From: Theo Buehler <tb@theobuehler.org>
Subject: Re: cert.pem update
To: tech <tech@openbsd.org>
Date: Thu, 14 May 2026 07:26:44 +0200

On Wed, May 13, 2026 at 09:00:33PM +0100, Stuart Henderson wrote:
> sync with mozilla roots; quite a few CA certificates were either
> removed or distrusted for web so are removed here.
> 
> this is based on changes hitting the release branch
> https://raw.githubusercontent.com/mozilla-firefox/firefox/refs/heads/release/security/nss/lib/ckfw/builtins/certdata.txt
> but the commits are easier to see here:
> https://hg-edge.mozilla.org/projects/nss/log/tip/lib/ckfw/builtins/certdata.txt
> 
> ok?

ok, thanks

> I guess we probably want to keep an eye out in case users report
> any problems ..

Looks like it. Right point in the release cycle for that.