoFE6qS7AlRV/Bgbcmkv5ozad5kuyWHH2DG3C1xlxZP2Nt180XcI
-3jesIv3z8bcrGk2ZPUzyHxMe2nbh8qRxj/Pw9tXRcRnqydCU5Asj1UCPz7hoLi/Y
-lPHfASSDgpNsL8v0naDnx9j4xqF6v/0i9J5qhoQO4oyDUYgHRwBPDzuQNVyCb25I
-A5MxUsSH6xscnZzyBNl8/OjK/g81Px7c5RzpxjutY03p2CDOCOBCH1B2rNL1Bjjx
-KbcL+AwY/TQbGJVZVeCkv33yf8N+cN4Uic4xtZRWPU2ZBdp577DE9iBulDqbNqn2
-QiOAGNO7sVb6wNdrjDzWkPu6lJ21j469ctcJ2h25cLNODYLO5KK+6g/++5+Os92W
-APuSWQAw6O3Vim7UV4aMTmsblF0G2/AteoeYNUknuHWSss7H2sc=
------END CERTIFICATE-----
diff -Nru igtf-policy-bundle-1.128/src/accredited/TSU-GE.signing_policy igtf-policy-bundle-1.133/src/accredited/TSU-GE.signing_policy
--- igtf-policy-bundle-1.128/src/accredited/TSU-GE.signing_policy 2024-02-28 09:00:07.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/TSU-GE.signing_policy 1970-01-01 01:00:00.000000000 +0100
@@ -1,4 +0,0 @@
-# TSU-GE Root CA signing policy
- access_id_CA X509 '/DC=GE/DC=TSU/CN=TSU Root CA'
- pos_rights globus CA:sign
- cond_subjects globus '"/DC=GE/DC=TSU/CN=TSU Root CA" "/DC=GE/DC=TSU/*"'
diff -Nru igtf-policy-bundle-1.128/src/accredited/UGRID-G2.info igtf-policy-bundle-1.133/src/accredited/UGRID-G2.info
--- igtf-policy-bundle-1.128/src/accredited/UGRID-G2.info 2024-02-28 09:00:07.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/UGRID-G2.info 2025-02-11 21:08:18.000000000 +0100
@@ -8,6 +8,6 @@
email = ca@ugrid.org
status = accredited:classic
url = https://ca.ugrid.org/
-version = 1.128
+version = 1.133
sha1fp.0 = 58:86:89:27:79:7F:00:55:A4:C3:26:0E:EB:F1:ED:3D:0C:6A:B6:3A
subjectdn = "/DC=org/DC=ugrid/CN=UGRID CA G2"
diff -Nru igtf-policy-bundle-1.128/src/accredited/UKeScienceCA-2B.info igtf-policy-bundle-1.133/src/accredited/UKeScienceCA-2B.info
--- igtf-policy-bundle-1.128/src/accredited/UKeScienceCA-2B.info 2024-02-28 09:00:08.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/UKeScienceCA-2B.info 2025-02-11 21:08:19.000000000 +0100
@@ -8,6 +8,6 @@
crl_url = http://crl.ca.ngs.ac.uk/crl/escience2b.crl
email = support@grid-support.ac.uk
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = F3:03:90:25:E1:FD:F5:9D:B9:4A:97:F2:73:97:DE:73:91:B7:E9:AB
subjectdn = "/C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA 2B"
diff -Nru igtf-policy-bundle-1.128/src/accredited/UKeScienceRoot-2007.info igtf-policy-bundle-1.133/src/accredited/UKeScienceRoot-2007.info
--- igtf-policy-bundle-1.128/src/accredited/UKeScienceRoot-2007.info 2024-02-28 09:00:09.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/UKeScienceRoot-2007.info 2025-02-11 21:08:19.000000000 +0100
@@ -7,6 +7,6 @@
crl_url = http://crl.ca.ngs.ac.uk/crl/root-crl.der
email = support@grid-support.ac.uk
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = 59:7C:1A:AA:EC:65:7E:4A:F5:6A:00:1F:E2:16:44:48:96:35:DB:B1
subjectdn = "/C=UK/O=eScienceRoot/OU=Authority/CN=UK e-Science Root"
diff -Nru igtf-policy-bundle-1.128/src/accredited/UNAMgrid-ca.info igtf-policy-bundle-1.133/src/accredited/UNAMgrid-ca.info
--- igtf-policy-bundle-1.128/src/accredited/UNAMgrid-ca.info 2024-02-28 09:00:09.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/UNAMgrid-ca.info 2025-02-11 21:08:20.000000000 +0100
@@ -9,5 +9,5 @@
email = camanager@unam.mx
status = accredited:classic
sha1fp.0 = 98:93:D3:0C:24:94:61:F4:59:74:1C:DD:A9:1F:AC:A5:7A:21:43:B7
-version = 1.128
+version = 1.133
subjectdn = "/C=MX/O=UNAMgrid/OU=UNAM/CN=CA"
diff -Nru igtf-policy-bundle-1.128/src/accredited/USERTrustECCCertificationAuthority.info igtf-policy-bundle-1.133/src/accredited/USERTrustECCCertificationAuthority.info
--- igtf-policy-bundle-1.128/src/accredited/USERTrustECCCertificationAuthority.info 2024-02-28 09:00:10.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/USERTrustECCCertificationAuthority.info 2025-02-11 21:08:20.000000000 +0100
@@ -9,6 +9,6 @@
url = https://sectigo.com/
email = tcs-pma@lists.geant.org
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = D1:CB:CA:5D:B2:D5:2A:7F:69:3B:67:4D:E5:F0:5A:1D:0C:95:7D:F0
subjectdn = "/C=US/ST=New Jersey/L=Jersey City/O=The USERTRUST Network/CN=USERTrust ECC Certification Authority"
diff -Nru igtf-policy-bundle-1.128/src/accredited/USERTrustRSACertificationAuthority.info igtf-policy-bundle-1.133/src/accredited/USERTrustRSACertificationAuthority.info
--- igtf-policy-bundle-1.128/src/accredited/USERTrustRSACertificationAuthority.info 2024-02-28 09:00:10.000000000 +0100
+++ igtf-policy-bundle-1.133/src/accredited/USERTrustRSACertificationAuthority.info 2025-02-11 21:08:21.000000000 +0100
@@ -9,6 +9,6 @@
url = https://sectigo.com/
email = tcs-pma@lists.geant.org
status = accredited:classic
-version = 1.128
+version = 1.133
sha1fp.0 = 2B:8F:1B:57:33:0D:BB:A2:D0:7A:6C:51:F7:0E:E9:0D:DA:B9:AD:8E
subjectdn = "/C=US/ST=New Jersey/L=Jersey City/O=The USERTRUST Network/CN=USERTrust RSA Certification Authority"
diff -Nru igtf-policy-bundle-1.128/src/experimental/cilogon-openid.info igtf-policy-bundle-1.133/src/experimental/cilogon-openid.info
--- igtf-policy-bundle-1.128/src/experimental/cilogon-openid.info 2024-02-28 09:00:11.000000000 +0100
+++ igtf-policy-bundle-1.133/src/experimental/cilogon-openid.info 2025-02-11 21:08:22.000000000 +0100
@@ -4,6 +4,6 @@
crl_url = http://crl-cilogon.ncsa-security.net/cilogon-openid.crl;http://crl.cilogon.org/cilogon-openid.crl
email = ca@cilogon.org
status = experimental
-version = 1.128
+version = 1.133
sha1fp.0 = 3F:31:DC:10:B9:AB:BB:C0:BD:68:63:F2:74:44:7D:FB:60:72:73:86
subjectdn = "/DC=org/DC=cilogon/C=US/O=CILogon/CN=CILogon OpenID CA 1"
diff -Nru igtf-policy-bundle-1.128/src/experimental/InCommon-RSA-IGTF-Server-CA-2.info igtf-policy-bundle-1.133/src/experimental/InCommon-RSA-IGTF-Server-CA-2.info
--- igtf-policy-bundle-1.128/src/experimental/InCommon-RSA-IGTF-Server-CA-2.info 2024-02-28 08:59:54.000000000 +0100
+++ igtf-policy-bundle-1.133/src/experimental/InCommon-RSA-IGTF-Server-CA-2.info 2025-02-11 21:08:08.000000000 +0100
@@ -6,6 +6,6 @@
requires = USERTrustRSACertificationAuthority
email = admin@incommon.org
status = experimental
-version = 1.128
+version = 1.133
sha1fp.0 = BC:74:A1:A0:E1:2D:6B:48:3A:FB:E0:B4:E7:DC:F1:60:04:22:C0:FA
subjectdn = "/C=US/O=Internet2/CN=InCommon RSA IGTF Server CA 2"
diff -Nru igtf-policy-bundle-1.128/src/unaccredited/egee-ne-benelux-tutorial.info igtf-policy-bundle-1.133/src/unaccredited/egee-ne-benelux-tutorial.info
--- igtf-policy-bundle-1.128/src/unaccredited/egee-ne-benelux-tutorial.info 2024-02-28 09:00:13.000000000 +0100
+++ igtf-policy-bundle-1.133/src/unaccredited/egee-ne-benelux-tutorial.info 2025-02-11 21:08:23.000000000 +0100
@@ -6,6 +6,6 @@
url = http://ca.dutchgrid.nl/egee-ne/
ca_url = http://ca.dutchgrid.nl/egee-ne/cacert.pem
status = unaccredited
-version = 1.128
+version = 1.133
sha1fp.0 = 20:BC:72:7B:46:28:F2:6C:6E:54:D2:98:E2:2E:83:AC:1B:14:4C:A0
subjectdn = "/DC=org/DC=egee-ne/OU=Training Services/CN=Worthless EGEE Northern and Benelux Tutorial CA 1"
diff -Nru igtf-policy-bundle-1.128/src/unaccredited/nl-e-infra-zero.info igtf-policy-bundle-1.133/src/unaccredited/nl-e-infra-zero.info
--- igtf-policy-bundle-1.128/src/unaccredited/nl-e-infra-zero.info 2024-02-28 09:00:17.000000000 +0100
+++ igtf-policy-bundle-1.133/src/unaccredited/nl-e-infra-zero.info 2025-02-11 21:08:27.000000000 +0100
@@ -6,6 +6,6 @@
url = http://ca.dutchgrid.nl/nl-e-infra-zero/
ca_url = http://ca.dutchgrid.nl/nl-e-infra-zero/cacert.pem
status = unaccredited
-version = 1.128
+version = 1.133
sha1fp.0 = 43:20:7D:DF:E9:DD:F0:71:86:CA:AB:DC:97:44:F8:96:25:ED:6C:66
subjectdn = "/DC=nl/DC=e-infra/OU=Certification Authorities/CN=Worthless NL e-Infra Zero Tutorial CA 1"
diff -Nru igtf-policy-bundle-1.128/src/unaccredited/UKPathfinder1.info igtf-policy-bundle-1.133/src/unaccredited/UKPathfinder1.info
--- igtf-policy-bundle-1.128/src/unaccredited/UKPathfinder1.info 2024-02-28 09:00:08.000000000 +0100
+++ igtf-policy-bundle-1.133/src/unaccredited/UKPathfinder1.info 2025-02-11 21:08:18.000000000 +0100
@@ -8,6 +8,6 @@
crl_url = http://crl.ca.ngs.ac.uk/crl/pathfinder.crl.der
email = support@grid-support.ac.uk
status = unaccredited
-version = 1.128
+version = 1.133
sha1fp.0 = EA:03:D7:90:9A:82:6D:01:56:AA:C0:82:1C:7C:4C:1E:DA:89:FD:4A
subjectdn = "/C=UK/O=eScience/OU=Authority/CN=Pathfinder1"
Reply to: