CAcert Code Development list.

[Wytze van der Raay <wytze AT cacert.org>]

Hi Michael,

Op 16-4-2013 18:51, Michael Tänzer schreef:
> We have a fix for https://bugs.cacert.org/view.php?id=1099
> "Automatic CAcert's root certificate install on Windows via Internet
> Explorer"
> 
> The fix was reviewed by Benny Baumann (BenBE) and me (NEOatNHNG) and
> tested by Ulrich Schröter (Uli60), Werner Dworak, Marcio Barbado
> (barbado) and Marcus Mängel (INOPIAE).
> 
> Diff is attached. The changes also adds a binary file to the system. See
> below.
> 
> Please also run the locale makefile so that our translators see the new
> strings (if present) on https://translations.cacert.org and new
> translations get imported into the system.
> 
> Changed files:
> /pages/index/0.php
> /pages/index/3.php
> /www/styles/default.css
> 
> New files:
> /www/certs/CAcert_Root_Certificates.msi
> which is rather big so I'll not include it in this message. You can get
> it on https://cacert.nhng.de/CAcert_Root_Certificates.msi and the
> sha256sum is
> 88883f2e3117bae6f43922fbaef8501b94efe4143c12116244ca5d0c23bcbb16

The fix has been installed on the production server on April 24, 2013.
See also the attached log message. The requested translation server
updates have also been performed.

Regards,
-- wytze

--- Begin Message ---

• From: Wytze van der Raay <wytze AT cacert.org>
• To: cacert-systemlog AT lists.cacert.org
• Subject: Fwd: [cvs.cacert.org checkin notification]
• Date: Wed, 24 Apr 2013 15:05:10 +0200
• Organization: CAcert

Fix for https://bugs.cacert.org/view.php?id=1099
"Automatic CAcert's root certificate install on Windows via Internet
Explorer"

In conjunction with the attached CVS changes a new tarball has been
made available incorporating all updates. The new tarball is available
through http://www.cacert.org/src-lic.php

Note: the checkin notification mail for adding the new file
CAcert_Root_Certificates.msi to the repository has not been forwarded
here since it largely consists of an unintelligible binary diff. But
the start of that message is reproduced below for completeness:

uid=0(root) gid=0(root) groups=0(root)
CAcert_Root_Certificates.msi NONE 1.1
Wed Apr 24 14:43:13 CEST 2013
Update of /var/lib/cvs/cacert/www/certs
In directory webdb:/home/cacert/www/www/certs

Added Files:
        CAcert_Root_Certificates.msi
Log Message:
Fix for https://bugs.cacert.org/view.php?id=1099
"Automatic CAcert's root certificate install on Windows via Internet
Explorer"

===================================================================
RCS file: /var/lib/cvs/cacert/www/certs/CAcert_Root_Certificates.msi,v
-->  standard output
revision 1.1

[binary data omitted]

The complete file can of course be obtained from the new tarball.

-- end

--- Begin Message ---

• From: "root" <root AT cvs.cacert.org>
• To: critical-admin AT cacert.org
• Subject: cvs.cacert.org checkin notification
• Date: Wed, 24 Apr 2013 14:43:05 +0200 (CEST)

uid=0(root) gid=0(root) groups=0(root)
0.php 1.33 1.34 3.php 1.14 1.15
Wed Apr 24 14:43:05 CEST 2013
Update of /var/lib/cvs/cacert/pages/index
In directory webdb:/home/cacert/www/pages/index

Modified Files:
        0.php 3.php 
Log Message:
Fix for https://bugs.cacert.org/view.php?id=1099
"Automatic CAcert's root certificate install on Windows via Internet Explorer"

===================================================================
RCS file: /var/lib/cvs/cacert/pages/index/3.php,v
retrieving revision 1.14
retrieving revision 1.15
diff -u -r1.14 -r1.15
--- 3.php       2011/06/10 18:30:30     1.14
+++ 3.php       2013/04/24 12:43:05     1.15
@@ -18,38 +18,45 @@
 
 <p><?=sprintf(_("You are bound by the %s Root Distribution Licence %s for 
any re-distributions of CAcert's roots."),"<a 
href='/policy/RootDistributionLicense.php'>","</a>")?></p>
 
-<p>
-Class 1 <?=_("PKI Key")?><br>
-<a href="index.php?id=17"><?=_("Click here if you want to import the root 
certificate into Microsoft Internet Explorer 5.x/6.x")?></a><br>
-<a href="certs/root.crt"><?=_("Root Certificate (PEM Format)")?></a><br>
-<a href="certs/root.der"><?=_("Root Certificate (DER Format)")?></a><br>
-<a href="certs/root.txt"><?=_("Root Certificate (Text Format)")?></a><br>
-<a 
href="<?=$_SERVER['HTTPS']?"https":"http"?>://crl.cacert.org/revoke.crl">CRL</a><br>
-<?=_("Fingerprint")?> SHA1: 
13:5C:EC:36:F4:9C:B8:E9:3B:1A:B2:70:CD:80:88:46:76:CE:8F:33<br/>
-<?=_("Fingerprint")?> MD5: 
A6:1B:37:5E:39:0D:9C:36:54:EE:BD:20:31:46:1F:6B<br/>
-</p>
-
-<p>
-Class 3 <?=_("PKI Key")?><br>
-<a href="certs/class3.crt"><?=_("Intermediate Certificate (PEM 
Format)")?></a><br/>
-<a href="certs/class3.der"><?=_("Intermediate Certificate (DER 
Format)")?></a><br/>
-<a href="certs/class3.txt"><?=_("Intermediate Certificate (Text 
Format)")?></a><br/>
-<a 
href="<?=$_SERVER['HTTPS']?"https":"http"?>://crl.cacert.org/class3-revoke.crl">CRL</a><br/>
+<h3><?=_("Windows Installer") ?></h3>
+<ul class="no_indent">
+       <li><? printf(_("%s Windows installer package %s for browsers that 
use the Windows certificate store %s (for example Internet Explorer, Chrome 
on Windows and Safari on Windows)"), '<a 
href="certs/CAcert_Root_Certificates.msi">', '</a>', '<br/>')?></li>
+       <li><?=_("SHA1 Hash:") ?> 
2db1957db31aa0d778d1a65ea146760ee1e67611</li>
+       <li><?=_("SHA256 Hash:") ?> 
88883f2e3117bae6f43922fbaef8501b94efe4143c12116244ca5d0c23bcbb16</li>
+</ul>
+
+<h3><?=_("Class 1 PKI Key")?></h3>
+<ul class="no_indent">
+       <li><a href="certs/root.crt"><?=_("Root Certificate (PEM 
Format)")?></a></li>
+       <li><a href="certs/root.der"><?=_("Root Certificate (DER 
Format)")?></a></li>
+       <li><a href="certs/root.txt"><?=_("Root Certificate (Text 
Format)")?></a></li>
+       <li><a 
href="<?=$_SERVER['HTTPS']?"https":"http"?>://crl.cacert.org/revoke.crl">CRL</a></li>
+       <li><?=_("SHA1 Fingerprint:")?> 
13:5C:EC:36:F4:9C:B8:E9:3B:1A:B2:70:CD:80:88:46:76:CE:8F:33</li>
+       <li><?=_("MD5 Fingerprint:")?> 
A6:1B:37:5E:39:0D:9C:36:54:EE:BD:20:31:46:1F:6B</li>
+</ul>
+
+<h3><?=_("Class 3 PKI Key")?></h3>
+<ul class="no_indent">
+       <li><a href="certs/class3.crt"><?=_("Intermediate Certificate (PEM 
Format)")?></a></li>
+       <li><a href="certs/class3.der"><?=_("Intermediate Certificate (DER 
Format)")?></a></li>
+       <li><a href="certs/class3.txt"><?=_("Intermediate Certificate (Text 
Format)")?></a></li>
+       <li><a 
href="<?=$_SERVER['HTTPS']?"https":"http"?>://crl.cacert.org/class3-revoke.crl">CRL</a></li>
 <?php /*
   class3 subroot fingerprint updated: 2011-05-23  class3 Re-sign project
   https://wiki.cacert.org/Roots/Class3ResignProcedure/Migration
 */ ?>
-<?=_("Fingerprint")?> SHA1: 
AD:7C:3F:64:FC:44:39:FE:F4:E9:0B:E8:F4:7C:6C:FA:8A:AD:FD:CE<br/>
-<?=_("Fingerprint")?> MD5: 
F7:25:12:82:4E:67:B5:D0:8D:92:B7:7C:0B:86:7A:42<br/>
-</p>
+       <li><?=_("SHA1 Fingerprint:")?> 
AD:7C:3F:64:FC:44:39:FE:F4:E9:0B:E8:F4:7C:6C:FA:8A:AD:FD:CE</li>
+       <li><?=_("MD5 Fingerprint:")?> 
F7:25:12:82:4E:67:B5:D0:8D:92:B7:7C:0B:86:7A:42</li>
+</ul>
+
+<h3><?=_("GPG Key")?></h3>
+<ul class="no_indent">
+       <li><a href="certs/cacert.asc"><?=_("CAcert's GPG Key")?></a></li>
+       <li><?=_("GPG Key ID:")?> 0x65D0FD58</li>
+       <li><?=_("Fingerprint:")?> A31D 4F81 EF4E BD07 B456 FA04 D2BB 0D01 
65D0 FD58</li>
+</ul>
 
-<p>
-<?=_("GPG Key")?><br>
-<a href="certs/cacert.asc"><?=_("CAcert's GPG Key")?></a><br>
-</p>
-
-<p>
-<?=_("PKI finger/thumb print signed by the CAcert GPG Key")?><br>
+<h4><?=_("PKI fingerprint signed by the CAcert GPG Key")?></h4>
 <pre>
 -----BEGIN PGP SIGNED MESSAGE-----
 Hash: SHA1
@@ -82,8 +89,8 @@
 =tXoj
 -----END PGP SIGNATURE-----
 </pre>
-</p>
 
+<h3><?=_("History")?></h3>
 <p>
 <? printf(_('An overview over all CA certificates ever issued can be found 
in '.
         '%sthe wiki%s.'),
===================================================================
RCS file: /var/lib/cvs/cacert/pages/index/0.php,v
retrieving revision 1.33
retrieving revision 1.34
diff -u -r1.33 -r1.34
--- 0.php       2012/12/11 14:30:12     1.33
+++ 0.php       2013/04/24 12:43:05     1.34
@@ -118,8 +118,7 @@
 <p><?=_("If you are located in Australia, use bank transfer instead.")?></p>
 
 <p><?=_("CAcert bank account details:")?></p>
-
-<ul>
+<ul class="no_indent">
 <li>Account Name: CAcert Inc</li>
 <li>SWIFT: WPACAU2S</li>
 <li>BSB: 032073</li>

--- End Message ---

--- Begin Message ---

• From: "root" <root AT cvs.cacert.org>
• To: critical-admin AT cacert.org
• Subject: cvs.cacert.org checkin notification
• Date: Wed, 24 Apr 2013 14:43:10 +0200 (CEST)

uid=0(root) gid=0(root) groups=0(root)
default.css 1.12 1.13
Wed Apr 24 14:43:09 CEST 2013
Update of /var/lib/cvs/cacert/www/styles
In directory webdb:/home/cacert/www/www/styles

Modified Files:
        default.css 
Log Message:
Fix for https://bugs.cacert.org/view.php?id=1099
"Automatic CAcert's root certificate install on Windows via Internet Explorer"

===================================================================
RCS file: /var/lib/cvs/cacert/www/styles/default.css,v
retrieving revision 1.12
retrieving revision 1.13
diff -u -r1.12 -r1.13
--- default.css 2013/01/17 15:08:07     1.12
+++ default.css 2013/04/24 12:43:09     1.13
@@ -86,11 +86,9 @@
 border-left: 0px;
 }
 
-ul {
+ul.no_indent {
 list-style: none;
-margin: 0px 0px 0px 15px;
-padding-left: 5px;
-border-left: 1px dotted #000;
+padding: 0px;
 }
 
 /***********************************************/

--- End Message ---

Attachment: smime.p7s
Description: S/MIME-cryptografische ondertekening

--- End Message ---

Attachment: smime.p7s
Description: S/MIME-cryptografische ondertekening