igtf-policy-bundle (1.144-1) unstable; urgency=medium

  * New upstream release:
  * extended validity period of SiGNET CA within current policy (SI)
  * corrected tagging of DCVOTA accredited CAs in RPM packaging

 -- Dennis van Dok <dennisvd@nikhef.nl>  Mon, 20 Jul 2026 11:05:51 +0200

igtf-policy-bundle (1.143-1) unstable; urgency=medium

  * New upstream release (cumulative changes, 1.142 unreleased)
  * Replaced trust anchor for DZeScience authority by DZeScience G2 (DZ)
  * Added new InCommon Gen 4 issuing authority and updated HLCA (US)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Mon, 22 Jun 2026 10:54:08 +0200

igtf-policy-bundle (1.141-1) unstable; urgency=medium

  * New upstream release:
  * Added new UK eScience CA ECC hierarchy (UK)
  * Withdrawn expiring HellasGrid2016 CA (GR)
  * Withdrawn expiring SRCE CA (HR)
  * Removed GPG Gen3 package signing key (GPG-KEY-EUGridPMA-RPM-3)
  
 -- Dennis van Dok <dennisvd@nikhef.nl>  Mon, 18 May 2026 11:25:03 +0200

igtf-policy-bundle (1.140-1) unstable; urgency=medium

  * New upstream release:
  * Added server TLS specific trust hierarchy for eMudhra joint trust (IN)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Mon, 30 Mar 2026 13:15:20 +0200

igtf-policy-bundle (1.139-1) unstable; urgency=medium

  * New upstream release:
  * Update ArmeSFo CA re-issued based on SHA-2 family digest (AM)
  * The IGTF DCVOTA assurance profile has been added. For details, please
    refer to https://www.igtf.net/ap/dcvota/

 -- Dennis van Dok <dennisvd@nikhef.nl>  Tue, 17 Mar 2026 12:14:35 +0100

igtf-policy-bundle (1.138-1) unstable; urgency=medium

  * New upstream release:
  * Add new REUNA Issuing CA and updated RPDNC for HLCA emSign Trusted Root (CL)
  * Withdraw superseded KEK CA (JP)
  * Update RCauth Pilot ICA G1 with extended validity period (EU)
  * [Debconf translation updates]
  * Catalan (Carles Pina i Estany). Closes: #1120091

 -- Dennis van Dok <dennisvd@nikhef.nl>  Mon, 01 Dec 2025 11:40:38 +0100

igtf-policy-bundle (1.137-1) unstable; urgency=medium

  * New upstream release:
  * Added accredited KEK-2024 classic issuing CA (JP)
  * Withdrawn superseded TRGrid CA 2005 (TR)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Mon, 15 Sep 2025 10:27:37 +0200

igtf-policy-bundle (1.136-1) unstable; urgency=medium

  * New upstream release (9 June 2025):
  * Added new CESNET CA Gen5 hierarchy and new off-line Root 2 (CZ)
  * Withdrawn retired CILogon CAs cilogon-basic and cilogon-silver (US)
  * a new version of the generation-4 package signing key is now included that
    uses a SHA-256 digest function for its self-signature. Fingerprint and key 
    material is otherwise identical: 565F4528EAD3F53727B5A2E9B055005676341F1A.

 -- Dennis van Dok <dennisvd@nikhef.nl>  Fri, 06 Jun 2025 21:59:34 +0200

igtf-policy-bundle (1.135-1) unstable; urgency=medium

  * New upstream release:
  * Updated SlovakGrid trust anchor with extended validity (SK)
  * Withdrawn discontinued HPCI CA (JP)
  
 -- Dennis van Dok <dennisvd@nikhef.nl>  Thu, 08 May 2025 14:32:53 +0200

igtf-policy-bundle (1.134-1) unstable; urgency=medium

  * New upstream release:
  * New ANSPGrid CA 2 roll-over for root-issuer key pair (BR)
  * Withdrawn discontinued AC-GRID-FR series authorities (FR)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Wed, 12 Mar 2025 12:30:08 +0100

igtf-policy-bundle (1.133-1) unstable; urgency=medium

  * New upstream release:
  * Updated re-issued GridCanada root with extended validity period (CA)
  * Added GEANT TCS Generation 5 TLS and Auth ICAs and corresponding HARICA
    and private trust roots (EU)
  * updated SHA-256 root CA for RDIG mitigating EL9/FedoraCore deprication
  * MARGI put on hold due to domainname resolution issues (MK)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Mon, 17 Feb 2025 12:06:35 +0100

igtf-policy-bundle (1.132-1) unstable; urgency=medium

  * New upstream release:
  * added new trust anchor for TRGRID transition (TR)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Tue, 17 Dec 2024 12:02:41 +0100

igtf-policy-bundle (1.131-2) unstable; urgency=medium

  * Rebuild for source-only upload

 -- Dennis van Dok <dennisvd@nikhef.nl>  Tue, 29 Oct 2024 20:48:41 +0100

igtf-policy-bundle (1.131-1) unstable; urgency=medium

  * New upstream release:
  * removed discontinued HKU-CA-2 authority (HK)
  * removed obsolete 3rd generation TCS intermediates (EU)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Thu, 24 Oct 2024 10:49:44 +0200

igtf-policy-bundle (1.130-1) unstable; urgency=medium

  * New upstream release:
  * resolve subjnectDN nameformat compatibility issues trust anchor metadata

 -- Dennis van Dok <dennisvd@nikhef.nl>  Sat, 29 Jun 2024 13:01:44 +0200

igtf-policy-bundle (1.129-1) unstable; urgency=medium

  * New upstream release:
  * updated CRL URL location for MREN CA (ME)
  * removed discontinued TSU-GE GRENA CA (GE)
  * removed suspended BYGCA (BY)
  * removed discontinued LIP CA (PT)
  * removed obsolete DT transitional CAs (AE)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Mon, 24 Jun 2024 13:46:11 +0200

igtf-policy-bundle (1.128-1) unstable; urgency=medium

  * updated CRL download URL for ArmeSFo (AM)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Wed, 13 Mar 2024 16:04:54 +0100

igtf-policy-bundle (1.127-1) unstable; urgency=medium

  * added supplementary issuing CA Issuing CA IGTF - C5 - 1 for eMudhra (IN)
  * removed discontinued QuoVadis CAs QuoVadis-Grid-ICA-G2 QuoVadis-Root-CA2G3
    QuoVadis-Root-CA2 and QuoVadis-Root-CA3G3 (BM)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Tue, 20 Feb 2024 10:22:09 +0100

igtf-policy-bundle (1.126-1) unstable; urgency=medium

  * New upstream release:
  * removed replaced InCommon IGTF Server CA and associated Comodo RSA CA (US)
  * removed discontinued UNLPGrid CA (CL)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Mon, 18 Dec 2023 15:21:47 +0100

igtf-policy-bundle (1.125-1) unstable; urgency=medium

  * New upstream release:
  * Updated root certificate ArmeSFo CA with extended validity (AM)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Fri, 01 Dec 2023 09:38:33 +0100

igtf-policy-bundle (1.124-1) unstable; urgency=medium

  * New upstream release:
  * updated contact meta-data for ArmeSFo authority (AM)
  * removed discontinued AEGIS authority (RS)
  * removed suspended KENET Root and issuing CAs (KE)
  * removed suspended SDG-G2 authority (CN)
  * removed suspended CNIC authority (CN)
  * removed all four discontinued DigitalTrust CAs operated by their issuer (AE)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Mon, 30 Oct 2023 14:19:35 +0100

igtf-policy-bundle (1.123-1) unstable; urgency=medium

  * New upstream release:
  * Add ECC private trust hierarchy for GEANT (Research and Education) TCS (EU)
  * Added accredited private trust eMudhra IGTF root and issuers (IN)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Tue, 05 Sep 2023 13:23:44 +0200

igtf-policy-bundle (1.122-1) unstable; urgency=medium

  * New Upstream release:
  * Added private trust hierarchy for GEANT (Research and Education) TCS (EU)
  * Added accredited eMudhra joint public trust root and issuing CAs (IN)
  * Added private trust eMudhra IGTF root and issuers as experimental (IN, US)
  * Closes: 1045502

 -- Dennis van Dok <dennisvd@nikhef.nl>  Mon, 14 Aug 2023 09:10:08 +0200

igtf-policy-bundle (1.121-1) unstable; urgency=medium

  * New upstream release:
  * Added accredited (classic) InCommon RSA IGTF Server CA 3 under the
    Sectigo USERTrust RSA root, for which namespaces have been updated (US)

 -- Dennis van Dok <dennisvd@nikhef.nl>  Mon, 19 Jun 2023 09:15:22 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog igtf-policy-iota`.
