rustls / webpki-roots

CA certificates for use with webpki
Apache License 2.0
89 stars 47 forks source link

0.26.3 release preparation, GLOBALTRUST 2020 removal #74

Closed cpu closed 4 months ago

cpu commented 4 months ago

lib: remove GLOBALTRUST 2020

This CA is being distrusted by the Mozilla root program for TLS certificates issued after 2024.06.30.

Because webpki-roots can't express this distrust after date without breaking changes, and because the extant trusted certificates by this CA number less than 100, we choose to distrust the trust anchor in webpki-roots immediately and without any further qualification.

See the MDSP announcement post, and this bugzilla bug for more information.

Resolves https://github.com/rustls/webpki-roots/issues/72

Proposed Release Notes

Removed trust anchors:

cpu commented 4 months ago