ca-certificates: update to upstream make-ca 1.16.1 #1

Merged
sbelikov merged 2 commits from update-ca-certificates-1.16.1 into niceos-5.2 2026-05-02 13:51:55 +03:00
Owner

Summary:

  • Refresh ca-certificates to upstream make-ca 1.16.1.
  • Upstream release notes describe a single change: fix the default URL in make-ca.conf.dist so it matches make-ca.

Risk assessment:

  • Risk level: low
  • No upstream ABI/API/CLI changes or dependency changes are documented for v1.16.1.
  • This package is a core trust-store component, so we still need basic upgrade validation, but the upstream delta is configuration-only and appears low risk.

NiceOS impact:

  • System-wide TLS validation depends on this package.
  • The downstream Russian CA subpackage and trust-store regeneration hooks should be exercised after the rebuild.

Validation:

  • Rebuild in mock for niceos-5.2.
  • Verify the source archive matches tag v1.16.1.
  • Run install/upgrade smoke tests and refresh the trust store.

References:

Summary: - Refresh ca-certificates to upstream make-ca 1.16.1. - Upstream release notes describe a single change: fix the default URL in make-ca.conf.dist so it matches make-ca. Risk assessment: - Risk level: low - No upstream ABI/API/CLI changes or dependency changes are documented for v1.16.1. - This package is a core trust-store component, so we still need basic upgrade validation, but the upstream delta is configuration-only and appears low risk. NiceOS impact: - System-wide TLS validation depends on this package. - The downstream Russian CA subpackage and trust-store regeneration hooks should be exercised after the rebuild. Validation: - Rebuild in mock for niceos-5.2. - Verify the source archive matches tag v1.16.1. - Run install/upgrade smoke tests and refresh the trust store. References: - https://github.com/lfs-book/make-ca/releases/tag/v1.16.1 - https://github.com/lfs-book/make-ca/tags
sbelikov merged commit 00cb3b3d83 into niceos-5.2 2026-05-02 13:51:55 +03:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
rpms/ca-certificates!1
No description provided.