workspace: update cacerts
This gives us a year's worth of Root CA changes.
Removed:
Security Communication Root CA (expired)
Hongkong Post Root CA 1 (expired)
Autoridad de Certificacion Firmaprofesional CIF A62634068 (replaced
with SHA256 version already in there)
E-Tugra Global Root CA RSA v3 (removed for security reasons)
E-Tugra Global Root CA ECC v3 (removed for security reasons)
Added:
BJCA Global Root CA1
BJCA Global Root CA2
Sectigo Public Server Authentication Root E46
Sectigo Public Server Authentication Root R46
SSL.com TLS RSA Root CA 2022
SSL.com TLS ECC Root CA 2022
Atos TrustedRoot Root CA ECC TLS 2021
Atos TrustedRoot Root CA RSA TLS 2021
TrustAsia Global Root CA G3
TrustAsia Global Root CA G4
CommScope Public Trust ECC Root-01
CommScope Public Trust ECC Root-02
CommScope Public Trust RSA Root-01
CommScope Public Trust RSA Root-02
Telekom Security TLS ECC Root 2020
Telekom Security TLS RSA Root 2023
Change-Id: I9ed90dbccd53875c71dcd2998319cfe3b34c1b9e
Reviewed-on: https://review.monogon.dev/c/monogon/+/2978
Reviewed-by: Serge Bazanski <serge@monogon.tech>
Tested-by: Jenkins CI
diff --git a/WORKSPACE b/WORKSPACE
index bc39dd5..c66d693 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -302,8 +302,8 @@
# Derived from Mozilla NSS, currently needed for containerd to be able to pull images
http_file(
name = "cacerts",
- sha256 = "fb1ecd641d0a02c01bc9036d513cb658bbda62a75e246bedbc01764560a639f0",
- urls = ["https://curl.se/ca/cacert-2023-01-10.pem"],
+ sha256 = "1794c1d4f7055b7d02c2170337b61b48a2ef6c90d77e95444fd2596f4cac609f",
+ urls = ["https://curl.se/ca/cacert-2024-03-11.pem"],
)
# lz4, the library and the tool.