Add ANSSI intermediate to the on-device blacklist.
(cherry picked from commit 6f40a55cc851f2fc004a91fca67d183347a92b97)
Change-Id: Ib8d2c1cdfa14c4cc36dcc551edb478984af039c3
diff --git a/patches/android.patch b/patches/android.patch
index 7d8f673..492d0e9 100644
--- a/patches/android.patch
+++ b/patches/android.patch
@@ -2445,8 +2445,8 @@
{
diff -Naur bcprov-jdk16-146.orig/org/bouncycastle/jce/provider/CertBlacklist.java bcprov-jdk16-146/org/bouncycastle/jce/provider/CertBlacklist.java
--- bcprov-jdk16-146.orig/org/bouncycastle/jce/provider/CertBlacklist.java 1970-01-01 00:00:00.000000000 +0000
-+++ bcprov-jdk16-146/org/bouncycastle/jce/provider/CertBlacklist.java 2014-03-26 19:58:16.596356665 +0000
-@@ -0,0 +1,185 @@
++++ bcprov-jdk16-146/org/bouncycastle/jce/provider/CertBlacklist.java 2014-03-27 16:31:56.804862297 +0000
+@@ -0,0 +1,189 @@
+/*
+ * Copyright (C) 2012 The Android Open Source Project
+ *
@@ -2547,7 +2547,8 @@
+ new BigInteger("392a434f0e07df1f8aa305de34e0c229", 16),
+ new BigInteger("3e75ced46b693021218830ae86a82a71", 16),
+ new BigInteger("864", 16),
-+ new BigInteger("827", 16)
++ new BigInteger("827", 16),
++ new BigInteger("31da7", 16)
+ ));
+
+ // attempt to augment it with values taken from gservices
@@ -2594,7 +2595,10 @@
+ "5f3ab33d55007054bc5e3e5553cd8d8465d77c61".getBytes(),
+ // Subject: CN=*.EGO.GOV.TR 93
+ // Issuer: CN=T\xC3\x9CRKTRUST Elektronik Sunucu Sertifikas\xC4\xB1 Hizmetleri
-+ "783333c9687df63377efceddd82efa9101913e8e".getBytes()
++ "783333c9687df63377efceddd82efa9101913e8e".getBytes(),
++ // Subject: Subject: C=FR, O=DG Tr\xC3\xA9sor, CN=AC DG Tr\xC3\xA9sor SSL
++ // Issuer: C=FR, O=DGTPE, CN=AC DGTPE Signature Authentification
++ "3ecf4bbbe46096d514bb539bb913d77aa4ef31bf".getBytes()
+ ));
+
+ // attempt to augment it with values taken from gservices
diff --git a/src/main/java/org/bouncycastle/jce/provider/CertBlacklist.java b/src/main/java/org/bouncycastle/jce/provider/CertBlacklist.java
index 2d4f74e..2a0052f 100644
--- a/src/main/java/org/bouncycastle/jce/provider/CertBlacklist.java
+++ b/src/main/java/org/bouncycastle/jce/provider/CertBlacklist.java
@@ -98,7 +98,8 @@
new BigInteger("392a434f0e07df1f8aa305de34e0c229", 16),
new BigInteger("3e75ced46b693021218830ae86a82a71", 16),
new BigInteger("864", 16),
- new BigInteger("827", 16)
+ new BigInteger("827", 16),
+ new BigInteger("31da7", 16)
));
// attempt to augment it with values taken from gservices
@@ -145,7 +146,10 @@
"5f3ab33d55007054bc5e3e5553cd8d8465d77c61".getBytes(),
// Subject: CN=*.EGO.GOV.TR 93
// Issuer: CN=T\xC3\x9CRKTRUST Elektronik Sunucu Sertifikas\xC4\xB1 Hizmetleri
- "783333c9687df63377efceddd82efa9101913e8e".getBytes()
+ "783333c9687df63377efceddd82efa9101913e8e".getBytes(),
+ // Subject: Subject: C=FR, O=DG Tr\xC3\xA9sor, CN=AC DG Tr\xC3\xA9sor SSL
+ // Issuer: C=FR, O=DGTPE, CN=AC DGTPE Signature Authentification
+ "3ecf4bbbe46096d514bb539bb913d77aa4ef31bf".getBytes()
));
// attempt to augment it with values taken from gservices
