Upstream changes

• Remove "Entrust Root Certification Authority - G4"
  ref. https://bugzilla.mozilla.org/show_bug.cgi?id=1919913

• Remove "SecureSign RootCA11"
  ref. https://bugzilla.mozilla.org/show_bug.cgi?id=1918559

• Remove "Security Communication RootCA3"
  ref. https://bugzilla.mozilla.org/show_bug.cgi?id=1920641

What's Changed

• docs(webpki-roots): simplify usage example by @robjtede in #82
• webpki-ccadb: rework TLS distrust after handling by @cpu in #84
• Version 0.26.7 by @ctz in #85

New Contributors

• @robjtede made their first contribution in #82

Full Changelog: v/0.26.6...v/0.26.7

• Corrects the license file distributed with the webpki-roots and webpki-root-certs crates to properly reflect the MPL 2.0 license. Thanks to @decathorpe for reporting the issue.

What's Changed

• webpki-ccadb: update Moz CCADB root report url by @cpu in #78
• webpki-roots/webpki-root-certs: prepare 0.26.6, fix license data by @cpu in #80

Full Changelog: v/0.26.5...v/0.26.6

New trust anchors

• SecureSign Root CA12
• SecureSign Root CA14
• SecureSign Root CA15
• TWCA CYBER Root CA

What's Changed

• v0.26.5 preparation, aug 29th upstream CCADB updates by @cpu in #77

Full Changelog: v/0.26.4...v/0.26.5

• New webpki-root-certs crate. This crate is similar to webpki-roots, but for use with other projects that require the full self-signed X.509 certificate for each trusted root. This is unnecessary overhead for webpki and rustls and you should prefer using webpki-roots for these projects.

What's Changed

• Add webpki-root-certs crate by @cpu in #75
• webpki-root-certs 0.26.4 release by @cpu in #76

Full Changelog: v/0.26.3...v/0.26.4

Removed trust anchors:

• GLOBALTRUST 2020 CA has been removed due to a prolonged pattern of operational and compliance issues.

What's Changed

• webpki-ccadb: distrust any CA with a distrust after date by @cpu in #73
• 0.26.3 release preparation, GLOBALTRUST 2020 removal by @cpu in #74

Full Changelog: v/0.26.2...v/0.26.3

New trust anchors:

• FIRMAPROFESIONAL CA ROOT-A WEB

What's Changed

• Small documentation updates by @cpu in #62
• Accept upstream changes in CCADB metadata by @ctz in #63
• Update x509-parser requirement from 0.15.1 to 0.16.0 by @dependabot in #64
• Update rustls requirement from 0.22 to 0.23 by @dependabot in #65
• Update reqwest requirement from 0.11 to 0.12 by @dependabot in #66
• Upgrade to rcgen 0.13 by @djc in #68
• Prepare 0.26.2, add FIRMAPROFESIONAL CA ROOT-A WEB by @cpu in #71

Full Changelog: v/0.26.1...v/0.26.2

Removed trust anchors:

• Expired SECOM Trust.net - Security Communication RootCA1

New trust anchors:

• Telekom Security TLS ECC Root 2020
• Telekom Security TLS RSA Root 2023

What's Changed

• doc: add example of how to use with rustls 0.22 by @jsha in #58
• move CCADB fetching into a crate by @mspiegel in #56
• Update rcgen requirement from 0.11.1 to 0.12.0 by @dependabot in #59
• process upstream February root updates by @cpu in #60

New Contributors

• @jsha made their first contribution in #58
• @mspiegel made their first contribution in #56

Full Changelog: v/0.26.0...v/0.26.1

Removed trust anchors:

• Expired SECOM Trust.net - Security Communication RootCA1

New trust anchors:

• Telekom Security TLS ECC Root 2020
• Telekom Security TLS RSA Root 2023

What's Changed

• Prepare 0.25.4, process upstream February root updates by @cpu in #61

Full Changelog: v/0.25.3...v/0.25.4

Headlines

• Improving API stability. This crate now uses types from rustls-pki-types; we expect this to reduce the number of breaking changes in rustls ecosystem.
• no_std support.

What's Changed

• Switch to using the pki-types crate by @djc in #45
• 0.26.0-alpha.1: bump dependencies by @ctz in #46
• Bump actions/checkout from 3 to 4 by @dependabot in #47
• Move to pki-types 0.2.1 by @ctz in #48
• Update ring requirement from 0.16.20 to 0.17.0 by @dependabot in #49
• add no-std support by @japaric in #50
• Refresh certificates by @djc in #52
• Upgrade to latest webpki and pemfile alphas by @djc in #54
• Upgrade to (moved ServerName) alpha releases by @djc in #51
• Update rustls-pemfile requirement from =2.0.0-alpha.1 to =2.0.0-alpha.2 by @dependabot in #55

New Contributors

• @dependabot made their first contribution in #47
• @japaric made their first contribution in #50

Full Changelog: v/0.25.3...v/0.26.0

New trust anchors:

• CommScope Public Trust RSA Root-01
• CommScope Public Trust RSA Root-02
• CommScope Public Trust ECC Root-01
• CommScope Public Trust ECC Root-02
• TrustAsia Global Root CA G4
• TrustAsia Global Root CA G3

Removed trust anchors:

• Duplicated Autoridad de Certificacion Firmaprofesional CIF A62634068

What's Changed

• tests: add name constraints integration test. by @cpu in #40
• Replace mkcert.org with ccadb.org as the source of truth by @cpu in #41
• docs: update README for CCADB change, webpki fork. by @cpu in #42
• tests: better DER sequence wrap w/ yasna. by @cpu in #43
• Refresh certificates by @djc in #52
• v0.25.3 release preparation by @cpu in #53

Full Changelog: v/0.25.2...v/0.25.3