Update to CKBI 2.41 from NSS 3.53.0
Removing:
# Certificate "AddTrust Low-Value Services Root"
# Certificate "AddTrust External Root"
# Certificate "UTN USERFirst Email Root CA"
# Certificate "Certplus Class 2 Primary CA"
# Certificate "Deutsche Telekom Root CA 2"
# Certificate "Staat der Nederlanden Root CA - G2"
# Certificate "Swisscom Root CA 2"
# Certificate "Certinomis - Root CA"
Adding:
# Certificate "Entrust Root Certification Authority - G4"
fix permissions on ghosted files.

Update to CKBI 2.32 from NSS 3.44
Removing:
# Certificate "Visa eCommerce Root"
# Certificate "AC Raiz Certicamara S.A."
# Certificate "TC TrustCenter Class 3 CA II"
# Certificate "ComSign CA"
# Certificate "S-TRUST Universal Root CA"
# Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5"
# Certificate "Certplus Root CA G1"
# Certificate "Certplus Root CA G2"
# Certificate "OpenTrust Root CA G1"
# Certificate "OpenTrust Root CA G2"
# Certificate "OpenTrust Root CA G3"
Adding:
# Certificate "GlobalSign Root CA - R6"
# Certificate "OISTE WISeKey Global Root GC CA"
# Certificate "GTS Root R1"
# Certificate "GTS Root R2"
# Certificate "GTS Root R3"
# Certificate "GTS Root R4"
# Certificate "UCA Global G2 Root"
# Certificate "UCA Extended Validation Root"
# Certificate "Certigna Root CA"
# Certificate "emSign Root CA - G1"
# Certificate "emSign ECC Root CA - G3"
# Certificate "emSign Root CA - C1"
# Certificate "emSign ECC Root CA - C3"
# Certificate "Hongkong Post Root CA 3"

Update to CKBI 2.22 from NSS 3.35

Update to CKBI 2.20 from NSS 3.34.1

Update to CKBI 2.18 (pre-release snapshot)

Update to CKBI 2.16 from NSS 3.32. In addition to removals/additions,

Update to CKBI 2.14 from NSS 3.30.2

No longer trust legacy CAs

Changed the packaged bundle to use the flexible p11-kit-object-v1 file format,
kit-trust and
For CAs trusted by Mozilla, set attribute nss-mozilla-ca-policy: true
Require p11-kit 0.23.5
Added an utility to help with comparing output of the trust dump command.

Update to CKBI 2.11 from NSS 3.28.1 with legacy modifications.
Use comments in extracted bundle files.
Change packaging script to support empty legacy bundles.

Use sln, not ln, to avoid the dependency on coreutils (rhbz#1328586)

Fixed a typo in a manual page (rhbz#1303960)

Update to CKBI 2.6 from NSS 3.21 with legacy modifications.

Update to CKBI 2.4 from NSS 3.18.1 with legacy modifications.

Fix a typo in the ca-legacy manual page (rhbz#1208850)

Update to CKBI 2.3 from NSS 3.18 with legacy modifications.
Add an alternative version of the "Thawte Premium Server CA" root,
RSA signature, to allow OpenJDK to verify applets
Add a patch to the source RPM that documents the changes from the
Introduce the ca-legacy utility, a manual page, and the ca-legacy.conf
The new scriptlets require the coreutils package.
Remove the obsolete blacklist.txt file.