Bug 744 - Remove 3 expired CAs and add 39 new CAs based on the Mozilla Included CA Certificate List.

Review Request #253 — Created May 14, 2024 and submitted May 16, 2024, 10:56 a.m.

Information
Owner:	weikai
Repository:	APV10
Branch:	rel_apv_10_7
Bugs:	744
Depends On:
Reviewers
Groups:
People:	jasonchou, timlai

Description

The content of the root CA is recorded in the file usr/click/bin/ssl/root-cas.crt.
--- New ---

Based on the "Mozilla Included CA Certificate List" as of May 15, 2024, there are a total of 170 certificates included.
--- Deprecated ---

Remove 3 expired ones from it and add 39 new ones based on the 'Mozilla Included CA Certificate List' comparison.

Total Count: 140 (original) - 3 (expired) + 39 (added) = 176

Testing Done

Verify that the expired CAs have been removed and confirm the total count after adding the new ones in Web UI > SSL Global Settings > Global Root CA Certificates.

Confirm that the content of /ca/ssl/root-cas.crt on the APV matches that of /rel_apv_10_7/usr/click/bin/ssl/ in the project.

Ship it!

```
Ship It!
```

Change Summary:

Roland has decided to standardize referencing the "Mozilla Included CA Certificate List."

Description:

		The content of the root CA is recorded in the file usr/click/bin/ssl/root-cas.crt.

~		Remove 3 expired ones from it and add 39 new ones based on the 'Mozilla Included CA Certificate List' comparison.
	~	--- New ---
	+	Based on the "Mozilla Included CA Certificate List" as of May 15, 2024, there are a total of 170 certificates included.

~		Total Count: 140 (original) - 3 (expired) + 39 (added) = 176
	~	--- Deprecated ---
	+	Remove 3 expired ones from it and add 39 new ones based on the 'Mozilla Included CA Certificate List' comparison.
	+	Total Count: 140 (original) - 3 (expired) + 39 (added) = 176