workspace: update cacerts
Removed:
SecureSign RootCA11
Entrust Root Certification Authority - G4
Security Communication RootCA3
Added:
GLOBALTRUST 2020
TWCA CYBER Root CA
SecureSign Root CA12
SecureSign Root CA14
SecureSign Root CA15
Change-Id: Ief327dba2eaf243ae94b9b0ee69a17da4e4688eb
Reviewed-on: https://review.monogon.dev/c/monogon/+/3786
Reviewed-by: Leopold Schabel <leo@monogon.tech>
Tested-by: Jenkins CI
diff --git a/build/bazel/third_party.MODULE.bazel b/build/bazel/third_party.MODULE.bazel
index da730b6..fbb7901 100644
--- a/build/bazel/third_party.MODULE.bazel
+++ b/build/bazel/third_party.MODULE.bazel
@@ -62,8 +62,8 @@
# Derived from Mozilla NSS, currently needed for containerd to be able to pull images
http_file(
name = "cacerts",
- integrity = "sha256-G/RYQSVo4TSkUU9eFwoyjREJHgcccRCVXJiE7YeXKsk=",
- urls = ["https://curl.se/ca/cacert-2024-07-02.pem"],
+ integrity = "sha256-o/Mowh453dHyvhzqQ6wN7IGeqiCpBCXX2pAaEVMbOqU=",
+ urls = ["https://curl.se/ca/cacert-2024-12-31.pem"],
)
# ini.h, a tiny ini parser library