Development November 2019

development@lists.ipfire.org

14 participants
49 discussions

[PATCH] BUG11695: Adding/editing rules with preset broken
by Alexander Marx 15 Jul '21

15 Jul '21

added another check to fill same ports in source and destination when a custom service is selected. Signed-off-by: Alexander Marx <alexander.marx(a)ipfire.org> Reported-by: erik(a)vanlinsteeict.nl --- html/cgi-bin/firewall.cgi | 1 + 1 file changed, 1 insertion(+) diff --git a/html/cgi-bin/firewall.cgi b/html/cgi-bin/firewall.cgi index 499f279..d17afab 100644 --- a/html/cgi-bin/firewall.cgi +++ b/html/cgi-bin/firewall.cgi @@ -757,6 +757,7 @@ sub checkrule } } if($fwdfwsettings{'nat'} eq 'dnat' && $fwdfwsettings{'dnatport'} eq ''){$fwdfwsettings{'dnatport'}=$custsrvport;} + if($fwdfwsettings{'nat'} eq 'dnat' && $fwdfwsettings{'grp3'} eq 'cust_srv'){$fwdfwsettings{'dnatport'}=$custsrvport;} } #check if DNAT port is multiple if($fwdfwsettings{'nat'} eq 'dnat' && $fwdfwsettings{'dnatport'} ne ''){ -- 2.7.4

3 2

DDNS: add new Provider key-sytems.net (domaindiscount24)
by Christof Weniger 23 Jan '20

23 Jan '20

Hi, I hope this is the correct way to submit this patch. https://www.domaindiscount24.com/ has its own ddns service runnning, which (for me) gets rid of the necessity of having to use an extra service for that. I tested the following patch on my system at home, and attached it to this mail. I started my quest at the community forum: https://community.ipfire.org/t/adding-new-ddns-provider/428/2 Christof

4 8

回复：Re: [PATCH] Simple Chinese language
by 認小默 20 Dec '19

20 Dec '19

Hi,Thanks for your reply,I plan to continue to improve in next versions. ----- 原始邮件 ----- 发件人：Michael Tremer <michael.tremer(a)ipfire.org> 收件人：默默 <wangqiang1588(a)sina.com> 抄送人：development(a)lists.ipfire.org 主题：Re: [PATCH] Simple Chinese language 日期：2019年10月07日 23点40分 Hello, And thank you for sending in this patch. I would love to see IPFire being translated into more languages and make it therefore available to more users. But this translation looks like it is about 99% the English version. Do you plan on advancing this further? Best, -Michael > On 7 Oct 2019, at 11:34, 默默 <wangqiang1588(a)sina.com> wrote: > > > --- > langs/list | 1 + > langs/zh-cn/cgi-bin/zh-cn.pl | 2920 ++++++++++++++++++++++++++++++++++ > 2 files changed, 2921 insertions(+) > create mode 100644 langs/zh-cn/cgi-bin/zh-cn.pl > > diff --git a/langs/list b/langs/list > index ed59c86b4..e09d5e9b3 100644 > --- a/langs/list > +++ b/langs/list > @@ -7,3 +7,4 @@ ru:Русский:Russian > nl:Nederlands:Dutch > tr:Türkçe:Turkish > it:Italiano:Italian > +zh-cn:简体中文:中国 > diff --git a/langs/zh-cn/cgi-bin/zh-cn.pl b/langs/zh-cn/cgi-bin/zh-cn.pl > new file mode 100644 > index 000000000..eeef85d3e > --- /dev/null > +++ b/langs/zh-cn/cgi-bin/zh-cn.pl > @@ -0,0 +1,2920 @@ > +%tr = ( > +%tr, > + > +'24 hours' => '24 Hours', > +'Act as' => 'Act as:', > +'Add Level7 rule' => 'Add Level7 rule', > +'Add Port Rule' => 'Add port rule', > +'Add Rule' => 'Add rule', > +'Add a route' => 'Add a route', > +'Async logging enabled' => 'Enable asynchronous writing of the syslog file', > +'Captive' => 'Captive Portal', > +'Captive 1day' => '1 day', > +'Captive 1month' => '1 month', > +'Captive 1week' => '1 week', > +'Captive ACTIVATE' => 'ACTIVATE', > +'Captive GAIN ACCESS' => 'GAIN ACCESS', > +'Captive WiFi coupon' => 'WiFi Coupon', > +'Captive activate' => 'Activate', > +'Captive activated' => 'Activated', > +'Captive active on' => 'Activated on', > +'Captive agree tac' => 'I agree with the terms & conditions below.', > +'Captive auth_lic' => 'License', > +'Captive auth_vou' => 'Voucher', > +'Captive authentication' => 'Type of Access', > +'Captive brand color' => 'Brand Color', > +'Captive branding' => 'Branding', > +'Captive client session expiry time' => 'Session Expiry Time', > +'Captive config' => 'Settings', > +'Captive coupon' => 'Coupon', > +'Captive err doublevoucher' => 'A coupon with this code already exists', > +'Captive expire' => 'Expire', > +'Captive expiry time' => 'Expiry Time', > +'Captive export coupons' => 'Export Coupons', > +'Captive generate coupons' => 'Generate Coupons', > +'Captive generated coupon no' => 'Number of coupons', > +'Captive heading terms' => 'Terms & Conditions', > +'Captive heading voucher' => 'Coupon or Access Code', > +'Captive invalid coupon' => 'You entered an invalid coupon code. Please try again.', > +'Captive invalid logosize' => 'The uploaded image file does not meet the required resolution of at least 1280x400 but not larger than 1920x800 pixels', > +'Captive invalid_voucher' => 'Invalid code. Please try again', > +'Captive ip' => 'IP Address', > +'Captive issued coupons' => 'Issued Coupons', > +'Captive logo uploaded' => 'Logo uploaded', > +'Captive logo_set' => 'Current Logo', > +'Captive mac' => 'MAC Address', > +'Captive noexpiretime' => 'No valid connection time range given', > +'Captive nolimit' => 'unlimited', > +'Captive nr' => 'Number', > +'Captive please accept the terms and conditions' => 'Please accept the terms & conditions', > +'Captive please enter a coupon code' => 'Please enter a coupon code', > +'Captive portal' => 'IPFire Captive Portal', > +'Captive portal coupons' => 'Captive Portal Coupons', > +'Captive terms' => 'Terms & Conditions', > +'Captive terms short' => 'T&Cs', > +'Captive time' => 'Access time post activation (hours)', > +'Captive title' => 'Title of Login Page', > +'Captive upload logo' => 'Upload Logo', > +'Captive upload logo recommendations' => '(PNG or JPEG, recommended 1280x720 pixels)', > +'Captive valid for' => 'Valid for', > +'Captive voactive' => 'Active Coupons', > +'Captive voucher' => 'Coupon', > +'Captive vouchervalid' => 'Allowed time for this coupon', > +'Captive vout' => 'Issued Vouchers', > +'Captive wrong ext' => 'Uploaded file has wrong filetype', > +'Choose Rule' => 'Choose one of the following rules.', > +'Class' => 'Class', > +'Class was deleted' => 'with potential subclasses was deleted', > +'ConnSched action' => 'Action:', > +'ConnSched add action' => 'Add action', > +'ConnSched change profile title' => 'Change to profile:', > +'ConnSched days' => 'Days:', > +'ConnSched dial' => 'Connect', > +'ConnSched down' => 'Down', > +'ConnSched hangup' => 'Disconnect', > +'ConnSched ipsecstart' => 'IPsec (re)start', > +'ConnSched ipsecstop' => 'IPsec stop', > +'ConnSched reboot' => '重启', > +'ConnSched reconnect' => 'Reconnect', > +'ConnSched scheduled actions' => 'Scheduled actions', > +'ConnSched scheduler' => 'Scheduler', > +'ConnSched select profile' => 'Select profile', > +'ConnSched shutdown' => '关机', > +'ConnSched time' => 'Time:', > +'ConnSched up' => 'Up', > +'ConnSched weekdays' => 'Days of the week:', > +'Daily' => 'Daily', > +'Disabled' => 'Disabled', > +'Edit an existing route' => 'Edit an existing route', > +'Enter TOS' => 'Activate or deactivate TOS-bits and then press Save.', > +'Existing Files' => 'Files in database', > +'HDD temperature' => '磁盘温度', > +'Level7 Protocol' => 'Level7-Protocol', > +'Level7 Rule' => 'Level7-Rule', > +'Level7 rule' => 'Level7 rule', > +'Local VPN IP' => 'Internal Network (GREEN):', > +'MB read' => 'MB read', > +'MB written' => 'MB written', > +'MTU' => 'MTU大小:', > +'MTU settings' => 'MTU设置:', > +'Number of Countries for the pie chart' => 'Number of Countries for the pie chart', > +'Number of IPs for the pie chart' => 'Number of IPs for the pie chart', > +'Number of Ports for the pie chart' => 'Number of ports for the pie chart', > +'OVPN' => 'OpenVPN', > +'OpenVPN' => 'OpenVPN', > +'Pages' => 'Pages', > +'Ping' => 'Ping :', > +'Port Rule' => 'Port-Rule', > +'QoS not enabled' => 'QoS is not enabled!', > +'Queuelenght' => 'Queuelenght', > +'Remote IP' => 'Remote IP / Hostname (DynDNS):', > +'Remote VPN IP' => 'VPN Subnet (e.g. 10.0.10.0/255.255.255.0):', > +'Resolv' => 'Resolv-Retry:', > +'Scan for Files' => 'Scan for files', > +'Scan from Directory' => 'Scan from directory', > +'Set time on boot' => '启动时强制重设系统时间', > +'Subclass' => 'Subclass', > +'TOS Bits' => 'TOS-Bits', > +'TOS Rule' => 'TOS-Rule', > +'TOS rule' => 'TOS rule', > +'The class number does not match the specified interface.' => 'The class number does not match the specified interface.', > +'The destination IP address is invalid.' => 'The destination IP address is invalid.', > +'The source IP address is invalid.' => 'The source IP address is invalid.', > +'Utilization on' => 'Utilization on', > +'Verbose' => 'Verbose:', > +'WakeOnLan' => 'Wake On Lan', > +'Weekly' => 'Weekly', > +'a ca certificate with this name already exists' => 'A CA certificate with this name already exists.', > +'a connection with this common name already exists' => 'A connection with this common name already exists.', > +'a connection with this name already exists' => 'A connection with this name already exists.', > +'abort' => 'abort', > +'access allowed' => 'Access allowed from:', > +'access refused with this oinkcode' => 'Access refused with this Oink Code', > +'accounting' => 'Accounting', > +'accounting user nonpdc' => 'Accounting - none PDC Mode', > +'accounting user pdc' => 'Accounting - PDC Mode', > +'action' => 'Action', > +'activate' => 'Activate', > +'activate user' => 'Activate user', > +'active' => 'Active', > +'add' => 'Add', > +'add a host' => 'Add a host', > +'add a new rule' => 'Add a new rule:', > +'add cron' => 'add cronjob', > +'add device' => 'Add device', > +'add network' => 'Add network', > +'add new alias' => 'Add a new alias', > +'add new lease' => 'Add a new fixed lease', > +'add new ovpn' => 'OpenVPN Settings:', > +'add printer' => 'Add printer', > +'add service' => 'Add service', > +'add share' => 'Add share', > +'add subclass' => 'Add subclass', > +'add user' => 'Add user', > +'add xtaccess' => 'Add External Access', > +'add-route' => 'Additional push route', > +'added from dhcp lease list' => 'Added from DHCP lease list', > +'addons' => '插件', > +'admin user password has been changed' => 'Admin user password has been changed.', > +'admin users' => 'User with superuser rights', > +'administrator password' => 'Administrator password', > +'administrator user password' => 'Admin user password:', > +'administrator username' => 'Administrator username', > +'adsl settings' => 'ADSL settings', > +'advanced' => 'Advanced', > +'advanced server' => 'Advanced server options', > +'advproxy AUTH always required' => 'Require authentication for unrestricted source addresses', > +'advproxy AUTH auth cache TTL' => 'Authentication cache TTL (in minutes)', > +'advproxy AUTH global settings' => 'Global authentication settings', > +'advproxy AUTH limit of IP addresses' => 'Limit of IP addresses per user', > +'advproxy AUTH method' => 'Authentication method', > +'advproxy AUTH method ident' => 'identd', > +'advproxy AUTH method ldap' => 'LDAP', > +'advproxy AUTH method ncsa' => 'Local', > +'advproxy AUTH method none' => 'None', > +'advproxy AUTH method ntlm' => 'Windows NT4 Domain', > +'advproxy AUTH method ntlm auth' => 'Windows Active Directory', > +'advproxy AUTH method radius' => 'RADIUS', > +'advproxy AUTH no auth' => 'Domains without authentication (one per line)', > +'advproxy AUTH number of auth processes' => 'Number of authentication processes', > +'advproxy AUTH realm' => 'Authentication realm prompt', > +'advproxy AUTH user IP cache TTL' => 'User/IP cache TTL (in minutes)', > +'advproxy IDENT authorized users' => 'Authorized users (one per line)', > +'advproxy IDENT aware hosts' => 'Ident aware hosts (one per line)', > +'advproxy IDENT identd settings' => 'Common identd settings', > +'advproxy IDENT required' => 'Require identd authentication', > +'advproxy IDENT timeout' => 'Ident timeout (in seconds)', > +'advproxy IDENT unauthorized users' => 'Unauthorized users (one per line)', > +'advproxy IDENT use negative access list' => 'Use negative access control', > +'advproxy IDENT use positive access list' => 'Use positive access control', > +'advproxy IDENT user based access restrictions' => 'User based access restrictions', > +'advproxy LDAP ADS' => 'Active Directory', > +'advproxy LDAP NDS' => 'Novell eDirectory', > +'advproxy LDAP V2' => 'LDAP version 2', > +'advproxy LDAP V3' => 'LDAP version 3', > +'advproxy LDAP auth' => 'LDAP authentication', > +'advproxy LDAP basedn' => 'Base DN', > +'advproxy LDAP binddn password' => 'Bind DN password', > +'advproxy LDAP binddn settings' => 'Bind DN settings', > +'advproxy LDAP binddn username' => 'Bind DN username', > +'advproxy LDAP common settings' => 'Common LDAP settings', > +'advproxy LDAP group access control' => 'Group based access control', > +'advproxy LDAP group required' => 'Required group', > +'advproxy LDAP port' => 'Port', > +'advproxy LDAP server' => 'LDAP Server', > +'advproxy LDAP type' => 'LDAP type', > +'advproxy MIME block types' => ' Block these MIME types (one per line)', > +'advproxy MIME filter' => 'MIME type filter', > +'advproxy NCSA auth' => 'Local user authentication', > +'advproxy NCSA create user' => 'Create user', > +'advproxy NCSA group' => 'Group', > +'advproxy NCSA group membership' => 'Group membership', > +'advproxy NCSA grp disabled' => 'Disabled', > +'advproxy NCSA grp extended' => 'Extended', > +'advproxy NCSA grp standard' => 'Standard', > +'advproxy NCSA min password length' => 'Minimum password length', > +'advproxy NCSA no accounts' => 'No user accounts available', > +'advproxy NCSA password' => 'Password', > +'advproxy NCSA password confirm' => 'Password (confirm)', > +'advproxy NCSA redirector bypass' => 'Bypass redirection for members of the group', > +'advproxy NCSA update user' => 'Update user', > +'advproxy NCSA user accounts' => 'User accounts', > +'advproxy NCSA user management' => 'User management', > +'advproxy NCSA username' => '用户名', > +'advproxy NTLM BDC hostname' => 'BDC hostname', > +'advproxy NTLM PDC hostname' => 'PDC hostname', > +'advproxy NTLM auth' => 'Windows NT/2003 authentication', > +'advproxy NTLM auth mode' => 'Authentication mode', > +'advproxy NTLM authorized users' => 'Authorized domain users (one per line)', > +'advproxy NTLM domain' => 'Domain', > +'advproxy NTLM domain settings' => 'Common domain settings', > +'advproxy NTLM unauthorized users' => 'Unauthorized domain users (one per line)', > +'advproxy NTLM use integrated auth' => 'Enable Windows integrated authentication', > +'advproxy NTLM use negative access list' => 'Use negative access control', > +'advproxy NTLM use positive access list' => 'Use positive access control', > +'advproxy NTLM user based access restrictions' => 'User based access restrictions', > +'advproxy RADIUS authorized users' => 'Authorized users (one per line)', > +'advproxy RADIUS identifier' => 'Identifier', > +'advproxy RADIUS port' => 'Port', > +'advproxy RADIUS radius settings' => 'Common RADIUS settings', > +'advproxy RADIUS secret' => 'Shared secret', > +'advproxy RADIUS server' => 'RADIUS Server', > +'advproxy RADIUS unauthorized users' => 'Unauthorized users (one per line)', > +'advproxy RADIUS use negative access list' => 'Use negative access control', > +'advproxy RADIUS use positive access list' => 'Use positive access control', > +'advproxy RADIUS user based access restrictions' => 'User based access restrictions', > +'advproxy UA enable filter' => 'Enable browser check', > +'advproxy access' => 'Access', > +'advproxy admin mail' => 'Cache administrator e-mail', > +'advproxy advanced proxy' => 'Advanced Proxy', > +'advproxy advanced web proxy' => 'Advanced Web Proxy', > +'advproxy advanced web proxy configuration' => 'Advanced web proxy configuration', > +'advproxy allowed subnets' => 'Allowed subnets (one per line)', > +'advproxy allowed web browsers' => 'Allowed clients for web access', > +'advproxy back to main page' => 'Back to main page', > +'advproxy banned ip clients' => 'Banned IP addresses (one per line)', > +'advproxy banned mac clients' => 'Banned MAC addresses (one per line)', > +'advproxy basic authentication' => 'Allow HTTP Basic authentication', > +'advproxy cache management' => 'Cache management', > +'advproxy cache replacement policy' => 'Cache replacement policy', > +'advproxy cache-digest' => 'Enable Cache-Digest Generation', > +'advproxy chgwebpwd ERROR' => 'E R R O R :', > +'advproxy chgwebpwd SUCCESS' => 'S U C C E S S :', > +'advproxy chgwebpwd change password' => 'Change password', > +'advproxy chgwebpwd change web password' => 'C h a n g e w e b a c c e s s p a s s w o r d', > +'advproxy chgwebpwd new password' => 'New password', > +'advproxy chgwebpwd new password confirm' => 'New password (confirm)', > +'advproxy chgwebpwd old password' => 'Current password', > +'advproxy chgwebpwd username' => 'Username', > +'advproxy classroom extensions' => 'Classroom extensions', > +'advproxy clear cache' => 'Clear Cache', > +'advproxy client IP forwarding' => 'Client IP address forwarding', > +'advproxy common settings' => 'Common settings', > +'advproxy content based throttling' => 'Enable content based throttling', > +'advproxy cre disabled' => 'The management interface has been disabled by the administrator', > +'advproxy cre group definitions' => 'Classroom group definitions', > +'advproxy cre supervisors' => 'Supervisor IP addresses (one per line)', > +'advproxy destination ports' => 'Destination ports', > +'advproxy download throttling' => 'Download throttling', > +'advproxy enabled' => 'Enabled', > +'advproxy enabled on' => 'Enabled on', > +'advproxy errmsg acl cannot be empty' => 'Access control list cannot be empty', > +'advproxy errmsg auth cache ttl' => 'Invalid value for authentication cache TTL', > +'advproxy errmsg auth children' => 'Invalid number of authentication processes', > +'advproxy errmsg auth ipcache may not be null' => 'Authentication cache TTL may not be 0 when using IP address limits', > +'advproxy errmsg auth ipcache ttl' => 'Invalid value for user/IP cache TTL', > +'advproxy errmsg cache' => 'The RAM cache size is greater than the harddisk cache size:', > +'advproxy errmsg change fail' => 'Password could not be changed', > +'advproxy errmsg change success' => 'Password for web access sucessfully changed', > +'advproxy errmsg hdd cache size' => 'Invalid value for harddisk cache size (min 10 MB required)', > +'advproxy errmsg ident timeout' => 'Invalid ident timeout', > +'advproxy errmsg invalid bdc' => 'Invalid hostname for backup domain controller', > +'advproxy errmsg invalid destination port' => 'Invalid destination port', > +'advproxy errmsg invalid ip or mask' => 'Invalid IP address or network mask', > +'advproxy errmsg invalid mac' => 'Invalid MAC address', > +'advproxy errmsg invalid pdc' => 'Invalid hostname for primary domain controller', > +'advproxy errmsg invalid proxy port' => 'Invalid proxy port', > +'advproxy errmsg invalid upstream proxy' => 'Invalid upstream proxy IP/hostname', > +'advproxy errmsg invalid upstream proxy username or password setting' => 'Invalid upstream proxy username or password setting', > +'advproxy errmsg invalid user' => 'Username does not exist', > +'advproxy errmsg ldap base dn' => 'LDAP base DN required', > +'advproxy errmsg ldap bind dn' => 'LDAP bind DN username and password required', > +'advproxy errmsg ldap port' => 'Invalid LDAP port number', > +'advproxy errmsg ldap server' => 'Invalid IP address/hostname for LDAP Server', > +'advproxy errmsg max userip' => 'Invalid number of IP addresses per user', > +'advproxy errmsg mem cache size' => 'Invalid value for memory cache size', > +'advproxy errmsg no browser' => 'At least one browser or client must be selected for web access', > +'advproxy errmsg no password' => 'Password can not be empty', > +'advproxy errmsg no username' => 'Username can not be empty', > +'advproxy errmsg non-transparent proxy required' => 'Web proxy must be running in non-transparent mode for authentication', > +'advproxy errmsg ntlm domain' => 'Windows domain name required', > +'advproxy errmsg ntlm pdc' => 'Hostname for primary domain controller required', > +'advproxy errmsg password incorrect' => 'Password incorrect', > +'advproxy errmsg password length' => 'Invalid value for password length', > +'advproxy errmsg password length 1' => 'Password must have at least ', > +'advproxy errmsg password length 2' => ' characters', > +'advproxy errmsg passwords different' => 'Passwords don\'t match', > +'advproxy errmsg proxy ports equal' => 'The proxy port and the transparent port cannot be equal.', > +'advproxy errmsg radius port' => 'Invalid RADIUS port number', > +'advproxy errmsg radius secret' => 'RADIUS shared secret required', > +'advproxy errmsg radius server' => 'Invalid IP address for RADIUS Server', > +'advproxy errmsg time restriction' => 'Invalid time restriction', > +'advproxy error design' => 'Error messages design', > +'advproxy error language' => 'Error messages language', > +'advproxy fake referer' => 'Fake referer submitted to external sites', > +'advproxy fake useragent' => 'Fake useragent submitted to external sites', > +'advproxy friday' => '周五', > +'advproxy from' => 'From', > +'advproxy group access control' => 'Group based access control', > +'advproxy group required' => 'Required group', > +'advproxy hdd cache size' => 'Harddisk cache size (MB)', > +'advproxy invalid num of children' => 'Invalid number of filter processes', > +'advproxy log enabled' => 'Log enabled', > +'advproxy log query' => 'Log query terms', > +'advproxy log settings' => 'Log settings', > +'advproxy log useragent' => 'Log useragents', > +'advproxy max download size' => 'Max download size (KB)', > +'advproxy max size' => 'Max object size (KB)', > +'advproxy max upload size' => 'Max upload size (KB)', > +'advproxy memory replacement policy' => 'Memory replacement policy', > +'advproxy min size' => 'Min object size (KB)', > +'advproxy mode allow' => 'allow', > +'advproxy mode deny' => 'deny', > +'advproxy monday' => 'Mon', > +'advproxy network based access' => 'Network based access control', > +'advproxy no cache sites' => 'Do not cache these domains (one per line)', > +'advproxy no clients defined' => 'No clients defined', > +'advproxy no connection auth' => 'No connection oriented authentication forwarding', > +'advproxy no cre groups' => 'There are no access groups available', > +'advproxy no internal proxy on blue' => 'Disable internal proxy access from BLUE to other subnets', > +'advproxy no internal proxy on green' => 'Disable internal proxy access to GREEN from other subnets', > +'advproxy number of L1 dirs' => 'Number of level-1 subdirectories', > +'advproxy off' => '代理被关闭', > +'advproxy offline mode' => 'Enable offline mode', > +'advproxy on' => 'Proxy on', > +'advproxy privacy' => 'Privacy', > +'advproxy proxy port' => 'Proxy port', > +'advproxy proxy port transparent' => 'Transparent port', > +'advproxy ram cache size' => 'Memory cache size (MB)', > +'advproxy redirector children' => 'Number of filter processes', > +'advproxy reset' => '重设', > +'advproxy saturday' => 'Sat', > +'advproxy save and restart' => 'Save and Restart', > +'advproxy squid version' => 'Squid cache version', > +'advproxy squidclamav' => 'SquidClamav', > +'advproxy ssadvanced proxy' => 'advanced proxy', > +'advproxy ssl ports' => 'Allowed SSL ports (one per line)', > +'advproxy standard' => 'Standard', > +'advproxy standard ports' => 'Allowed standard ports (one per line)', > +'advproxy sunday' => 'Sun', > +'advproxy supervisor password' => 'Supervisor password', > +'advproxy suppress version' => 'Suppress version information', > +'advproxy throttle binary' => 'Binary files', > +'advproxy throttle dskimg' => 'CD images', > +'advproxy throttle mmedia' => 'Multimedia', > +'advproxy throttling per host on' => 'Limit per host on', > +'advproxy throttling total on' => 'Overall limit on', > +'advproxy throttling unlimited' => 'unlimited', > +'advproxy thursday' => 'Thu', > +'advproxy time restrictions' => 'Time restrictions', > +'advproxy to' => 'To', > +'advproxy transfer limits' => 'Transfer limits', > +'advproxy transparent on' => 'Transparent on', > +'advproxy tuesday' => 'Tue', > +'advproxy unknown' => 'Unknown', > +'advproxy unrestricted ip clients' => 'Unrestricted IP addresses (one per line)', > +'advproxy unrestricted mac clients' => 'Unrestricted MAC addresses (one per line)', > +'advproxy update accelerator' => 'Update accelerator', > +'advproxy update information' => 'There is an updated version available for download. Visit <a href="http://www.advproxy.net" target="_blank">http://www.advproxy.net</a> for more information.', > +'advproxy update notification' => 'Update notification!', > +'advproxy upstream password' => 'Upstream password', > +'advproxy upstream proxy' => 'Upstream proxy', > +'advproxy upstream proxy host:port' => 'Upstream proxy (host:port)', > +'advproxy upstream username' => 'Upstream username', > +'advproxy url filter' => 'URL过滤', > +'advproxy username forwarding' => 'Username forwarding', > +'advproxy via forwarding' => 'Proxy address forwarding', > +'advproxy visible hostname' => 'Visible hostname', > +'advproxy web browser' => 'Web browser', > +'advproxy wednesday' => 'Wed', > +'again' => 'Again:', > +'age second' => 'second', > +'age seconds' => 'seconds', > +'age shour' => 'h', > +'age sminute' => 'min', > +'age ssecond' => 'sec', > +'aktiv' => 'Active', > +'album' => 'Album', > +'alcatelusb help' => 'To utilise the Speedtouch 330 or Speedtouch USB modem you must upload the firmware to your IPFire box. Please download the Embedded Firmware package for SpeedTouch 330 from speedtouch.com, unzip and then upload the appropriate file for your modem : KQD6_3.xxx when Rev<4 or ZZZL_3.xxx for Rev=4 using the form below.', > +'alcatelusb upload' => 'Upload Speedtouch USB firmware', > +'alias ip' => 'Alias IP', > +'aliases' => 'Aliases', > +'aliases not active' => 'Aliases will not be active unless your RED interface is STATIC', > +'all' => 'All', > +'all interfaces' => 'All Interfaces', > +'all services' => 'All Services', > +'all updates installed' => 'All updates installed', > +'allmsg' => 'show all', > +'alt dialup' => '拨号', > +'alt home' => '首页', > +'alt information' => 'Information', > +'alt logs' => '日志', > +'alt ovpn' => 'OpenVPN', > +'alt proxy' => 'Proxy', > +'alt services' => '服务', > +'alt system' => '系统', > +'alt vpn' => 'VPNs', > +'and' => 'And', > +'ansi t1.483' => 'TO BE REMOVED', > +'apcupsd' => 'APC-UPS status', > +'application layer gateways' => '应用层网关', > +'apply' => 'Apply now', > +'april' => '四月', > +'archive not exist' => 'Configuration archive does not exist', > +'are you sure' => 'Are you sure?', > +'arp table entries' => 'ARP Table Entries', > +'artist' => 'Artist', > +'atm device' => 'Device:', > +'atm settings' => 'ATM settings', > +'attemps' => 'Attempts', > +'attention' => 'ATTENTION', > +'august' => '八月', > +'authentication' => 'Authentication:', > +'automatic' => 'Automatic', > +'available updates' => 'Available updates:', > +'average' => 'Average', > +'avoid dod' => 'Do not use this option with Dial on Demand! Mainly used if your IPFire is behind a router. Your RED IP must be inside one of the three reserved network numbers e.g. 10/8, 172.16/12, 192.168/16', > +'back' => 'BACK', > +'backup' => '备份', > +'backup archive' => 'Backup File (.dat)', > +'backup clear archive' => 'Clear Backup File (.gz)', > +'backup config floppy' => 'Backup Configuration - Floppy Disk', > +'backup configuration' => 'Backup Configuration:', > +'backup erase key' => 'Erase key', > +'backup explain key' => 'Backup are encrypted using a key. To avoid illegal backup manipulations, IPFire only restores a backup that is encrypted with the key you will specify here. You have three options available to you', > +'backup explain key li1' => 'let IPFire create key for you.', > +'backup explain key li2' => 'import a saved key (possibly password protected).', > +'backup explain key li3' => 'extract a key from a non-encrypted 1.4.10 backup only.', > +'backup explain key no1' => 'you should save this key if you plan to restore new machines, IPFire accepts only once key creation/import.', > +'backup explain key no2' => 'legacy floppy backups are not concerned with this key.', > +'backup export key' => 'Export key', > +'backup extract key' => 'Extract key', > +'backup from' => 'Backup from', > +'backup generate key' => 'Generate key', > +'backup import dat file' => 'Import a backup (.dat) file', > +'backup import key' => 'Import key', > +'backup key' => 'Backup Encryption Key', > +'backup key file' => 'Backup key file', > +'backup key info' => 'IPFire restricts access to the backup key, thus you must know root password. You have possibility to protect this key outside of IPFire with a password.', > +'backup media info' => 'Floppy and/or unformatted media may display stranges partitions sizes. In this case, select the whole device. Remenber to mount harddisk before removing device. Note: floppy created here are not usable with IPFire installer program!', > +'backup missing key' => 'Need the backup key to restore a set', > +'backup password' => 'Backup password', > +'backup protect key password' => 'Backup key password', > +'backup sets' => 'Backup sets', > +'backup to floppy' => 'Backup to floppy', > +'backupaddon' => '插件备份', > +'backupprofile' => 'In case reconnection fails, switch to profile', > +'backups' => '备份信息', > +'backupwarning' => '请首先还原主备份文件，然后再还原备份插件. 请保持下载时候的原始文件名，不要改名.', > +'bad characters in' => 'Bad characters in ', > +'bad characters in script field' => 'Bad characters in script field', > +'bad characters in the telephone number field' => 'Bad characters in the telephone number field.', > +'bad destination range' => 'The Destination port range has a first value that is greater than or equal to the second value.', > +'bad ignore filter' => 'Bad ignore filter:', > +'bad return code' => 'Helper program returned error code', > +'bad source range' => 'The Source port range has a first value that is greater than or equal to the second value.', > +'bandwidth usage' => 'bandwidth usage (external)', > +'bandwitherror' => 'You cannot change the bandwithsettings, with Qos being enabled. First disable Qos.', > +'bandwithsettings' => '带宽设置', > +'basic options' => '基础选项', > +'beep when ppp connects or disconnects' => '当连接建立或者断开时响铃', > +'behind a proxy' => 'Behind a proxy:', > +'bewan adsl pci st' => 'TO BE REMOVED', > +'bewan adsl usb' => 'TO BE REMOVED', > +'bit' => 'bit', > +'bitrate' => 'Bitrate', > +'bleeding rules' => 'Bleeding Edge Snort Rules', > +'block' => 'Block', > +'blue' => 'BLUE', > +'blue access' => 'Blue Access', > +'blue access use hint' => 'You have to enter the MAC or the IP Address for a device. To enter both is also possible', > +'blue interface' => 'Blue Interface', > +'broadcast' => 'Broadcast', > +'broken pipe' => 'Broken pipe', > +'buffered memory' => 'Buffered Memory', > +'buffers' => 'buffers', > +'bytes per second' => '字节每秒', > +'bytes received' => 'Bytes Received', > +'bytes sent' => 'Bytes Sent', > +'ca certificate' => 'CA Certificate', > +'ca name' => 'CA name', > +'cache management' => 'Cache management', > +'cache size' => 'Cache size (MB):', > +'cached' => 'cached', > +'cached memory' => 'Cached Memory ', > +'cached swap' => 'Cached Swap', > +'calamaris available reports' => '已经生成的报告', > +'calamaris byte unit' => '单位', > +'calamaris create report' => '生成报表', > +'calamaris enable content report' => '启用内容报告', > +'calamaris enable distribution histogram' => 'Enable distribution histogram', > +'calamaris enable domain report' => '启用域名报告', > +'calamaris enable performance report' => '启用性能报告', > +'calamaris enable requester report' => 'Enable requester report', > +'calamaris enable verbose reporting' => '启用细节报告', > +'calamaris high' => 'high', > +'calamaris histogram resolution' => 'Histogram resolution', > +'calamaris low' => 'low', > +'calamaris medium' => 'medium', > +'calamaris no reports available' => '报告不存在', > +'calamaris none' => 'none', > +'calamaris number of content types' => 'Number of content types', > +'calamaris number of domains' => 'Number of domains', > +'calamaris number of requested urls' => 'Number of requested URLs', > +'calamaris number of requesting hosts' => 'Number of requesting hosts', > +'calamaris performance options' => '性能选项', > +'calamaris proxy reports' => '报表', > +'calamaris refresh list' => '刷新', > +'calamaris report interval (in minutes)' => '报告周期(分钟)', > +'calamaris report options' => '报表选项', > +'calamaris report period' => '报表周期', > +'calamaris run as background task' => '后台运行', > +'calamaris show usernames' => '显示用户名', > +'calamaris skip archived logfiles' => '跳过归档的日志文件', > +'calamaris unlimited' => 'unlimited', > +'calamaris view' => 'View', > +'calamaris view report' => 'View report', > +'calc traffic all x minutes' => 'Calculate traffic all x minutes', > +'cancel' => 'Cancel', > +'cancel-adv-options' => 'Cancel', > +'cannot enable both nat traversal and compression' => 'Cannot enable both NAT traversal and compression.', > +'cannot enable ntp without specifying primary' => 'Cannot enable NTP without specifying primary.', > +'cannot specify secondary dns without specifying primary' => 'Cannot specify secondary DNS without specifying primary.', > +'cannot specify secondary ntp without specifying primary' => 'Cannot specify Secondary NTP server without specifying Primary', > +'cannot specify secondary wins without specifying primary' => 'Cannot specify secondary WINS without specifying primary.', > +'cant change certificates' => 'Can\'t change certificates.', > +'cant enable xtaccess' => 'The associated port forwarding rule is disabled, therefore you cannot enable external access for this rule.', > +'cant start openssl' => 'Can\'t start OpenSSL', > +'capabilities' => 'Capabilities', > +'caps all' => 'ALL', > +'capsclosed' => 'DISCONNECTED', > +'capsinactive' => 'INACTIVE', > +'capsopen' => 'CONNECTED', > +'capswarning' => 'WARNING', > +'caption' => 'Caption', > +'ccd add' => 'Add network', > +'ccd choose net' => 'Choose network', > +'ccd client options' => 'Advanced client options', > +'ccd clientip' => 'Host address', > +'ccd dynrange' => 'Dynamic OpenVPN IP address pool', > +'ccd err blue' => 'This is the BLUE subnet.', > +'ccd err green' => 'This is the GREEN subnet.', > +'ccd err hostinnet' => 'You are not able to delete this network, while it still contains clients.', > +'ccd err inuse' => 'Already used by another client.', > +'ccd err invalidname' => 'Invalid name. Allowed characters are A-Z, a-z, dash and space.', > +'ccd err invalidnet' => 'Invalid IP address. Format: 192.168.0.0/24 or 192.168.0.0/255.255.255.0.', > +'ccd err iroute' => 'Network address for route is invalid.', > +'ccd err irouteexist' => 'This route is already in use.', > +'ccd err isipsecnet' => 'The given subnet address is already used by an IPsec network.', > +'ccd err isipsecrw' => 'The given subnet address is already used by the IPsec rw network.', > +'ccd err isovpnn2n' => 'The subnet address is already in use for an OpenVPN net-to-net connection.', > +'ccd err isovpnnet' => 'The subnet address is already in use for the OpenVPN server.', > +'ccd err issubnet' => 'Subnet address already in use.', > +'ccd err name' => 'Please choose a name.', > +'ccd err nameexist' => 'Name already exists.', > +'ccd err netadr' => 'Subnet address is invalid or range is too large.', > +'ccd err netadrexist' => 'Network already exists.', > +'ccd err orange' => 'This is the ORANGE subnet.', > +'ccd err red' => 'This is the RED subnet.', > +'ccd err routeovpn' => 'Already used by OpenVPN server.', > +'ccd err routeovpn2' => 'Already pushed from OpenVPN server.', > +'ccd hint' => 'On this page you are able to define static networks from which the roadwarrior clients can get fixed IP address assignments.', > +'ccd invalid' => 'Invalid.', > +'ccd iroute' => 'IPFire has access to these networks on the client\'s site', > +'ccd iroute2' => 'Client has access to these networks on IPFire\'s site', > +'ccd iroutehint' => 'Attention! If you change these settings, you have to restart the OpenVPN server that the changes take effect!', > +'ccd modify' => 'Change network', > +'ccd name' => 'Name', > +'ccd net' => 'Static IP address pools', > +'ccd noaddnet' => 'You can only add new static networks when OpenVPN server is stopped.', > +'ccd none' => 'None', > +'ccd routes' => 'Routing:', > +'ccd subnet' => 'Subnet', > +'ccd used' => 'Used addresses', > +'cert' => 'Certificate', > +'certificate' => 'Certificate', > +'certificate authorities' => 'Certificate Authorities and -Keys', > +'certificate does not have a valid ca associated with it' => 'Certificate does not have a valid CA associated with it.', > +'certificate file move failed' => 'Certificate file move failed', > +'cfg restart' => 'A reboot is suggested after restoring a configuration archive.', > +'chain' => 'Chain', > +'change passwords' => 'Change passwords', > +'change share' => 'edit share options', > +'check all' => 'Check all', > +'check for net traffic update' => 'Check for Net-Traffic updates', > +'check vpn lr' => 'Check', > +'choose config' => 'Choose config', > +'choose media' => 'Choose media', > +'cipher' => 'Encryption:', > +'city' => 'City', > +'class in use' => 'The class is already in use.', > +'clear cache' => 'Clear Cache', > +'clear playlist' => 'Empty playlist', > +'clenabled' => 'Provide time to local network', > +'click to disable' => 'Enabled (click to disable)', > +'click to enable' => 'Disabled (click to enable)', > +'client' => 'Workstation Name', > +'clock has not been synchronized' => 'Clock has not been synchronized', > +'clock last synchronized at' => 'Clock was last synchronized at', > +'comment' => 'Description:', > +'common name' => 'Common name', > +'community rules' => 'Snort/VRT GPLv2 Community Rules', > +'comp-lzo' => 'LZO-Compression:', > +'compression' => 'Compression:', > +'computer to modem rate' => 'Computer to modem rate:', > +'concentrator name' => 'Concentrator name:', > +'confirmation' => 'confirmation', > +'connect' => 'OVPN Start / Connect', > +'connect the modem' => 'Connect the modem', > +'connect timeout' => 'Connect timeout:', > +'connected' => 'Connected', > +'connecting' => '正在尝试连接...', > +'connection' => 'Connection', > +'connection closed' => 'Not connected...', > +'connection debugging' => 'Connection debugging', > +'connection status and controlc' => 'Connection Status and -Control', > +'connection tracking' => 'iptables连接追踪', > +'connection type' => 'Connection Type', > +'connection type is invalid' => 'Connection type is invalid.', > +'connections' => '连接', > +'connections are associated with this ca. deleting the ca will delete these connections as well.' => 'connections are associated with this CA. Deleting the CA will delete these connections as well.', > +'connscheduler' => 'Connection Scheduler', > +'core notice 1' => 'Notice: There is an core-update from', > +'core notice 2' => 'to', > +'core notice 3' => 'available.', > +'could not be opened' => '无法被打开.', > +'could not connect to' => 'Could not connect to', > +'could not connect to www ipcop org' => 'Could not connect to www.ipfire.org', > +'could not connect to www ipfire org' => 'Could not connect to www.ipfire.org', > +'could not create directory' => 'Could not create directory.', > +'could not download latest patch list' => 'Could not download latest patch list (not connected).', > +'could not download latest updates' => 'Could not download latest updates.', > +'could not download the available updates list' => 'Could not download the available updates list.', > +'could not open available updates file' => 'Could not open available updates file.', > +'could not open installed updates file' => 'Could not open installed updates file', > +'could not open update information file' => 'Could not open update information file. The update file is corrupt.', > +'could not retrieve common name from certificate' => 'Could not retrieve common name from certificate.', > +'count' => 'Count', > +'countries' => 'Countries', > +'country' => '国家', > +'country codes and flags' => 'Country Codes and Flags:', > +'countrycode' => 'Code', > +'cpu frequency per' => 'CPU frequency per', > +'cpu idle usage' => 'Idle CPU Usage', > +'cpu interrupt usage' => 'Interrupt CPU Usage', > +'cpu iowait usage' => 'CPU waiting for IO', > +'cpu irq usage' => 'IRQ CPU Usage', > +'cpu nice usage' => 'Nice CPU Usage', > +'cpu steal usage' => 'Steal CPU Usage', > +'cpu system usage' => 'System CPU Usage', > +'cpu usage per' => 'CPU Usage per', > +'cpu user usage' => 'User CPU Usage', > +'create' => 'Create', > +'create mask' => 'UNIX rights for new created files', > +'create new backup' => 'Create a new backup set', > +'credits' => '开发人员', > +'crl' => 'Certificate Revocation List', > +'cron server' => 'CRON Server', > +'crypto error' => 'Cryptographic error', > +'crypto warning' => 'Cryptographic warning', > +'cryptographic settings' => 'Cryptographic Settings', > +'current' => 'Current', > +'current aliases' => 'Current aliases', > +'current class' => 'Current class', > +'current devices' => 'Current devices', > +'current dhcp leases on blue' => 'Current DHCP leases on BLUE', > +'current dynamic leases' => 'Current dynamic leases', > +'current fixed leases' => 'Current fixed leases', > +'current hosts' => 'Current hosts', > +'current media' => 'Current media', > +'current ovpn' => 'Active OVPN-Connection:', > +'current playlist' => 'Current Playlist', > +'current profile' => 'Current profile:', > +'current rules' => 'Current rules:', > +'custom networks' => 'Custom networks', > +'custom services' => 'Custom services', > +'daily firewallhits' => 'daily firewallhits', > +'dat without key' => 'An encrypted archive cannot be restored without the key.', > +'date' => 'Date', > +'date not in logs' => '指定日期未发现（或者只有部分）存在的日志', > +'day' => '日', > +'day after' => 'Day after', > +'day before' => 'Day before', > +'day-graph' => 'Day', > +'days' => 'Days', > +'dbfile' => 'Dbfile', > +'ddns help dnsmadeeasy' => 'In the field for hostname enter your ID (or a list of IDs seperated by;)', > +'ddns help freedns' => 'In the fied username enter your connect string', > +'ddns help plus' => '+ marks a mandatory field', > +'ddns hostname added' => 'Dynamic DNS hostname added', > +'ddns hostname modified' => 'Dynamic DNS hostname modified', > +'ddns hostname removed' => 'Dynamic DNS hostname removed', > +'ddns minimize updates' => 'Minimize updates: before an update, compares the dns IP for hostname "[host.]domain" against RED IP.', > +'ddns noip prefix' => 'To use no-ip in group mode, prefix hostname with %', > +'deactivate' => 'deactivate', > +'deactivate user' => 'deactivate user', > +'dead peer detection' => 'Dead Peer Detection', > +'debugme' => 'Not yet implemented', > +'december' => '十二月', > +'deep scan directories' => 'Scan recursive', > +'def lease time' => 'Default Lease Time', > +'default' => 'Default', > +'default IP address' => 'Default IP Address', > +'default ip' => 'Default IP address', > +'default lease time' => 'Default lease time (mins):', > +'default networks' => 'Default networks', > +'default renewal time' => 'Default Renewal Time', > +'default services' => 'Default services', > +'defaultwarning' => 'WARNING - Your settings will be lost and replaced by the default ones.', > +'delete' => 'Delete', > +'delete cron' => 'Delete cronjob', > +'delete pc' => 'Delete workstation', > +'delete share' => 'Delete share', > +'delete user' => 'Delete user', > +'demon login script' => 'Demon login script', > +'deprecated fs warn' => 'Deprecated filesystem! Newer kernel drop the support. Backup and reformat!', > +'description' => 'Description', > +'dest ip and port' => 'Dest. IP: Port', > +'destination' => '目标', > +'destination ip' => 'Destination IP', > +'destination ip bad' => 'Invalid destination IP', > +'destination ip or net' => 'Destination IP or net', > +'destination net' => 'Destination Net', > +'destination port' => 'Destination port', > +'destination port numbers' => 'Destination port must be a valid port number or port range.', > +'destination port overlaps' => 'Destination port range overlaps an existing port range.', > +'detail level' => 'Detail level', > +'details' => 'Details', > +'device' => 'Device', > +'devices on blue' => 'Devices on BLUE', > +'dh' => 'Diffie-Hellman parameters', > +'dh key move failed' => 'Diffie-Hellman parameters move failed.', > +'dh key warn' => 'Creating DH-parameters with a length of 2048 bits takes up to several minutes. Lengths of 3072 or 4096 bits might needs several hours. Please be patient.', > +'dh key warn1' => 'For weak systems or systems with little entropy, it is recommended to upload long Diffie-Hellman parameters by usage of the upload function.', > +'dh name is invalid' => 'Name is invalid, please use "dh1024.pem".', > +'dh parameter' => 'Diffie-Hellman parameters', > +'dhcp advopt add' => 'Add a DHCP option', > +'dhcp advopt added' => 'DHCP option added', > +'dhcp advopt blank value' => 'DHCP Option value cannot be empty.', > +'dhcp advopt custom definition' => 'Your custom option definition', > +'dhcp advopt definition' => 'Definition', > +'dhcp advopt definition exists' => 'Definition option already exists. You can only edit or remove it.', > +'dhcp advopt edit' => 'Edit a DHCP option', > +'dhcp advopt help' => 'List options', > +'dhcp advopt list' => '附加DHCP选项', > +'dhcp advopt modified' => 'DHCP option modified', > +'dhcp advopt name' => 'Option name', > +'dhcp advopt removed' => 'DHCP option removed', > +'dhcp advopt scope' => 'Option scope', > +'dhcp advopt scope global' => 'Global', > +'dhcp advopt scope help' => 'Global scope or limit scope to checked interfaces.', > +'dhcp advopt unknown' => 'DHCP option name not recognized', > +'dhcp advopt value' => 'Option value', > +'dhcp allow bootp' => 'Allow bootp clients', > +'dhcp base ip fixed lease' => 'Base IP for creating fix leases', > +'dhcp bootp pxe data' => 'Enter optional bootp pxe data for this fixed lease', > +'dhcp configuration' => 'DHCP配置信息', > +'dhcp create fixed leases' => 'Create fixed leases', > +'dhcp dns enable update' => 'Enable DNS Update (RFC2136):', > +'dhcp dns key name' => 'Key Name:', > +'dhcp dns update' => 'DNS更新', > +'dhcp dns update algo' => '算法:', > +'dhcp dns update secret' => 'Secret:', > +'dhcp fixed lease err1' => 'For a fix lease you have to enter the MAC address or the hostname, or you enter both.', > +'dhcp fixed lease help1' => 'IP Addresses might be entered as FQDN', > +'dhcp mode' => 'DHCP', > +'dhcp server' => 'DHCP服务器', > +'dhcp server disabled' => 'DHCP server disabled. Stopped.', > +'dhcp server disabled on blue interface' => 'DHCP server disabled on BLUE interface', > +'dhcp server enabled' => 'DHCP server enabled. Restarting.', > +'dhcp server enabled on blue interface' => 'DHCP server enabled on BLUE interface', > +'dhcp-options' => 'DHCP push options', > +'dial' => 'Connect', > +'dial profile' => 'Connect with profile', > +'dial user password' => 'Dial user password:', > +'dial user password has been changed' => 'Dial user password has been changed.', > +'dialing mode' => '拨号模式:', > +'dialup red not ppp' => '拨号配置只有当RED被设置为PPP拨号时候才可用 请检查网络设置.', > +'dialup settings' => '拨号设置', > +'directory mask' => 'UNIX directory rights', > +'directory writeable' => 'directory writeable', > +'disabled' => 'disabled', > +'disconnect' => 'OVPN Stop / Disconnect', > +'disconnects' => 'Disconnects', > +'disk access per' => 'Disk Access per', > +'disk usage' => '磁盘利用信息', > +'display' => '显示', > +'display charset' => 'Display Charset', > +'display hostname in window title' => '窗口标题显示主机名', > +'display traffic at home' => 'Display calculated traffic on startpage', > +'display webinterface effects' => 'Activate effects', > +'dl client arch' => 'Download Client Package (zip)', > +'dl client arch insecure' => 'Download insecure Client Package (zip)', > +'dmz' => 'DMZ', > +'dmz pinhole configuration' => 'DMZ pinhole configuration', > +'dmz pinhole rule added' => 'DMZ pinhole rule added; restarting DMZ pinhole', > +'dmz pinhole rule removed' => 'DMZ pinhole rule removed; restarting DMZ pinhole', > +'dmzpinholes for same net not necessary' => 'DMZ Pinholes are not necessary for same net. Select different source or destination net.', > +'dnat address' => 'Firewall Interface', > +'dns address deleted' => 'Successfully deleted!', > +'dns address deleted txt' => 'The DNS-Server addresses have been successfully deleted. You have to reboot or reconnect that the changes have effect!', > +'dns address done' => 'The DNS-Server address settings are going to be saved.', > +'dns address recon' => 'Trying to reconnect!', > +'dns check failed' => 'DNS check failed', > +'dns desc' => 'If the red0 interface gets the IP address information via DHCP from the provider, the DNS server addresses will be set automatically. Now here you are able to change these DNS server IP addresses with your own ones.', > +'dns error 0' => 'The IP address of the primary DNS server is not valid, please check your entries! The entered secondary DNS server address is valid.', > +'dns error 01' => 'The entered IP address of the primary and secondary DNS server are not valid, please check your entries!', > +'dns error 1' => 'The IP address of the secondary DNS server is not valid, please check your entries! The entered primary DNS server address is valid.', > +'dns forward disable dnssec' => 'Disable DNSSEC (dangerous)', > +'dns forwarding dnssec disabled notice' => '(DNSSEC disabled)', > +'dns header' => 'Assign DNS server addresses only for DHCP on red0', > +'dns list' => 'List of free public DNS servers', > +'dns menu' => 'Assign DNS-Server', > +'dns new 0' => 'New primary DNS server IP:', > +'dns new 1' => 'New secondary DNS server IP:', > +'dns proxy server' => 'DNS Proxy Server', > +'dns saved' => 'Successfully saved!', > +'dns saved txt' => 'The two entered DNS server addresses have been saved successfully. You have to reboot or reconnect that the changes have effect!', > +'dns server' => 'DNS服务器', > +'dns servers' => 'DNS服务器', > +'dns title' => 'Domain Name System', > +'dnsforward' => 'DNS Forwarding', > +'dnsforward add a new entry' => 'Add a new entry', > +'dnsforward configuration' => 'DNS forward configuration', > +'dnsforward dnssec disabled' => 'DNSSEC Validation is disabled', > +'dnsforward edit an entry' => 'Edit an existing entry', > +'dnsforward entries' => 'Current entries', > +'dnsforward forward_server' => '域名服务器', > +'dnsforward zone' => 'Zone', > +'dnssec aware' => 'DNSSEC Aware', > +'dnssec disabled warning' => 'WARNING: DNSSEC has been disabled', > +'dnssec information' => 'DNSSEC Information', > +'dnssec not supported' => 'DNSSEC Not supported', > +'dnssec validating' => 'DNSSEC Validating', > +'do not log this port list' => 'Drop this port list just before they are logged (reduces log size)', > +'dod' => 'Dial on Demand', > +'dod for dns' => 'Dial on Demand for DNS:', > +'dod not compatible with ddns' => 'Dial on demand is not compatible with dynamic dns services', > +'dod waiting' => 'Dial on Demand waiting', > +'domain' => 'Domain', > +'domain master' => 'Domain Master', > +'domain name' => 'Domain name', > +'domain name suffix' => 'Domain name suffix:', > +'domain not set' => 'Domain not set.', > +'donation' => '捐助', > +'donation-link' => 'https://www.paypal.com/en_US/GB/i/btn/btn_donateCC_LG.gif', > +'donation-text' => 'IPFire 被一群志愿者利用他们的空闲时间驱动和维护的. 我们需要一些小额的捐赠来维持此项目的运转。', > +'done' => 'Do it', > +'dos charset' => 'DOS Charset', > +'down and up speed' => '输入设定的上下行速度限制 然后点击 保存.', > +'downlink' => '下行', > +'downlink speed' => '下行速度(kbit/秒)', > +'downlink std class' => 'downlink standard class', > +'download' => 'download', > +'download ca certificate' => 'Download CA certificate', > +'download certificate' => 'Download file', > +'download dh parameter' => 'Download Diffie-Hellman parameters', > +'download host certificate' => 'Download host certificate', > +'download new ruleset' => '下载新的规则集合', > +'download pkcs12 file' => 'Download PKCS12 file', > +'download root certificate' => 'Download root certificate', > +'download tls-auth key' => 'Download tls-auth key', > +'dpd action' => 'Action', > +'dpd delay' => 'Delay', > +'dpd timeout' => 'Timeout', > +'driver' => 'Driver', > +'drop action' => '防火墙在阻塞模式时(转发)报文的默认行为', > +'drop action1' => '防火墙在阻塞模式时(流出)报文的默认行为', > +'drop action2' => '防火墙在阻塞模式时(流入)报文的默认行为', > +'drop forward' => '记录丢弃的转发报文', > +'drop input' => '记录丢弃的流入报文', > +'drop newnotsyn' => '记录丢弃的未同步报文', > +'drop outgoing' => '记录流出的报文', > +'drop portscan' => '记录丢弃的端口扫描报文', > +'drop proxy' => '丢弃所有无法找到地址的代理报文', > +'drop samba' => '丢弃全部的流经微软端口135,137,138,139,445,1025的报文', > +'drop wirelessforward' => '记录丢弃的无线转发报文', > +'drop wirelessinput' => '记录丢弃的无线输入报文', > +'dst port' => '目标端口', > +'dstprt range overlaps' => 'Destination port range overlaps an already defined port.', > +'dstprt within existing' => 'Destination port is within an already defined port range.', > +'duplicate ip' => 'Duplicate IP address entered', > +'duplicate ip bold' => 'Duplicate addresses are in bold', > +'duplicate mac' => 'Duplicate MAC address entered', > +'duplicate name' => 'That name is already being used, please choose another.', > +'dyn dns source choice' => 'Dynamic DNS provider(s) will receive an IP address for this IPFire from:', > +'dynamic dns' => 'Dynamic DNS', > +'dynamic dns client' => 'Dynamic DNS Client', > +'e-mail address too long' => 'E-mail address is too long; it should not be longer than 40 characters.', > +'eciadsl help' => 'To utilise the ECI ADSL modem you must upload a synch.bin file to your IPFire box. Please download the file from the ECIADSL website and then upload the file synch.bin using the form below.', > +'eciadsl upload' => 'Upload ECI ADSL synch.bin file', > +'edit' => 'Edit', > +'edit a rule' => 'Edit an existing rule:', > +'edit advanced settings when done' => 'Edit advanced settings when done.', > +'edit an existing alias' => 'Edit an existing alias', > +'edit an existing host' => 'Edit an existing host', > +'edit an existing lease' => 'Edit an existing lease', > +'edit device' => 'Edit device', > +'edit hosts' => 'Edit Hosts', > +'edit network' => 'Edit network', > +'edit printer' => 'edit printer', > +'edit service' => 'Edit service', > +'edit share' => 'Edit share', > +'editor' => 'Editor', > +'eg' => 'e.g.:', > +'eight hours' => '8 Hours', > +'email config' => 'Configuration', > +'email empty field' => 'Empty field', > +'email error' => 'ERROR: Test mail could not be sent', > +'email invalid' => 'Invalid field', > +'email invalid mailfqdn' => 'Invalid mail server fqdn', > +'email invalid mailip' => 'Invalid mail server IP address', > +'email invalid mailport' => 'Invalid mail server port', > +'email mailaddr' => 'Mail Server Address', > +'email mailpass' => 'Password', > +'email mailport' => 'Mail Server Port', > +'email mailrcpt' => 'Mail Recipient', > +'email mailsender' => 'Mail Sender', > +'email mailuser' => 'Username', > +'email server can not be empty' => 'E-mail server can not be empty', > +'email settings' => '邮件服务', > +'email subject' => 'IPFire Test Mail', > +'email success' => 'Test message successfully sent', > +'email testmail' => 'Send test mail', > +'email text' => 'Test mail from IPFire Mail Service', > +'email tls' => 'Use TLS', > +'email usemail' => '激活邮件服务', > +'emailreportlevel' => 'E-mailreportlevel', > +'emerging pro rules' => 'Emergingthreats.net Pro Rules', > +'emerging rules' => 'Emergingthreats.net Community Rules', > +'empty' => 'This field may be left blank', > +'empty profile' => 'empty', > +'enable ignore filter' => 'Enable ignore filter', > +'enable javascript' => 'Enable javascript', > +'enable wildcards' => 'Enable wildcards:', > +'enabled' => 'Enabled:', > +'enabled on' => 'Enabled on', > +'enabledtitle' => 'Enabled', > +'encapsulation' => 'Encapsulation', > +'encrypted' => 'Encrypted', > +'encryption' => 'Encryption:', > +'end address' => '结束地址:', > +'enter ack class' => 'Enter the ACK- Class and then press Save.', > +'enter data' => 'Enter your settings and then press Save.', > +'entropy' => 'Entropy', > +'entropy graphs' => 'Entropy Graphs', > +'err bk 1' => 'Error creating archive', > +'err bk 10 password' => 'Error with backup password', > +'err bk 2 key' => 'Error creating key file', > +'err bk 3 tar' => 'Error appending files to archive', > +'err bk 4 gz' => 'Error compressing archive', > +'err bk 5 encrypt' => 'Error encrypting archive', > +'err rs 1' => 'Error restoring archive', > +'err rs 6 decrypt' => 'Error decrypting archive', > +'err rs 7 untartst' => 'Invalid decrypted archive', > +'err rs 8 untar' => 'Error untarring archive', > +'error config' => 'Could not open /var/ipfire/ovpn/config/ZERINA.ovpn !', > +'error external access' => 'Could not open /var/ipfire/xtaccess/config (external acccess could not be granted)!', > +'error messages' => '错误信息', > +'esp encryption' => 'ESP Encryption:', > +'esp grouptype' => 'ESP Grouptype:', > +'esp integrity' => 'ESP Integrity:', > +'esp keylife' => 'ESP Keylife:', > +'esp keylife should be between 1 and 24 hours' => 'ESP keylife should be between 1 and 24 hours.', > +'every' => 'Every', > +'exampel' => 'example', > +'exclude logfiles' => '排除日志文件', > +'excluding buffers and cache' => '-/+ buffers/cache', > +'expected' => 'Expected', > +'expertoptions' => 'Expert options', > +'expires' => 'Expires', > +'export' => '导入', > +'exportkey' => 'Export PSK', > +'external access' => 'External Access', > +'external access configuration' => 'External access configuration', > +'external access rule added' => 'External access rule added; restarting access controller', > +'external access rule changed' => 'External access rule changed; restarting access controller', > +'external access rule removed' => ' External access rule removed; restarting access controller', > +'external aliases configuration' => 'External aliases configuration', > +'extrahd' => 'ExtraHD', > +'extrahd because there is already a device mounted' => ', because there is already a device mounted', > +'extrahd cant umount' => 'Can\'t umount', > +'extrahd detected drives' => 'detected drives', > +'extrahd install or load driver' => 'If your device isn\'t listed here, you need to install or load the driver. If you can see your device but no partitions you have to create them first.', > +'extrahd maybe the device is in use' => '. Maybe the device is in use', > +'extrahd to' => 'to', > +'extrahd to root' => 'to root', > +'extrahd unable to read' => 'Unable to read', > +'extrahd unable to write' => 'Unable to write', > +'extrahd you cant mount' => 'You can\'t mount', > +'false classnumber' => 'The Class-Number does not match the interface.', > +'false max bandwith' => 'Maximum bandwith is false.', > +'false min bandwith' => 'Minimum bandwith is false.', > +'february' => '二月', > +'fetch ip from' => 'Guess the real public IP with help of an external server', > +'fifteen minutes' => '15 Minutes', > +'filename' => '文件名', > +'filesystem full' => '磁盘空间已满', > +'fireinfo ipfire version' => 'IPFire 版本', > +'fireinfo is disabled' => 'Fireinfo is disabled', > +'fireinfo is enabled' => 'Fireinfo is enabled', > +'fireinfo is submitted' => 'Your profile is submitted to the fireinfo service.', > +'fireinfo is submitted button' => 'No, I do not want to send my profile anymore', > +'fireinfo kernel version' => 'Linux内核版本', > +'fireinfo not submitted' => '您的配置信息没有提交到fireinfo服务器.', > +'fireinfo not submitted button' => '是的，我想发送我的配置文件', > +'fireinfo pakfire version' => 'Pakfire版本', > +'fireinfo please enable' => '请开启fireinfo服务.', > +'fireinfo settings' => 'Fireinfo设置', > +'fireinfo system version' => '系统版本', > +'fireinfo why descr1' => '开启此功能对于IPFire的开发者来说是非常重要的', > +'fireinfo why descr2' => '服务. ', > +'fireinfo why enable' => '为什么启用fireinfo?', > +'fireinfo why read more' => '了解更多的原因.', > +'fireinfo your profile id' => '您的配置ID', > +'firewall' => '防火墙', > +'firewall graph country' => 'Firewall-Diagram (Country)', > +'firewall graph ip' => 'Firewall-Diagram (IP)', > +'firewall graph port' => 'Firewall-Diagram (Port)', > +'firewall hits' => '防火墙在如下时间的总点击量', > +'firewall hits per' => 'firewallhits per', > +'firewall log' => 'Firewall log', > +'firewall log country' => 'Firewall log (Country)', > +'firewall log ip' => 'Firewall log (IP)', > +'firewall log port' => 'Firewall log (Port)', > +'firewall logs' => '防火墙日志', > +'firewall logs country' => '防火墙日志图表(国家)', > +'firewall logs ip' => '防火墙日志图表(IP)', > +'firewall logs port' => '防火墙日志图表(端口)', > +'firewall rules' => '规则', > +'firewallhits' => '防火墙点击量', > +'firmware' => '固件', > +'firmware upload' => '上传固件/驱动', > +'first' => '第一个', > +'five minutes' => '5 Minutes', > +'fixed ip lease added' => 'Fixed IP lease added', > +'fixed ip lease modified' => 'Fixed IP lease modified', > +'fixed ip lease removed' => 'Fixed IP lease removed', > +'flag' => 'Flag', > +'force update' => 'Force update', > +'force user' => 'force all new file to user', > +'forward firewall' => 'Firewall', > +'forwarding rule added' => 'Forwarding rule added; restarting forwarder', > +'forwarding rule removed' => 'Forwarding rule removed; restarting forwarder', > +'forwarding rule updated' => 'Forwarding rule updated; restarting forwarder', > +'four hours' => '4 Hours', > +'free' => '空闲', > +'free memory' => 'Free Memory ', > +'free swap' => 'Free Swap', > +'frequency' => 'Frequency', > +'friday' => 'Friday', > +'fritzdsl help' => 'To utilise one of Fritz!DSL fcdsl / fcdslsl / fcdsl2 / fcdslusb / fcdslslusb modem, you must upload a package to your IPFire box. Please download the tarball corresponding to your version from the IPFire website and then upload the entire fcdsl-(your_version).tgz using the form below.', > +'fritzdsl upload' => 'Upload Fritz!DSL driver', > +'from' => '从', > +'from email adr' => 'From e-mail address', > +'from email pw' => 'From e-mail password', > +'from email server' => 'From Email server', > +'from email user' => 'From e-mail user', > +'from warn email bad' => 'From e-mail address is not valid', > +'fw blue' => 'BLUE 端防火墙选项', > +'fw default drop' => '防火墙策略', > +'fw logging' => '防火墙日志', > +'fw settings' => '防火墙设置', > +'fw settings color' => '在规则列表中显示不同的颜色', > +'fw settings dropdown' => '显示规则创建网站上的所有网络', > +'fw settings remark' => '显示规则表的评论', > +'fw settings ruletable' => '显示空的规则表', > +'fwdfw ACCEPT' => 'ACCEPT', > +'fwdfw DROP' => '丢弃', > +'fwdfw MODE1' => '丢弃全部报文', > +'fwdfw MODE2' => '许可全部报文', > +'fwdfw REJECT' => '拒绝', > +'fwdfw action' => 'Action', > +'fwdfw additional' => 'Additional settings', > +'fwdfw addrule' => 'Add/Edit rule:', > +'fwdfw all icmp' => 'All ICMP types', > +'fwdfw all subnets' => 'All subnets', > +'fwdfw change' => '更新', > +'fwdfw copy' => 'Copy', > +'fwdfw delete' => 'Delete', > +'fwdfw dnat' => 'Destination NAT (Port forwarding)', > +'fwdfw dnat error' => 'You have to select a single host for DNAT. Groups or networks are not allowed.', > +'fwdfw dnat extport' => 'The external port has to be empty when using Source NAT rules.', > +'fwdfw dnat nochoice' => 'Please pick Source NAT or Destination NAT from the NAT section.', > +'fwdfw dnat porterr' => 'You have to select a single port or portrange (tcp/udp) for NAT', > +'fwdfw dnat porterr2' => 'Cannot use external port (NAT) when no destination port is defined.', > +'fwdfw edit' => 'Edit', > +'fwdfw err concon' => 'Invalid number for concurrent connections', > +'fwdfw err nosrc' => 'No source selected.', > +'fwdfw err nosrcip' => 'Please provide a source IP address.', > +'fwdfw err notgt' => 'No destination selected.', > +'fwdfw err notgtip' => 'Please provide a destination IP address.', > +'fwdfw err prot_port' => 'Source- or targetport are not allowed with selected protocol', > +'fwdfw err prot_port1' => 'When using Source- or targetport you have to select TCP or UDP for protocol', > +'fwdfw err ratecon' => 'Invalid value for connections in Rate-limit', > +'fwdfw err remark' => 'Invalid characters in remark.', > +'fwdfw err ruleexists' => 'This rule already exists.', > +'fwdfw err same' => 'Source and destination are identical.', > +'fwdfw err samesub' => 'Source and destination IP addresses are from the same subnet.', > +'fwdfw err src_addr' => 'Invalid source MAC/IP address.', > +'fwdfw err tgt_addr' => 'Invalid destination IP address.', > +'fwdfw err tgt_grp' => 'The destination service group is empty', > +'fwdfw err tgt_mac' => 'A MAC addresses cannot be used as destination.', > +'fwdfw err tgt_port' => 'Invalid destination port.', > +'fwdfw err time' => 'You have to select at least one day.', > +'fwdfw external port nat' => 'External port (NAT)', > +'fwdfw final_rule' => 'Last rule: ', > +'fwdfw from' => '起始:', > +'fwdfw hint ip1' => 'The last generated rule may never match, because source and destination subnets may overlap.', > +'fwdfw hint ip2' => 'Please double-check if this rule makes sense: ', > +'fwdfw hint mac' => 'The destination group contains MAC addresses, which will be skipped during rule creation.', > +'fwdfw iface' => 'Interface', > +'fwdfw ipsec network' => 'IPsec networks:', > +'fwdfw limitconcon' => 'Limit concurrent connections per IP address', > +'fwdfw log' => '日志', > +'fwdfw log rule' => '日志规则', > +'fwdfw man port' => 'Port(s):', > +'fwdfw many' => 'Many', > +'fwdfw maxconcon' => 'Max. concurrent connections', > +'fwdfw menu' => 'Firewall', > +'fwdfw movedown' => 'Move down', > +'fwdfw moveup' => 'Move up', > +'fwdfw natport used' => 'The given port for NAPT is already in use by an other DNAT rule.', > +'fwdfw newrule' => '新建规则', > +'fwdfw numcon' => 'Number of connections', > +'fwdfw p2p txt' => 'Grant/deny access to P2P networks.', > +'fwdfw pol allow' => '允许', > +'fwdfw pol block' => '阻塞', > +'fwdfw pol text' => '本地网络发起的连接行为集合. 可以允许或阻塞全部的新建连接，默认是阻塞. 如果是阻塞模式，本地网络之间的通信也会被阻断.', > +'fwdfw pol text1' => '防火墙自身发起的连接行为集合. 注意! 你可能把自己挡在外面.', > +'fwdfw pol title' => '默认防火墙行为', > +'fwdfw prot41' => 'IPv6 Encapsulation (Protocol 41)', > +'fwdfw prot41 short' => 'IPv6 Encap', > +'fwdfw ratelimit' => 'Rate-limit new connections', > +'fwdfw red' => 'RED', > +'fwdfw reread' => '应用', > +'fwdfw rule action' => 'Rule action:', > +'fwdfw rule activate' => 'Activate rule', > +'fwdfw rulepos' => 'Rule position', > +'fwdfw rules' => 'Rules', > +'fwdfw snat' => 'Source NAT', > +'fwdfw source' => 'Source', > +'fwdfw sourceip' => 'Source address (MAC/IP address or network):', > +'fwdfw std network' => 'Standard networks:', > +'fwdfw target' => 'Destination', > +'fwdfw targetip' => 'Destination address (IP address or network):', > +'fwdfw till' => 'Until:', > +'fwdfw time' => 'Time Constraints', > +'fwdfw timeframe' => 'Use time constraints', > +'fwdfw toggle' => 'Activate or deactivate', > +'fwdfw togglelog' => 'Activate or deactivate logging', > +'fwdfw use nat' => 'Use Network Address Translation (NAT)', > +'fwdfw use srcport' => 'Source port:', > +'fwdfw use srv' => 'Destination port:', > +'fwdfw useless rule' => 'This rule is useless.', > +'fwdfw warn1' => 'This might lead to firewallrules which are applied to networks for which they are not intended to be.', > +'fwdfw wd_fri' => 'Fri', > +'fwdfw wd_mon' => 'Mon', > +'fwdfw wd_sat' => 'Sat', > +'fwdfw wd_sun' => 'Sun', > +'fwdfw wd_thu' => 'Thu', > +'fwdfw wd_tue' => 'Tue', > +'fwdfw wd_wed' => 'Wed', > +'fwdfw xt access' => 'Input', > +'fwhost Custom Host' => 'Host', > +'fwhost Custom Network' => 'Network', > +'fwhost IpSec Host' => 'IPsec host', > +'fwhost IpSec Network' => 'IPsec network', > +'fwhost OpenVPN N-2-N' => 'OpenVPN Net-to-Net', > +'fwhost OpenVPN static host' => 'OpenVPN static host', > +'fwhost OpenVPN static network' => 'OpenVPN static network', > +'fwhost Standard Network' => 'Standard network', > +'fwhost addgeoipgrp' => 'Add new GeoIP group', > +'fwhost addgrp' => 'Add new network/host group', > +'fwhost addgrpname' => 'Group name:', > +'fwhost addhost' => 'Add new host', > +'fwhost addnet' => 'Add new network', > +'fwhost addservice' => 'Add service', > +'fwhost addservicegrp' => 'Add new service group', > +'fwhost any' => 'Any', > +'fwhost attention' => 'ATTENTION', > +'fwhost back' => 'Back', > +'fwhost blue' => 'Blue', > +'fwhost ccdhost' => 'OpenVPN clients:', > +'fwhost ccdnet' => 'OpenVPN networks:', > +'fwhost change' => 'Modify', > +'fwhost changeremark' => 'You modified just the remark', > +'fwhost cust addr' => 'Hosts', > +'fwhost cust geoip' => 'GeoIP Groups', > +'fwhost cust geoipgroup' => 'GeoIP Groups', > +'fwhost cust geoiplocation' => 'GeoIP Locations', > +'fwhost cust grp' => '网络/主机组', > +'fwhost cust net' => 'Networks', > +'fwhost cust service' => '服务', > +'fwhost cust srvgrp' => '服务组', > +'fwhost deleted' => 'Deleted', > +'fwhost empty' => 'No rules defined', > +'fwhost err addr' => 'Invalid IP address or subnet', > +'fwhost err addrgrp' => 'Please provide a group name', > +'fwhost err empty' => 'Please fill in all input fields', > +'fwhost err emptytable' => 'No entries in this group', > +'fwhost err groupempty' => 'The selected group is empty', > +'fwhost err grpexist' => 'A group with the same name already exists', > +'fwhost err hostexist' => 'A host with the same name already exists', > +'fwhost err hostorip' => 'Invalid name or IP address', > +'fwhost err ip' => 'IP address invalid', > +'fwhost err ipcheck' => 'This IP address is already in use', > +'fwhost err ipmac' => 'IP/MAC address invalid', > +'fwhost err ipwithsub' => 'Please provide only an IP address (without subnet mask)', > +'fwhost err isccdhost' => 'This name is already used by an OpenVPN client connection', > +'fwhost err isccdiphost' => 'This IP address is already used by an OpenVPN client connection', > +'fwhost err isccdipnet' => 'This IP address is already used by an OpenVPN network connection', > +'fwhost err isccdnet' => 'This name is already used by an OpenVPN network', > +'fwhost err isingrp' => 'This entry already exists in the group', > +'fwhost err mac' => 'Invalid MAC address', > +'fwhost err maxservicetcp' => 'The maximal number of 15 TCP services has been reached in this group (port ranges count twice)', > +'fwhost err maxserviceudp' => 'The maximal number of 15 UDP services has been reached in this group (port ranges count twice)', > +'fwhost err name' => 'Invalid name. Allowed characters: Upper- and lowercase letters, digits, space and dash.', > +'fwhost err name1' => 'Empty name.', > +'fwhost err net' => 'Network/IP address already exists', > +'fwhost err netexist' => 'A network with the same name already exists', > +'fwhost err partofnet' => 'The network is a subnet of an already existing network.', > +'fwhost err port' => 'Port is empty', > +'fwhost err remark' => 'Invalid remark. Allowed characters: Upper- and lowercase letters, digits, space, dash, braces, semicolon, pipe and dot.', > +'fwhost err srv exists' => 'A service with the same name already exists', > +'fwhost err srvexist' => 'This service already exists in the group', > +'fwhost err sub32' => 'Please add a network, not a single host', > +'fwhost green' => 'Green', > +'fwhost hint' => '注意', > +'fwhost hosts' => 'Firewall Hosts', > +'fwhost icmptype' => 'ICMP type:', > +'fwhost ip_mac' => 'IP/MAC address', > +'fwhost ipadr' => 'IP address:', > +'fwhost ipsec host' => 'IPsec clients:', > +'fwhost ipsec net' => 'IPsec networks:', > +'fwhost menu' => '组规则', > +'fwhost netaddress' => 'Network address', > +'fwhost newgeoipgrp' => 'GeoIP 组', > +'fwhost newgrp' => '网络/主机组', > +'fwhost newhost' => '主机', > +'fwhost newnet' => '网络', > +'fwhost newservice' => '服务', > +'fwhost newservicegrp' => '服务组', > +'fwhost orange' => 'Orange', > +'fwhost ovpn_n2n' => 'OpenVPN Net-to-Net', > +'fwhost port' => '端口', > +'fwhost prot' => '协议', > +'fwhost reread' => 'Firewall rules need to be updated.', > +'fwhost reset' => 'Cancel', > +'fwhost services' => 'Services:', > +'fwhost srv_name' => 'Service name', > +'fwhost stdnet' => 'Standard networks:', > +'fwhost type' => 'Type', > +'fwhost used' => 'Used', > +'fwhost welcome' => '在此, 可以把主机，网络，服务编组, 这可以用来更快更迅速的创建新规则.', > +'fwhost wo subnet' => '(without subnet)', > +'g.dtm' => 'TO BE REMOVED', > +'g.lite' => 'TO BE REMOVED', > +'gateway' => '网关', > +'gateway ip' => '网关IP', > +'gen dh' => 'Generate new Diffie-Hellman parameters', > +'gen static key' => 'Generate a static key', > +'generate' => 'Generate root/host zertifikate', > +'generate a certificate' => 'Generate a certificate:', > +'generate dh key' => 'Generate Diffie-Hellman parameters', > +'generate iso' => '生成 ISO', > +'generate ptr' => 'Generate PTR', > +'generate root/host certificates' => 'Generate root/host certificates', > +'generate tripwire keys and init' => 'generate tripwire keys and init', > +'generatekeys' => 'Generate Keys', > +'generatepolicy' => 'Generate new policy', > +'generatereport' => 'Generate new report', > +'generating the root and host certificates may take a long time. it can take up to several minutes on older hardware. please be patient' => 'Generating the root and host certificates may take a long time. It can take up to several minutes on older hardware. Please be patient.', > +'genkey' => 'Generate PSK', > +'genre' => 'Genre', > +'geoip' => 'GeoIP', > +'geoipblock' => '阻塞GeoIP', > +'geoipblock block countries' => 'Block countries', > +'geoipblock configuration' => 'GeoIP Configuration', > +'geoipblock country code' => 'Country Code', > +'geoipblock country is allowed' => 'Incoming traffic from this country is allowed', > +'geoipblock country is blocked' => 'Incoming traffic from this country will be blocked', > +'geoipblock country name' => 'Country Name', > +'geoipblock enable feature' => 'Enable GeoIP based blocking:', > +'geoipblock flag' => 'Flag', > +'global settings' => 'Global Settings', > +'gpl i accept these terms and conditions' => 'I accept these terms and conditions', > +'gpl license agreement' => 'License Agreement', > +'gpl please read carefully the general public license and accept it below' => 'Please read carefully the General Public License and accept it below', > +'gpl unofficial translation of the general public license v3' => 'Unofficial translation of the General Public License v3', > +'graph' => '图表', > +'graph per' => 'per', > +'green' => 'GREEN', > +'green interface' => 'Green Interface', > +'grouptype' => 'Grouptype:', > +'guaranteed bandwith' => 'Guaranteed bandwith', > +'guardian' => 'Guardian', > +'guest ok' => 'allow guests to access', > +'gui settings' => '界面设置', > +'gz with key' => 'Only an encrypted archive can be restored on this machine.', > +'hangup' => '断开', > +'hangup string' => '挂起:', > +'harddisk temperature' => '硬盘温度', > +'harddisk temperature graphs' => 'HDD Graphs', > +'hardware graphs' => 'Hardware Graphs', > +'hardware support' => '硬件支持', > +'hdd temperature in' => 'Harddisk temperature in', > +'help' => '帮助', > +'high' => '高', > +'high memory usage' => 'High memory usage', > +'hint' => 'Hint:', > +'holdoff' => 'Holdoff time (in seconds)', > +'host' => 'Host', > +'host allow' => 'list with allowed hosts', > +'host certificate' => 'Host Certificate', > +'host configuration' => 'Host Configuration', > +'host deny' => 'list with denied hosts', > +'host ip' => 'Host IP address', > +'host to net vpn' => 'Host-to-Net Virtual Private Network (RoadWarrior)', > +'hostname' => '主机名', > +'hostname and domain already in use' => 'Hostname and domain already in use.', > +'hostname cant be empty' => 'Hostname can\'t be empty.', > +'hostname not set' => 'Hostname not set.', > +'hosts config added' => 'Hosts config added', > +'hosts config changed' => 'Hosts config changed', > +'hour' => '时', > +'hour-graph' => '时', > +'hours' => 'Hours', > +'hours2' => 'Hours', > +'ibod for dual isdn only' => 'iBOD can only be used with Dual ISDN.', > +'icmp selected but no type' => 'ICMP selected for protocol, but no ICMP type specified.', > +'icmp type' => 'ICMP Type', > +'id' => 'ID', > +'idle' => 'Idle', > +'idle timeout' => 'Idle timeout (mins; 0 to disable):', > +'idle timeout not set' => 'Idle timeout not set.', > +'ids apply' => 'Apply', > +'ids apply ruleset changes' => 'The ruleset changes are being applied. Please wait until all operations have completed successfully...', > +'ids automatic rules update' => 'Automatic Rule Update', > +'ids download new ruleset' => 'Downloading and unpacking new ruleset. Please wait until all operations have completed successfully...', > +'ids enable' => 'Enable Intrusion Prevention System', > +'ids hide' => 'Hide', > +'ids ignored hosts' => 'Whitelisted Hosts', > +'ids log hits' => 'Total of number of activated rules for', > +'ids log viewer' => '入侵检测日志查看', > +'ids logs' => '入侵检测日志', > +'ids monitor traffic only' => 'Monitor traffic only', > +'ids monitored interfaces' => 'Monitored Interfaces', > +'ids no network zone' => 'Please select at least one network zone to be monitored', > +'ids no ruleset available' => 'No ruleset is available. Please download one first', > +'ids oinkcode required' => 'The selected ruleset requires a subscription or an Oinkcode', > +'ids rules update' => '入侵检测规则更新', > +'ids ruleset autoupdate in progress' => 'Ruleset update in progress. Please wait until all operations have completed successfully...', > +'ids ruleset settings' => 'Ruleset Settings', > +'ids show' => 'Show', > +'ids working' => 'Changes are being applied. Please wait until all operations have completed successfully...', > +'iface' => '网卡', > +'ignore filter' => 'Ignore filter', > +'ike encryption' => 'IKE Encryption:', > +'ike grouptype' => 'IKE Grouptype:', > +'ike integrity' => 'IKE Integrity:', > +'ike lifetime' => 'IKE Lifetime:', > +'ike lifetime should be between 1 and 24 hours' => 'IKE lifetime should be between 1 and 24 hours.', > +'imei' => 'IMEI', > +'import' => '导入', > +'importkey' => '导入PSK', > +'imsi' => 'IMSI', > +'in' => '流入', > +'inactive' => 'inactive', > +'include logfiles' => '包含日志文件', > +'incoming' => '流入', > +'incoming compression in bytes per second' => 'Incoming Compression', > +'incoming firewall access' => 'Incoming Firewall Access', > +'incoming overhead in bytes per second' => 'Incoming Overhead', > +'incoming traffic in bytes per second' => '流入流量', > +'incorrect password' => 'Incorrect password', > +'info' => 'Info', > +'init string' => 'Init:', > +'insert floppy' => 'To backup to floppy, insert a formatted floppy into the drive on IPFire and click backup to floppy to backup the system configuration. Please examine the results carefully to make sure the backup completed successfully. This can take a while to complete, so please be patient.', > +'insert removable device' => 'Insert a removable device', > +'install' => 'Install', > +'install new update' => 'Install new update:', > +'installed' => 'Installed', > +'installed updates' => 'Installed updates:', > +'instant update' => 'Instant Update', > +'integrity' => 'Integrity:', > +'interface' => 'Interface', > +'interface mode' => 'Interface', > +'interfaces' => 'Interfaces', > +'internet' => '外网', > +'intrusion detection' => '入侵检测', > +'intrusion detection system' => '入侵检测系统', > +'intrusion detection system log viewer' => '入侵检测系统日志查看', > +'intrusion detection system rules' => '入侵检测系统规则', > +'intrusion detection system2' => '入侵检测系统:', > +'intrusion prevention system' => 'Intrusion Prevention System', > +'invalid broadcast ip' => 'Invalid broadcast IP', > +'invalid cache size' => 'Invalid cache size.', > +'invalid characters found in pre-shared key' => 'Invalid characters found in pre-shared key.', > +'invalid date entered' => 'Invalid date entered.', > +'invalid default lease time' => 'Invalid default lease time.', > +'invalid domain name' => 'Invalid domain name.', > +'invalid downlink speed' => 'Invalid downlink speed.', > +'invalid end address' => 'Invalid end address.', > +'invalid fixed ip address' => 'Invalid fixed IP address', > +'invalid fixed mac address' => 'Invalid fixed MAC address', > +'invalid hostname' => 'Invalid hostname.', > +'invalid input' => 'Invalid input', > +'invalid input for authentication method' => 'Invalid input for authentication method.', > +'invalid input for city' => 'Invalid input for city.', > +'invalid input for country' => 'Invalid input for country.', > +'invalid input for department' => 'Invalid input for department.', > +'invalid input for dhcp dns' => 'Invalid input for DHCP DNS', > +'invalid input for dhcp domain' => 'Invalid input for DHCP domain', > +'invalid input for dhcp wins' => 'Invalid input for DHCP WINS', > +'invalid input for dpd delay' => 'Invalid input for DPD delay', > +'invalid input for dpd timeout' => 'Invalid input for DPD timeout', > +'invalid input for e-mail address' => 'Invalid input for e-mail address.', > +'invalid input for esp keylife' => 'Invalid input for ESP Keylife', > +'invalid input for hostname' => 'Invalid input for hostname.', > +'invalid input for ike lifetime' => 'Invalid input for IKE lifetime', > +'invalid input for inactivity timeout' => 'Invalid input for Inactivity Timeout', > +'invalid input for interface address' => 'Invalid input for interface address', > +'invalid input for interface mode' => 'Invalid input for interface mode', > +'invalid input for interface mtu' => 'Invalid input to interface MTU', > +'invalid input for keepalive 1' => 'Invalid input for Keepalive ping', > +'invalid input for keepalive 1:2' => 'Invalid input for Keepalive use at least a ratio of 1:2', > +'invalid input for keepalive 2' => 'Invalid input for Keepalive ping-restart', > +'invalid input for local ip address' => 'Invalid input for local IP address', > +'invalid input for max clients' => 'Invalid input for Max Clients', > +'invalid input for mode' => 'Invalid input for mode', > +'invalid input for name' => 'Invalid input for user\'s full name or system hostname', > +'invalid input for oink code' => 'Invalid input for Oink code', > +'invalid input for organization' => 'Invalid input for organization', > +'invalid input for remote host/ip' => 'Invalid input for remote host/ip.', > +'invalid input for state or province' => 'Invalid input for state or province.', > +'invalid input for valid till days' => 'Invalid input for Valid till (days).', > +'invalid ip' => 'Invalid IP Address', > +'invalid ip or hostname' => 'Invalid IP Address or Hostname', > +'invalid keep time' => 'Keep time must be a valid number', > +'invalid key' => 'Invalid key.', > +'invalid loaded file' => 'Invalid loaded file', > +'invalid local-remote id' => 'local & remote id must not be equal and begin with a "@" sign. These are leftid and rightid in strongswan terminology.', > +'invalid logserver address' => 'Invalid syslogd server address', > +'invalid logserver protocol' => 'Invalid syslogd server protocol', > +'invalid mac address' => 'Invalid MAC address', > +'invalid max lease time' => 'Invalid max lease time.', > +'invalid maximum incoming size' => 'Invalid maximum incoming size.', > +'invalid maximum object size' => 'Invalid maximum object size.', > +'invalid maximum outgoing size' => 'Invalid maximum outgoing size.', > +'invalid md5sum' => 'Invalid MD5Sum.', > +'invalid minimum object size' => 'Invalid minimum object size.', > +'invalid mtu input' => 'Invalid MTU', > +'invalid netmask' => 'Invalid netmask', > +'invalid port' => 'Invalid port. Must be a valid port number.', > +'invalid port list' => 'Port list syntax is: port[,port]... where port is in /etc/services or number', > +'invalid primary dns' => 'Invalid primary DNS.', > +'invalid primary ntp' => 'Invalid Primary NTP server address', > +'invalid secondary dns' => 'Invalid secondary DNS.', > +'invalid secondary ntp' => 'Invalid Secondary NTP server address', > +'invalid start address' => 'Invalid start address.', > +'invalid time entered' => 'Invalid time entered.', > +'invalid time period' => 'Invalid time period', > +'invalid uplink speed' => 'Invalid uplink speed.', > +'invalid upstream proxy username or password setting' => 'Invalid upstream proxy username or password setting.', > +'invalid users' => 'list with users denied to access', > +'invalid vpi vpci' => 'Invalid VPI/VPCI settings', > +'invalid wins address' => 'Invalid WINS server address.', > +'invert' => 'Invert', > +'ip address' => 'IP地址', > +'ip address in use' => 'IP address already in use', > +'ip address outside subnets' => 'IP Address outside subnets', > +'ip alias added' => 'External IP alias added', > +'ip alias changed' => 'External IP alias changed', > +'ip alias removed' => 'External IP alias removed', > +'ip info' => 'IP信息', > +'ipfire has now rebooted' => 'IPFire正在重启.', > +'ipfire has now shutdown' => 'IPFire正在关闭.', > +'ipfire side' => 'IPFire side:', > +'ipfire side is invalid' => 'IPFire side is invalid.', > +'ipfires hostname' => 'IPFire\'s Hostname', > +'ipinfo' => 'IP info', > +'ipsec' => 'IPsec', > +'ipsec connection' => 'IPsec Connection', > +'ipsec interface mode gre' => 'GRE', > +'ipsec interface mode none' => '- None (Default) -', > +'ipsec interface mode vti' => 'VTI', > +'ipsec mode transport' => 'Transport', > +'ipsec mode tunnel' => 'Tunnel', > +'ipsec network' => 'IPsec network', > +'ipsec no connections' => 'No active IPsec connections', > +'ipsec settings' => 'IPsec Settings', > +'iptable rules' => 'IPTable rules', > +'iptmangles' => 'IPTable Mangles', > +'iptnats' => 'IPTable Network Address Translation', > +'ipts' => 'iptables', > +'isdn' => 'ISDN', > +'isdn settings' => 'Additional ISDN settings:', > +'isdn1' => 'Single ISDN', > +'isdn2' => 'Dual ISDN', > +'january' => '一月', > +'javascript menu error1' => 'If the drop down menus aren\'t working, disable javascript on the', > +'javascript menu error2' => 'page.', > +'july' => '七月', > +'june' => '六月', > +'kernel' => 'Kernel', > +'kernel logging server' => 'Kernel Logging Server', > +'kernel version' => 'Kernel version:', > +'key stuff' => '2. Keys and Certificates', > +'keyreset' => 'Reset Keys', > +'keys' => 'keys', > +'lan' => '内网', > +'lang' => 'en', > +'languagepurpose' => '选择IPFire显示的语言:', > +'last' => 'Last', > +'last activity' => 'Last Activity', > +'lateprompting' => 'Lateprompting', > +'lease expires' => 'Lease expires', > +'least preferred' => 'least preferred', > +'legend' => 'Legend', > +'length' => '长度', > +'lifetime' => 'Lifetime:', > +'line' => 'Line', > +'linkq' => 'Link Quality', > +'load printer' => 'Load Printer', > +'loaded modules' => 'Loaded modules:', > +'local hard disk' => '硬盘', > +'local ip address' => 'Local IP Address', > +'local master' => 'Local Master', > +'local ntp server specified but not enabled' => 'Local NTP server specified but not enabled', > +'local subnet' => 'Local subnet:', > +'local subnet is invalid' => 'Local subnet is invalid.', > +'local vpn hostname/ip' => 'Local VPN Hostname/IP', > +'localkey' => 'Localkey', > +'localkeyfile' => 'Localkeyfile', > +'log' => '日志', > +'log enabled' => 'Log Enabled', > +'log level' => 'Log Level', > +'log lines per page' => 'Lines per page', > +'log server address' => 'Syslog server:', > +'log server protocol' => 'protocol:', > +'log settings' => '设置', > +'log summaries' => '日志汇总', > +'log summary' => '总览', > +'log var messages' => 'Settings for /var/log/messages:', > +'log view' => 'Log View', > +'log viewer' => 'Log viewer', > +'log viewing options' => '日志查看选项', > +'log-options' => 'Logfile options', > +'loged in at' => 'Logged in at', > +'logging' => 'Logging', > +'logging server' => 'Logging Server', > +'loginlogout' => 'Login/Logout', > +'logs' => '日志', > +'lookup failed' => 'Reverse lookup failed', > +'loosedirectorychecking' => 'Loosedirectorychecking', > +'low' => 'Low', > +'ls_dhcpd' => 'DHCP服务器:', > +'ls_disk space' => '磁盘空间:', > +'ls_free/swan' => 'VPN:', > +'ls_httpd' => 'HTTP服务器:', > +'ls_init' => 'Init:', > +'ls_kernel' => 'Kernel and Firewall:', > +'ls_modprobe' => 'Module loader:', > +'ls_pam_unix' => 'Local user logins:', > +'ls_sshd' => '用户远程登陆:', > +'ls_syslogd' => 'Syslogd:', > +'mac address' => 'MAC地址', > +'mac address deleted' => 'Successfully deleted!', > +'mac address deleted txt' => 'The MAC address has been successfully deleted, but changes will only take effect after reboot.', > +'mac address done' => 'The MAC address settings are going to be saved.', > +'mac address error not 00' => 'MAC addresse has to start with 00!', > +'mac address error not valid' => 'MAC addresse not valid!', > +'mac address header' => 'MAC address on red0', > +'mac address in use' => 'MAC address already in use', > +'mac address menu' => 'Assign MAC-Address', > +'mac address recon' => 'Trying to reconnect!', > +'mac address saved' => 'Successfully saved!', > +'mac address saved txt' => 'The MAC address has been successfully saved, but changes will only take effect after reboot or reconnection.', > +'mac address title' => 'Assign MAC Address', > +'mac desc' => 'Here you are able to change the MAC address on red0. The address must be entered in hexadecimal (0-9,a-f), a valid entry is e.g. 00-01-02-0e-b8-d6 or 00:01:02:0e:b8:d6.', > +'mac filter' => 'MAC地址过滤', > +'mac new' => 'new MAC address:', > +'mac1 new' => 'new MAC address 1 (vdsl-inet):', > +'mac2 new' => 'new MAC address 2 (vdsl-iptv):', > +'magic packet send to:' => 'Magic packet send to:', > +'mailmethod' => 'Mailmethod', > +'mailprogramm' => 'Mailprogramm', > +'main page' => '首页', > +'manage ovpn' => '5. Tunnel Management:', > +'manage printers' => 'manage printers', > +'manage shares' => 'Manage Shares', > +'manual' => 'Manual', > +'manual control and status' => 'Manual control and status:', > +'manually' => 'Manually', > +'map to guest' => 'Map to Guest', > +'march' => '三月', > +'marked' => 'Marked', > +'masquerade blue' => '伪装 BLUE', > +'masquerade green' => '伪装 GREEN', > +'masquerade orange' => '伪装 ORANGE', > +'masquerading' => '伪装', > +'masquerading disabled' => '禁用伪装', > +'masquerading enabled' => '开启伪装', > +'max bandwith' => 'Maximum bandwith', > +'max incoming size' => 'Max incoming size (KB):', > +'max lease time' => 'Max lease time (mins):', > +'max outgoing size' => 'Max outgoing size (KB):', > +'max reliability' => 'Maximum reliability', > +'max renewal time' => 'Maximum Renewal Time', > +'max retries not set' => 'Max retries not set.', > +'max size' => 'Max object size (KB):', > +'max throughput' => 'Maximum throughput', > +'maximal' => 'Maximal', > +'maximum' => 'Maximum', > +'maximum retries' => 'Maximum retries:', > +'may' => '五月', > +'mbmon display' => 'Display', > +'mbmon fan' => 'Fan Speed', > +'mbmon fan in' => 'Fan speed in', > +'mbmon graphs' => 'mbmon Graphs', > +'mbmon label' => 'Label', > +'mbmon settings' => 'mbmongraph settings', > +'mbmon temp' => 'Temperature', > +'mbmon temp in' => 'Temperature in', > +'mbmon value' => 'Value', > +'mbmon volt' => 'Voltage', > +'meaning' => 'meaning', > +'media' => '设备', > +'media information' => '设备信息', > +'medium' => 'Medium', > +'memory' => 'Memory', > +'memory information' => '内存信息', > +'memory usage per' => 'Memory Usage per', > +'messages' => 'Messages', > +'messages logging' => '/var/log/messages的日志设置', > +'method' => 'Method:', > +'min costs' => 'Minimum costs', > +'min delay' => 'Minimum delay', > +'min size' => 'Min object size (KB):', > +'minimal' => 'Minimal', > +'minimum' => 'Minimum', > +'minute' => 'Minute', > +'minutes' => 'Minutes', > +'misc-options' => 'Miscellaneous options', > +'missing dat' => 'Encrypted archive not found', > +'missing gz' => 'Unencrypted archive not found', > +'mode' => 'Mode', > +'model' => 'Model', > +'modem' => 'Modem', > +'modem configuration' => 'Modem configuration', > +'modem hardware details' => 'Modem Hardware', > +'modem information' => 'Modem Information', > +'modem network bit error rate' => 'Bit Error Rate', > +'modem network information' => 'Network Information', > +'modem network mode' => 'Network Mode', > +'modem network operator' => 'Network Operator', > +'modem network registration' => 'Network Registration', > +'modem network signal quality' => 'Signal Quality', > +'modem no connection' => 'No Connection', > +'modem no connection message' => 'No connection to the modem could be established.', > +'modem on com1' => 'Modem on COM1', > +'modem on com2' => 'Modem on COM2', > +'modem on com3' => 'Modem on COM3', > +'modem on com4' => 'Modem on COM4', > +'modem on com5' => 'Modem on COM5', > +'modem settings have errors' => 'Modem settings have errors', > +'modem sim information' => 'SIM Information', > +'modem speaker on' => 'Modem speaker on:', > +'modem status' => 'Modem Status', > +'modify' => 'Modify', > +'modulation' => 'Modulation', > +'monday' => '周一', > +'monitor interface' => 'Monitor Interface', > +'month' => '月', > +'month-graph' => '月', > +'monthly firewallhits' => 'monthly firewallhits', > +'monthly start day bad' => 'Monthly start day is not correct', > +'monthly traffic bad' => 'Monthly volume is not correct', > +'monthly volume' => 'Monthly volume', > +'monthly volume start day' => 'First day of monthly period', > +'monthly volume start day short' => 'First day', > +'months' => 'Months', > +'more' => 'more', > +'most preferred' => 'most preferred', > +'mount' => 'Mount', > +'mounted on' => 'Mounted on', > +'mpfire' => 'Media Player for IPFire', > +'mpfire controls' => 'MPFire Control', > +'mpfire playlist' => 'MPFire Playlist', > +'mpfire scanning' => 'Scan for new files', > +'mpfire search' => 'MPFire Search', > +'mpfire songs' => 'MPFire songlist', > +'mpfire webradio' => 'MPFire Webradio', > +'mtu' => 'MTU', > +'mtu QoS' => 'This does not change the global MTU, it only sets MTU for QoS.', > +'my new share' => 'My new share', > +'name' => 'Name', > +'name is invalid' => 'Name is invalid', > +'name must only contain characters' => 'Name must only contain characters.', > +'name too long' => 'User\'s full name or system hostname is too long', > +'nameserver' => '域名服务器', > +'nat-traversal' => 'Nat Traversal:', > +'needreboot' => 'An update requires a restart', > +'net' => 'Net', > +'net address' => 'net address', > +'net config' => 'Network configuration', > +'net config type' => 'kind of network configuration', > +'net config type help' => 'GREEN is the local network, RED is the internet, BLUE is WLAN, ORANGE is the DMZ.', > +'net to net vpn' => 'Net-to-Net Virtual Private Network', > +'net traffic newversion' => 'New Net-Traffic version is available:', > +'net-traffic configuration' => 'Net-Traffic Configuration', > +'netbios name' => 'Netbios名字', > +'netmask' => '网络掩码', > +'network' => '网络', > +'network added' => 'Custom network added', > +'network configuration' => 'Network Configuration', > +'network internal' => '网络(内网)', > +'network options' => '网络选项', > +'network other' => '网络(其他)', > +'network red' => '网络(外网)', > +'network removed' => 'Custom network removed', > +'network status information' => 'Network Status Information', > +'network time' => 'Use a network time server', > +'network time from' => 'Obtain time from a network time server', > +'network traffic graphs' => 'Network traffic graphs', > +'network traffic graphs external' => '流量表 (外网)', > +'network traffic graphs internal' => '流量表 (内网)', > +'network traffic graphs others' => '网络 (其他)', > +'network updated' => 'Custom Network updated', > +'networks settings' => 'Firewall - Network settings', > +'never' => 'Never', > +'new optionsfw later' => 'Some options need a reboot to take effect', > +'new optionsfw must boot' => 'You must reboot your IPFire', > +'newer' => '最新的', > +'next' => 'next', > +'no' => 'No', > +'no alcatelusb firmware' => 'No Alcatel USB firmware. Please upload.', > +'no cfg upload' => 'No data was uploaded', > +'no dhcp lease' => '未获得DHCP租约', > +'no eciadsl synch.bin file' => 'No ECI ADSL synch.bin file. Please upload.', > +'no filter pass' => 'Enter the standard class for non-filtered packets.', > +'no fritzdsl driver' => 'No Fritz!DSL driver. Please upload.', > +'no hardware random number generator' => 'This system has no source for entropy.', > +'no information available' => 'No information available.', > +'no log selected' => 'No log selected', > +'no modem selected' => 'No modem selected', > +'no set selected' => 'No set was selected', > +'no time limit' => 'unlimited time', > +'none' => 'none', > +'none found' => 'none found', > +'nonetworkname' => 'No Network Name entered', > +'noservicename' => 'No Service Name entered', > +'not a valid ca certificate' => 'Not a valid CA certificate.', > +'not a valid dh key' => 'Not a valid Diffie-Hellman parameters file. Please use a length of 2048, 3072 or 4096 bits and the PKCS#3 format.', > +'not enough disk space' => 'Not enough disk space', > +'not present' => 'Not present', > +'not running' => 'not running', > +'not set' => 'not set', > +'notes' => 'Notes', > +'notice' => 'Notice', > +'november' => '十一月', > +'ntp common settings' => '常用设置', > +'ntp configuration' => '时间服务器设置', > +'ntp must be enabled to have clients' => 'NTP must be enabled to have clients.', > +'ntp server' => '时间服务器', > +'ntp sync' => '同步', > +'ntp syncro disabled' => '禁用网络对时', > +'ntp syncro enabled' => '启用网络对时', > +'ntpd restarted' => 'ntpd restarted', > +'number' => 'Number:', > +'o-no' => 'Inactiv', > +'o-yes' => 'Activ', > +'october' => '十月', > +'off' => 'off', > +'ok' => 'OK', > +'older' => '较早的', > +'on' => 'on', > +'one hour' => 'One Hour', > +'one month' => 'One Month', > +'one week' => 'One Week', > +'one year' => 'One Year', > +'online help en' => 'Online help (in english)', > +'only digits allowed in holdoff field' => 'Only digits allowed in holdoff field', > +'only digits allowed in max retries field' => 'Only digits allowed in max retries field.', > +'only digits allowed in the idle timeout' => 'Only digits allowed in the idle timeout.', > +'only red' => 'Only RED', > +'open to all' => 'Override external access to ALL', > +'openssl produced an error' => 'OpenSSL produced an error', > +'openvpn client' => 'OpenVPN client', > +'openvpn default' => 'Default', > +'openvpn destination port used' => 'The destination port is already used by another OpenVPN server.', > +'openvpn disabled' => 'DISABLED', > +'openvpn enabled' => 'ENABLED', > +'openvpn fragment allowed with udp' => 'Using fragment is only allowed when using the UDP protocol.', > +'openvpn log' => 'OpenVPN Log', > +'openvpn mssfix allowed with udp' => 'Using "mssfix" is only allowed when using the UDP protocol.', > +'openvpn network' => 'OpenVPN networks', > +'openvpn prefix local subnet' => 'Using the prefix notation is not supported for the local subnet. Please enter a subnet mask like 255.255.255.0.', > +'openvpn prefix openvpn subnet' => 'Using the prefix notation is not supported for the OpenVPN subnet. Please enter a subnet mask like 255.255.255.0.', > +'openvpn prefix remote subnet' => 'Using the prefix notation is not supported for the remote subnet. Please enter a subnet mask like 255.255.255.0.', > +'openvpn server' => 'OpenVPN server', > +'openvpn subnet is used' => 'The given subnet is used by another OpenVPN server.', > +'optional at cmd' => 'optional AT command', > +'optional data' => '3. Optional Settings:', > +'options' => 'Options', > +'options fw' => '选项', > +'optionsfw portlist hint' => 'The list of ports has to be comma separated (e.g. 137,138). You can specify up to a maximum of 15 ports per protocol.', > +'optionsfw warning' => 'Modifying these options implies restart of firewall', > +'or' => 'or', > +'orange' => 'ORANGE', > +'organization cant be empty' => 'Organization can\'t be empty.', > +'organization name' => 'Organization Name', > +'organization too long' => 'Organization is too long; it should not be longer than 60 characters.', > +'original' => 'Original', > +'os level' => 'OS Level', > +'other' => '其他', > +'other countries' => 'Other countries', > +'other login script' => 'Other login script', > +'otherip' => 'other IP', > +'otherport' => 'other Port', > +'our donors' => 'Our donors', > +'out' => '流出', > +'outgoing' => 'outgoing', > +'outgoing compression in bytes per second' => 'Outgoing compression', > +'outgoing firewall' => 'Outgoing Firewall', > +'outgoing firewall access' => 'Outgoing Firewall Access', > +'outgoing firewall add ip group' => 'Add IP Address Group', > +'outgoing firewall add mac group' => 'Add MAC Address Group', > +'outgoing firewall edit ip group' => 'Edit IP Address Group', > +'outgoing firewall edit mac group' => 'Edit MAC Address Group', > +'outgoing firewall group error' => 'A group with the same name exists.', > +'outgoing firewall groups' => 'Firewall Groups', > +'outgoing firewall ip groups' => 'Outgoing Firewall IP Address Groups', > +'outgoing firewall mac groups' => 'Outgoing Firewall MAC Address Groups', > +'outgoing firewall mode0' => 'Using this mode, all clients are able to access the internet without any restrictions.', > +'outgoing firewall mode1' => 'Using this mode, only connections based on the defined rules are allowed.', > +'outgoing firewall mode2' => 'Using this mode, all connections are allowed despited off the defined ones.', > +'outgoing firewall outgoing firewall reserved groupname' => 'Please use another group name, this name is reserved.', > +'outgoing firewall p2p allow' => 'Using the P2P protocol is allowed', > +'outgoing firewall p2p deny' => 'Using the P2P protocol is forbidden', > +'outgoing firewall p2p description 1' => 'The button', > +'outgoing firewall p2p description 2' => 'means that the p2p protocol is allowed or', > +'outgoing firewall p2p description 3' => 'that the p2p protocol is denied.', > +'outgoing firewall reset' => 'Reset all', > +'outgoing firewall view group' => 'View group', > +'outgoing firewall warning' => 'Not selecting source ip or mac ignores them', > +'outgoing overhead in bytes per second' => 'Outgoing Overhead', > +'outgoing traffic in bytes per second' => '流出流量', > +'override mtu' => 'Override default MTU', > +'ovpn' => 'OpenVPN', > +'ovpn add conf' => 'Additional configuration', > +'ovpn con stat' => 'OpenVPN Connection Statistics', > +'ovpn config' => 'OVPN-Config', > +'ovpn crypt options' => 'Cryptographic options', > +'ovpn device' => 'OpenVPN device:', > +'ovpn dh' => 'Diffie-Hellman parameters length', > +'ovpn dh new key' => 'Generate new Diffie-Hellman parameters', > +'ovpn dh parameters' => 'Diffie-Hellman parameters options', > +'ovpn dh upload' => 'Upload new Diffie-Hellman parameters', > +'ovpn dl' => 'OVPN-Config Download', > +'ovpn engines' => 'Crypto engine', > +'ovpn errmsg green already pushed' => 'Route for green network is always set', > +'ovpn errmsg invalid ip or mask' => 'Invalid network-address or subnetmask', > +'ovpn error dh' => 'The Diffie-Hellman parameter needs to be in minimum 2048 bit! Please generate or upload a new Diffie-Hellman parameter, this can be made below in the section "Diffie-Hellman parameters options".', > +'ovpn error md5' => 'You host certificate uses MD5 for the signature which is not accepted anymore. Please update to the latest IPFire version and generate a new root and host certificate. All OpenVPN clients needs then to be renewed!', > +'ovpn generating the root and host certificates' => 'Generating the root and host certificate can take a long time.', > +'ovpn ha' => 'Hash algorithm', > +'ovpn hmac' => 'HMAC options', > +'ovpn log' => 'OVPN-Log', > +'ovpn mgmt in root range' => 'A port number of 1024 or higher is required.', > +'ovpn mtu-disc' => 'Path MTU Discovery', > +'ovpn mtu-disc and mtu not 1500' => 'Path MTU Discovery requires a MTU of 1500.', > +'ovpn mtu-disc maybe' => 'Optionally', > +'ovpn mtu-disc no' => 'Never', > +'ovpn mtu-disc off' => 'Disabled', > +'ovpn mtu-disc with mssfix or fragment' => 'Path MTU Discovery cannot be used with mssfix or fragment.', > +'ovpn mtu-disc yes' => 'Forced', > +'ovpn no connections' => 'No active OpenVPN connections', > +'ovpn on blue' => 'OpenVPN on BLUE:', > +'ovpn on orange' => 'OpenVPN on ORANGE:', > +'ovpn on red' => 'OpenVPN on RED:', > +'ovpn port in root range' => 'A port number of 1024 or higher is required.', > +'ovpn reneg sec' => 'Session key lifetime:', > +'ovpn routes push' => 'Routes (one per line) e.g. 192.168.10.0/255.255.255.0 192.168.20.0/24', > +'ovpn routes push options' => 'Route push options', > +'ovpn server status' => 'Current OpenVPN server status:', > +'ovpn subnet' => 'OpenVPN subnet:', > +'ovpn subnet is invalid' => 'OpenVPN subnet is invalid.', > +'ovpn subnet overlap' => 'OpenVPN Subnet overlaps with : ', > +'ovpn warning rfc3280' => 'Your host certificate is not RFC3280 compliant. Please update to the latest IPFire version and generate as soon as possible a new root and host certificate. All OpenVPN clients needs then to be renewed!', > +'ovpn_fastio' => 'Fast-IO', > +'ovpn_mssfix' => 'MSSFIX Size', > +'ovpn_mtudisc' => 'MTU-Discovery', > +'ovpn_processprio' => 'Process priority', > +'ovpn_processprioD' => 'Deeply', > +'ovpn_processprioED' => 'Extremely deeply', > +'ovpn_processprioEH' => 'Extremely high', > +'ovpn_processprioEN' => 'More highly than normal', > +'ovpn_processprioH' => 'High', > +'ovpn_processprioLN' => 'More deeply than normal', > +'ovpn_processprioN' => 'Normal', > +'ovpn_processprioVD' => 'Very deeply', > +'ovpn_processprioVH' => 'Very high', > +'ovpnstatus log' => 'OVPN-Status-Log', > +'ovpnsys log' => 'OVPN-System-Log', > +'p2p block' => 'P2P网络', > +'p2p block save notice' => 'Please reload the firewall ruleset in order to apply your changes.', > +'package failed to install' => 'Package failed to install.', > +'pagerefresh' => 'Page is beeing refreshed, please wait.', > +'pakfire accept all' => 'Do you want to install all packages?', > +'pakfire ago' => 'ago.', > +'pakfire available addons' => '可安装的插件:', > +'pakfire configuration' => 'Pakfire配置', > +'pakfire core update auto' => 'Install core and addon updates automatically:', > +'pakfire core update level' => 'Core-Update-Level', > +'pakfire health check' => '检验镜像服务器是否可达(ping):', > +'pakfire install description' => 'Please choose one or more items from the list below and click the plus to install.', > +'pakfire install package' => 'You want to install the following packages: ', > +'pakfire installed addons' => '已安装插件:', > +'pakfire last core list update' => 'Last core list update made', > +'pakfire last package update' => 'Last packages list update made', > +'pakfire last serverlist update' => 'Last server list update made', > +'pakfire last update' => 'Last update made', > +'pakfire possible dependency' => ' There may be depending packages, here is a list of packages that need to be installed.', > +'pakfire register' => '在pakfire服务器注册:', > +'pakfire system state' => '系统信息', > +'pakfire uninstall description' => 'Please choose one or more items from the list below and click the minus to uninstall.', > +'pakfire uninstall package' => 'You want to uninstall the following packages: ', > +'pakfire update daily' => '每天检查更新:', > +'pakfire updates' => 'Available Update:', > +'pakfire working' => 'Pakfire is working ... Please wait until all operations have completed successfully.', > +'pap or chap' => 'PAP or CHAP', > +'parentclass' => 'Parentclass', > +'parentclass add' => 'Add parentclass', > +'password' => 'Password:', > +'password contains illegal characters' => 'Password contains illegal characters.', > +'password crypting key' => 'Password crypting the key', > +'password not set' => 'Password not set.', > +'password too short' => 'Password is too short.', > +'passwords do not match' => 'Passwords do not match.', > +'passwords must be at least 6 characters in length' => 'Passwords must be at least 6 characters in length', > +'path to directory' => 'path to share', > +'pc' => 'Workstation', > +'pc add' => 'Add workstation', > +'pdc options' => 'PDC options', > +'percentage' => 'Percentage', > +'persistent' => 'Persistent', > +'pfs yes no' => 'Perfect Forward Secrecy (PFS)', > +'phase1 group' => 'Phase1 Group', > +'phonebook entry' => 'Phonebook entry:', > +'ping disabled' => 'Disable ping response', > +'pkcs12 file password' => 'PKCS12 File Password', > +'play' => 'Play', > +'polfile' => 'Polfile', > +'policy' => 'Policy', > +'port' => '端口', > +'port forwarding configuration' => 'Port forwarding configuration', > +'ports' => 'Ports', > +'portscans' => 'portscancs', > +'pots' => 'Analog classic line', > +'ppp setup' => 'PPP设置', > +'pppoe' => 'PPPoE', > +'pppoe settings' => 'Additional PPPoE settings:', > +'pptp netconfig' => 'My Net Config', > +'pptp peer' => 'Peer', > +'pptp route' => 'PPTP Route', > +'pptp settings' => 'Additional PPTP settings:', > +'pre-shared key is too short' => 'Pre-shared key is too short.', > +'prefered master' => 'Prefered Master', > +'present' => 'Present', > +'prev' => 'previous', > +'primary dns' => '主DNS:', > +'primary ntp server' => 'Primary NTP server', > +'primary wins server address' => 'Primary WINS server address', > +'printcap name' => 'Printercap name', > +'printer' => 'Printer', > +'printername' => 'Printername', > +'printing' => '打印中', > +'printing options' => 'printing options', > +'priority' => '优先级', > +'processes' => 'Processes', > +'profile' => 'Profile', > +'profile deleted' => 'Profile deleted: ', > +'profile has errors' => 'Profile has errors', > +'profile made current' => 'Profile made current: ', > +'profile name' => 'Profile name:', > +'profile name not given' => 'Profile name not given.', > +'profile saved' => 'Profile saved: ', > +'profiles' => 'Profiles:', > +'proto' => '协议类型', > +'protocol' => '协议:', > +'proxy' => '代理', > +'proxy access graphs' => 'Proxy access graphs', > +'proxy admin password' => 'Cache administrator password', > +'proxy cachemgr' => 'Activate cachemanager', > +'proxy errmsg filedescriptors' => 'Wrong amount of filedescriptors', > +'proxy filedescriptors' => 'Amount of filedescriptors', > +'proxy log viewer' => '查看代理日志', > +'proxy logs' => '日志代理', > +'proxy no proxy extend' => 'or specify a list of not proxied destination', > +'proxy no proxy local' => 'Disallow local proxying on BLUE/GREEN networks', > +'proxy port' => '代理端口', > +'proxy reconfigure' => '保存并重新加载', > +'proxy reports' => '报表', > +'proxy reports daily' => '日报表', > +'proxy reports monthly' => '月报表', > +'proxy reports today' => '今天', > +'proxy reports weekly' => '周报表', > +'psk' => 'PSK', > +'ptr' => 'PTR', > +'pulse' => 'Pulse', > +'pulse dial' => 'Pulse dial:', > +'qos add subclass' => 'Add subclass', > +'qos enter bandwidths' => 'You will need to enter your downstream and upstream bandwidth!', > +'qos graphs' => 'Qos Graphs', > +'qos warning' => 'The rule must be saved, otherwise it will be discarded!', > +'quick control' => 'Quick Control', > +'quick playlist' => 'Quick Playlist', > +'ram' => '内存', > +'random number generator daemon' => 'Random Number Generator Daemon', > +'rdns' => 'rDNS', > +'read bytes' => 'Read Bytes', > +'read list' => 'list with readonly hosts', > +'real address' => 'Real Address', > +'reboot' => '重启', > +'reboot ask' => '确认重启?', > +'reboot question' => 'Extra query for restart and shutdown', > +'reboot schedule' => 'Schedule IPFire reboots', > +'reboot sure' => '确定重启?', > +'rebooting' => '正在重启', > +'rebooting ipfire' => '正在重启IPFire', > +'reconnect' => 'Reconnect', > +'reconnection' => 'Reconnection', > +'red' => '外网', > +'red1' => 'RED', > +'references' => 'References', > +'refresh' => '刷新', > +'refresh index page while connected' => '连接进入时刷新首页', > +'refresh update list' => 'Refresh update list', > +'registered user rules' => 'Talos VRT rules for registered users', > +'released' => 'Released', > +'reload' => 'reload', > +'remark' => 'Remark', > +'remark title' => 'Remark:', > +'remote access' => '远程访问', > +'remote announce' => 'Remote Announce', > +'remote browse sync' => 'Remote Browse Sync', > +'remote host/ip' => 'Remote host/IP', > +'remote logging' => '远程日志', > +'remote subnet' => 'Remote subnet:', > +'remote subnet is invalid' => 'Remote subnet is invalid.', > +'removable device advice' => 'Plug in a device, refresh, select and mount before usage. Umount before removal.', > +'remove' => 'Remove', > +'remove ca certificate' => 'Remove CA certificate', > +'remove x509' => 'Remove x509', > +'repeat' => 'Repeat', > +'reportfile' => 'Reportfile', > +'reportlevel' => 'Reportlevel', > +'request' => 'Request', > +'requested data' => '1. Connection Settings:', > +'required field' => 'Required field', > +'reserved dst port' => 'Destination port is reserved for IPFire use only:', > +'reserved src port' => 'Source port is reserved for IPFire use only:', > +'reset' => '重设', > +'reset shares' => 'Reset share', > +'resetglobals' => 'Reset global settings', > +'resetpolicy' => 'Reset policy to default', > +'resetshares' => 'Reset shares?', > +'resetting the vpn configuration will remove the root ca, the host certificate and all certificate based connections' => 'Resetting the X509 remove the root CA, the host certificate and all certificate based connections.', > +'restart' => '重启', > +'restart ovpn server' => 'Restart OpenVPN server', > +'restore' => '还原', > +'restore defaults' => '还原默认值', > +'restore hardware settings' => 'Restore hardware settings', > +'restore settings' => 'Reset Settings', > +'reverse sort' => 'Sort in reverse chronological order', > +'root' => 'Root', > +'root certificate' => '根证书', > +'root path' => 'Root path', > +'root user password' => 'Root password', > +'route subnet is invalid' => 'Additional push route subnet is invalid', > +'router ip' => 'Router IP address:', > +'routing table entries' => 'Routing Table Entries', > +'rsvd dst port overlap' => 'Destination Port Range overlaps a port reserved for IPFire:', > +'rsvd src port overlap' => 'Source Port Range overlaps a port reserved for IPFire:', > +'rules already up to date' => 'Rules already up to date', > +'runmode' => 'Runmode', > +'running' => '运行中', > +'safe removal of umounted device' => 'You can safely remove the unmounted device', > +'samba' => 'Samba', > +'samba join a domain' => 'Join a domain', > +'samba join domain' => 'Join domain', > +'samba status' => 'Samba Status', > +'saturday' => 'Saturday', > +'save' => '保存', > +'save config' => 'save settings', > +'save error' => 'Unable to save configuration archive file', > +'save settings' => 'Save settings', > +'save-adv-options' => 'Save advanced options', > +'script name' => 'Script name:', > +'search' => 'Search', > +'secondary dns' => 'Secondary DNS:', > +'secondary ntp server' => 'Secondary NTP server', > +'secondary wins server address' => 'Secondary WINS server address', > +'seconds' => 'Secs', > +'section' => 'Section', > +'secure shell server' => 'Secure Shell Server', > +'security' => 'Security', > +'security options' => 'Security Options', > +'select' => 'Select', > +'select dest net' => 'Select a destination net.', > +'select media' => 'Select media (only FAT supported for removable media)', > +'select source net' => 'Select a source net. If you have no ORAGNE or BLUE net configured, you need no DMZ Pinholes.', > +'selecttraffic' => 'Select utilization-overview:', > +'send cr' => 'ISP requires Carriage Return:', > +'send email notification' => 'Enabled, send e-mail notification', > +'send test mail' => 'Send Teste-mail', > +'september' => '九月', > +'serial' => 'Serial', > +'server reserved' => 'The connection name server is reserved and not allowed', > +'server restart' => 'You are not able to save any changes while the OpenVPN server is running.', > +'server string' => 'Server String', > +'service' => '服务', > +'service added' => 'Custom network service added', > +'service name' => 'Service name:', > +'service removed' => 'Custom network service removed', > +'service updated' => 'Custom network service updated', > +'servicename' => '服务名称', > +'services' => '服务', > +'services settings' => 'Firewall - Services settings', > +'set' => 'set', > +'set time now' => 'Set time now', > +'set time now help' => 'To queue a synchronization event at any time (even while using a repeating schedule), press the Set time now button. Please note that you may have to wait for five minutes, or more, before a sync event occurs.', > +'settings' => '设置', > +'shaping add options' => 'Add service', > +'shaping list options' => 'Traffic shaping services', > +'shared' => 'shared', > +'sharename' => 'Sharename', > +'shares' => 'Shares', > +'show ajax speedmeter in footer' => '显示 Ajax 访问速度', > +'show areas' => 'show areas', > +'show ca certificate' => 'Show CA certificate', > +'show certificate' => 'Show file', > +'show crl' => 'Show certificate revocation list', > +'show dh' => 'Show Diffie-Hellman parameters', > +'show host certificate' => 'Show host certificate', > +'show last x lines' => 'Show last x lines', > +'show lines' => 'Show lines', > +'show root certificate' => 'Show root certificate', > +'show share options' => 'Show shares options', > +'show tls-auth key' => 'Show tls-auth key', > +'shuffle' => 'Shuffle', > +'shutdown' => '关机', > +'shutdown ask' => '关机?', > +'shutdown control' => '关机控制', > +'shutdown sure' => '确定要关机吗?', > +'shutdown2' => '关机:', > +'shutting down' => '正在关机', > +'shutting down ipfire' => '正在关闭IPFire', > +'since' => 'since', > +'sitekey' => 'Sitekey', > +'sitekeyfile' => 'Sitekeyfile', > +'size' => '大小', > +'smart information' => 'S.M.A.R.T. 信息', > +'smartwarn1' => '设备:', > +'smartwarn2' => 'reports S.M.A.R.T. error', > +'smbreload' => 'Reload samba', > +'smbrestart' => 'Restart samba', > +'smbstart' => 'Start samba', > +'smbstop' => 'Stop samba', > +'smtphost' => 'SMTP host', > +'smtpport' => 'SMTP port', > +'snat new source ip address' => 'New source IP address', > +'socket options' => 'Socket options', > +'software version' => 'Software Version', > +'sort ascending' => 'Sort ascending', > +'sort descending' => 'Sort descending', > +'sound' => '声音', > +'source' => '来源', > +'source ip' => '源IP', > +'source ip and port' => '源IP:端口', > +'source ip bad' => 'Not a valid IP address or a network address.', > +'source ip country' => 'Source IP Country', > +'source ip in use' => 'Source IP in use:', > +'source ip or net' => 'Source IP or Net', > +'source net' => 'Source Net', > +'source network' => 'Source IP, or network (blank for "ALL"):', > +'source port' => 'Source port', > +'source port in use' => 'Source port in use:', > +'source port numbers' => 'Source port must be a valid port number or port range.', > +'source port overlaps' => 'Source port range overlaps an existing port range.', > +'speaker off' => 'Speaker off:', > +'speaker on' => 'Speaker on:', > +'squid extension methods' => 'Your <tt>extension_methods</tt> list', > +'squid extension methods invalid' => 'Your \'extension_methods\' list can only contain uppercase words of letters and digits, separated with a space. ', > +'squid fix cache' => 'Repair cache', > +'src port' => '源端口', > +'srcprt range overlaps' => 'Source port range overlaps an already defined port.', > +'srcprt within existing' => 'Source port is within an already defined port range.', > +'ssdmz pinholes' => 'DMZ Pinholes', > +'ssh' => 'SSH', > +'ssh access' => 'SSH访问', > +'ssh access tip' => 'IPFire SSH is not using default port 22!', > +'ssh active sessions' => 'Active logins', > +'ssh agent forwarding' => 'Allow SSH Agent Forwarding', > +'ssh fingerprint' => '指纹', > +'ssh host keys' => 'SSH主机密钥', > +'ssh is disabled' => 'SSH is disabled. Stopping.', > +'ssh is enabled' => 'SSH is enabled. Restarting.', > +'ssh key' => '密钥', > +'ssh key size' => '大小 (字节)', > +'ssh keys' => '允许使用公共密钥登陆', > +'ssh login time' => 'Logged in since', > +'ssh no active logins' => 'No active logins', > +'ssh no auth' => 'You have not allowed any authentication methods; this will stop you logging in', > +'ssh passwords' => '允许使用密码登陆', > +'ssh port' => '设置SSH的端口为 22 (默认 222)', > +'ssh portfw' => '允许TCP转发', > +'ssh tempstart15' => '15分钟后停止SSH服务', > +'ssh tempstart30' => '30分钟后停止SSH服务', > +'ssh username' => 'Username', > +'ssh1 disabled' => 'SSHv1 is disabled, a version 2 client will be required.', > +'ssh1 enabled' => 'SSHv1 is enabled, old clients will be supported.', > +'ssh1 support' => 'Support SSH protocol version 1 (required only for old clients)', > +'ssnetwork status' => '网络状态', > +'sspasswords' => '密码', > +'ssport forwarding' => 'Port Forwarding', > +'ssproxy graphs' => 'Proxy Graphs', > +'sssystem status' => '系统状态', > +'sstraffic' => 'Net-Traffic', > +'sstraffic graphs' => 'Traffic Graphs', > +'standard login script' => 'Standard login script', > +'start' => '开始', > +'start address' => '起始地址:', > +'start ovpn server' => 'Start OpenVPN Server', > +'state or province' => 'State or Province', > +'static ip' => '静态IP', > +'static routes' => '静态路由', > +'status' => '状态', > +'status information' => '状态信息', > +'status ovpn' => 'OpenVPN', > +'std classes' => 'Standardclasses', > +'stop' => '停止', > +'stop ovpn server' => 'Stop OpenVPN Server', > +'stopped' => '已停止', > +'subject' => 'Subject', > +'subject test' => 'Teste-mail', > +'subject warn' => 'Warning - warnlevel reached', > +'subnet' => 'Subnet', > +'subnet is invalid' => 'Netmask is invalid', > +'subnet mask' => 'Subnet Mask', > +'subscripted user rules' => 'Talos VRT rules with subscription', > +'successfully refreshed updates list' => 'Successfully refreshed updates list.', > +'summaries kept' => 'Keep summaries for', > +'sunday' => 'Sunday', > +'support donation' => 'Support the IPFire project with your donation', > +'swap' => '交换分区', > +'swap usage per' => 'Swap usage per', > +'system' => '系统', > +'system graphs' => 'System Graphs', > +'system has hwrng' => 'This system has a hardware random number generator.', > +'system has rdrand' => 'This system has support for Intel(R) RDRAND.', > +'system information' => '系统信息', > +'system is offline' => 'The system is offline.', > +'system log viewer' => '系统日志查看器', > +'system logs' => '系统日志', > +'system status information' => '系统状态信息', > +'ta key' => 'TLS-Authentification-Key', > +'tcp more reliable' => 'TCP (more reliable)', > +'telephone not set' => '没有设置电话号码', > +'template' => '预览', > +'template warning' => '有两种方式设置Qos. 第一, 点击保存按钮生成类型和规则. 第二, 点击预设按钮生成的类型和规则将会被设置为模板.', > +'ten minutes' => '10 Minutes', > +'teovpn_fragment' => 'Fragmentsize', > +'test' => 'test', > +'test email could not be sent' => 'Could not sent Testemail', > +'test email was sent' => 'Testemail was send successfully', > +'the following update was successfully installed' => 'The following update was successfully installed', > +'the statistics were last updated at' => 'The statistics were last updated at', > +'theme' => '主题', > +'there are updates' => 'There are updates available for your system. Please go to the "updates" section for more information.', > +'there are updates available' => 'There are updates available for your system. It is strongly urged that you install them as soon as possible.', > +'there was no file upload' => 'There was no file upload.', > +'thirty minutes' => '30 Minutes', > +'this feature has been sponsored by' => 'This feature has been sponsored by', > +'this is not a valid archive' => 'This is not a valid archive.', > +'this is not an authorised update' => 'This is not an authorised update.', > +'this months volume' => 'This months volume', > +'this update is already installed' => 'This update is already installed.', > +'this weeks volume' => 'This weeks volume', > +'thursday' => 'Thursday', > +'time' => '时间', > +'time date manually reset' => 'Time/Date manually reset.', > +'time server' => '时间服务器', > +'timeout must be a number' => 'Timeout must be a number.', > +'title' => '标题', > +'to' => '到', > +'to email adr' => 'To e-mail address', > +'to install an update' => 'To install an update please upload the .tgz.gpg file below:', > +'to warn email bad' => 'To e-mail address is not valid', > +'toggle' => 'pause/resume', > +'toggle enable disable' => 'Enable or disable', > +'tone' => 'Tone', > +'tone dial' => 'Tone dial:', > +'too long 80 char max' => ' is too long, maximum allowed is 80 characters', > +'tor' => 'Tor', > +'tor 0 = disabled' => '0 = disabled', > +'tor accounting' => 'Accounting', > +'tor accounting bytes' => 'Traffic (read/written)', > +'tor accounting bytes left' => 'left', > +'tor accounting interval' => 'Interval (UTC)', > +'tor accounting limit' => 'Accounting limit (MB)', > +'tor accounting period' => 'Accounting period', > +'tor accounting period daily' => 'daily', > +'tor accounting period monthly' => 'monthly', > +'tor accounting period weekly' => 'weekly', > +'tor acls' => '访问控制', > +'tor allowed subnets' => 'Allowed subnets (one per line)', > +'tor bandwidth burst' => 'Max. burst', > +'tor bandwidth rate' => 'Max. rate', > +'tor bandwidth settings' => 'Bandwidth Settings', > +'tor bandwidth unlimited' => 'unlimited', > +'tor bridge enabled' => 'Enable Tor bridge', > +'tor common settings' => 'Common Settings', > +'tor configuration' => 'Tor Configuration', > +'tor connected relays' => 'Connected relays', > +'tor contact info' => 'Contact Info', > +'tor daemon' => 'Daemon', > +'tor directory port' => 'Directory port', > +'tor enabled' => 'Enable Tor', > +'tor errmsg invalid accounting limit' => 'Invalid accounting limit', > +'tor errmsg invalid directory port' => 'Invalid directory port', > +'tor errmsg invalid ip or mask' => 'Invalid IP subnet', > +'tor errmsg invalid node id' => 'Invalid node ID', > +'tor errmsg invalid relay address' => 'Invalid relay address', > +'tor errmsg invalid relay name' => 'Invalid relay nickname', > +'tor errmsg invalid relay port' => 'Invalid relay port', > +'tor errmsg invalid socks port' => 'Invalid SOCKS port', > +'tor exit country' => 'Exit country', > +'tor exit country any' => 'Any country', > +'tor exit nodes' => 'Exit Nodes', > +'tor relay address' => 'Relay address', > +'tor relay configuration' => 'Tor Relay Configuration', > +'tor relay enabled' => 'Enable Tor Relay', > +'tor relay external address' => 'Relay external address', > +'tor relay fingerprint' => 'Relay fingerprint', > +'tor relay mode' => 'Relay mode', > +'tor relay mode bridge' => 'Bridge', > +'tor relay mode exit' => 'Exit-Node', > +'tor relay mode private bridge' => 'Private bridge', > +'tor relay mode relay' => 'Relay only', > +'tor relay nickname' => 'Relay nickname', > +'tor relay port' => 'Relay port', > +'tor service' => 'Tor Service', > +'tor socks port' => 'SOCKS port', > +'tor stats' => 'Statistics', > +'tor traffic limit hard' => 'Traffic limit has been reached.', > +'tor traffic limit soft' => 'Traffic limit almost reached. Not accepting any new connections.', > +'tor traffic read written' => 'Total traffic (read/written)', > +'tor use exit nodes' => 'Use only these exit nodes (one per line)', > +'total connection time' => 'Total connection time', > +'total hits for log section' => 'Total hits for log section', > +'traffic back' => 'Back', > +'traffic calc time' => 'Time of calculation', > +'traffic calc time bad' => 'Calculation time is not correct', > +'traffic info messages' => 'Info messages', > +'traffic monitor' => 'Traffic Monitor', > +'traffic on' => '流量', > +'traffic shaping' => 'Traffic Shaping', > +'traffic shaping settings' => 'Traffic Shaping Settings', > +'traffic warn level bad' => 'Warnlevel is not correct', > +'trafficblue' => 'WLAN', > +'trafficdate' => 'Date', > +'trafficfrom' => 'From', > +'trafficgreen' => 'Internal net', > +'trafficin' => 'Input', > +'trafficorange' => 'DMZ', > +'trafficout' => 'Output', > +'trafficred' => 'Internet', > +'traffics' => 'Utilization-overview', > +'trafficsum' => 'Totals', > +'trafficto' => 'To', > +'transfer limits' => 'Transfer limits', > +'transparent on' => 'Transparent on', > +'transport mode does not support vti' => 'VTI is not support in transport mode', > +'tripwire' => 'Tripwire', > +'tripwire cronjob' => 'tripwire cronjob', > +'tripwire functions' => 'tripwire functions', > +'tripwire reports' => 'tripwire reports', > +'tripwireoperating' => 'The process was started. This may take serverall minutes, please wait the window will automaticly refresh after the process has finished.', > +'tripwirewarningdatabase' => 'WARNING - Your database will be updated with the data of the last report. Please ensure that no unauthorized changes are reported. Therefor the local-key is needed.', > +'tripwirewarningkeys' => 'WARNING - This will erase your current keys, config, and database and generate them new.', > +'tripwirewarningpolicy' => 'WARNING - Your policy will be rebuild, after that your database will be reinitalised. Therefor the site-key and the local-key are neeeded.', > +'tuesday' => 'Tuesday', > +'twelve hours' => '12 Hours', > +'two weeks' => 'Two Weeks', > +'type' => 'Type', > +'udp less overhead' => 'UDP (less overhead)', > +'umount' => 'Umount', > +'umount removable media before to unplug' => 'Umount removable media before unplugging the device', > +'unable to alter profiles while red is active' => 'Unable to alter profiles while RED is active.', > +'unable to contact' => 'Unable to contact', > +'unblock' => 'Unblock', > +'unblock all' => 'Unblock all', > +'uncheck all' => 'Uncheck all', > +'unencrypted' => 'Unencrypted', > +'uninstall' => 'Uninstall', > +'unix charset' => 'UNIX Charset', > +'unix group' => ' UNIX usergroup', > +'unix password sync' => 'Unix Password Sync', > +'unix shell' => 'UNIX Shell', > +'unknown' => 'UNKNOWN', > +'unlimited' => 'Unlimited', > +'unnamed' => 'Unnamed', > +'update' => '更新', > +'update accelerator' => 'Update Accelerator', > +'update ruleset' => 'Update ruleset', > +'update time' => 'Update the time:', > +'update transcript' => 'Update transcript', > +'updatedatabase' => 'Update Database with last report', > +'updates' => 'Updates', > +'updates installed' => 'Ruleset update from', > +'updates is old1' => 'Your update file is ', > +'updates is old2' => 'days old. We recommend you update it on the System>Updates page.', > +'updxlrtr 3 months' => 'three months', > +'updxlrtr 6 months' => 'six months', > +'updxlrtr all files' => 'all files ...', > +'updxlrtr cache dir' => 'Cache directory', > +'updxlrtr cache maintenance' => 'Cache maintenance', > +'updxlrtr cache size' => 'Cache size (bytes)', > +'updxlrtr cache statistics' => 'Cache statistics', > +'updxlrtr cancel download' => 'Cancel download', > +'updxlrtr children' => 'Number of accelerator processes', > +'updxlrtr common settings' => 'Common settings', > +'updxlrtr condition download' => 'Download', > +'updxlrtr condition nosource' => 'No source', > +'updxlrtr condition ok' => 'Up to date', > +'updxlrtr condition outdated' => 'Out of date', > +'updxlrtr condition suspended' => 'Suspended', > +'updxlrtr condition unknown' => 'Unknown', > +'updxlrtr configuration' => 'Update accelerator configuration', > +'updxlrtr current downloads' => 'Files being downloaded into the local cache', > +'updxlrtr current files' => 'Current files in local cache', > +'updxlrtr daily' => 'daily', > +'updxlrtr data from cache' => 'Data from cache (bytes)', > +'updxlrtr disk usage' => 'Disk usage', > +'updxlrtr efficiency index' => 'Cache efficiency index', > +'updxlrtr empty repository' => 'Local cache is empty', > +'updxlrtr enable autocheck' => 'Enable automatic source checkup', > +'updxlrtr enable log' => 'Enable log', > +'updxlrtr filename' => 'Name', > +'updxlrtr files' => 'Files', > +'updxlrtr filesize' => 'Size', > +'updxlrtr full autosync' => 'Replace outdated files during checkup', > +'updxlrtr invalid disk usage' => 'Invalid value for max. disk usage', > +'updxlrtr invalid download rate' => 'Invalid value for max. download rate', > +'updxlrtr invalid num of children' => 'Invalid number of accelerator processes', > +'updxlrtr last access' => 'Last cache access', > +'updxlrtr last checkup' => 'Last source checkup', > +'updxlrtr low download priority' => 'Lower CPU priority for downloads', > +'updxlrtr maintenance' => 'Maintenance', > +'updxlrtr marked as' => 'marked as', > +'updxlrtr max disk usage' => 'Max. disk usage', > +'updxlrtr max download rate' => 'Max. external download rate (kbit/s)', > +'updxlrtr month' => 'one month', > +'updxlrtr monthly' => 'monthly', > +'updxlrtr not accessed' => 'not accessed since', > +'updxlrtr not enabled' => 'Update Accelerator is not enabled on the web proxy page', > +'updxlrtr other' => '其他', > +'updxlrtr passive mode' => 'Enable passive mode', > +'updxlrtr pending downloads' => 'Pending downloads', > +'updxlrtr performance options' => 'Performance options', > +'updxlrtr progress' => 'Progress', > +'updxlrtr purge' => 'Purge', > +'updxlrtr remove file' => 'Remove from cache', > +'updxlrtr save and restart' => 'Save and Restart', > +'updxlrtr source' => 'Source', > +'updxlrtr source checkup' => 'Source checkup', > +'updxlrtr source checkup schedule' => 'Source checkup schedule', > +'updxlrtr sources' => 'Sources', > +'updxlrtr standard view' => 'Standard view', > +'updxlrtr statistics' => 'Statistics', > +'updxlrtr statistics by source' => 'Statistics by source', > +'updxlrtr summary' => 'Summary', > +'updxlrtr total cache size' => 'Total cache size (bytes)', > +'updxlrtr total data from cache' => 'Total data delivered from cache (bytes)', > +'updxlrtr total files' => 'Total files in cache', > +'updxlrtr unknown' => 'Unknown', > +'updxlrtr update accelerator' => 'Update Accelerator', > +'updxlrtr update information' => 'There is an updated version available for download. Visit <a href="http://update-accelerator.advproxy.net" target="_blank">http://update-accelerator.advproxy.net</a> for more information.', > +'updxlrtr update notification' => 'Update notification!', > +'updxlrtr used by' => 'Used by', > +'updxlrtr web proxy service required' => 'Web proxy service must be enabled to use Update Accelerator', > +'updxlrtr week' => 'one week', > +'updxlrtr weekly' => 'weekly', > +'updxlrtr year' => 'one year', > +'upgrade' => '升级', > +'uplink' => '上行', > +'uplink bit rate' => 'Uplink Bit Rate', > +'uplink speed' => '上行速度(kbit/秒)', > +'uplink std class' => 'uplink standard class', > +'upload' => 'Upload', > +'upload a certificate' => 'Upload a certificate:', > +'upload a certificate request' => 'Upload a certificate request:', > +'upload ca certificate' => 'Upload CA certificate', > +'upload dh key' => 'Upload Diffie-Hellman parameters', > +'upload fcdsl.o' => 'TO BE REMOVED', > +'upload file' => 'Upload file', > +'upload new ruleset' => 'Upload new ruleset', > +'upload p12 file' => 'Upload PKCS12 file', > +'upload static key' => 'Upload a static key', > +'upload successful' => 'Upload successful.', > +'upload synch.bin' => 'Upload synch.bin', > +'upload update file' => 'Upload update file:', > +'upstream password' => 'Upstream password:', > +'upstream proxy host:port' => 'Upstream proxy (host:port)', > +'upstream username' => 'Upstream username:', > +'uptime' => 'Uptime', > +'uptime and users' => 'Uptime and users:', > +'uptime load average' => 'Load average', > +'url filter' => 'URL过滤', > +'urlfilter access' => 'Access', > +'urlfilter activity detection' => 'Activity detection', > +'urlfilter add new time constraint rule' => 'Add new time constraint rule', > +'urlfilter add new user quota rule' => 'Add new user quota rule', > +'urlfilter add rule' => 'Add', > +'urlfilter advanced settings' => 'Advanced settings', > +'urlfilter allow' => 'Allow', > +'urlfilter allow access' => 'Allow access', > +'urlfilter allowed domains' => 'Allowed domains (one per line)', > +'urlfilter allowed urls' => 'Allowed URLs (one per line)', > +'urlfilter assigned quota users' => 'Assigned users (one per line)', > +'urlfilter assigned users' => 'Assigned users', > +'urlfilter automatic blacklist update' => 'Automatic blacklist update', > +'urlfilter automatic update schedule' => 'Automatic update schedule', > +'urlfilter back to main page' => 'Back to main page', > +'urlfilter background image' => 'urlfilter background image', > +'urlfilter background text' => 'To use a custom background image for the block page upload the .jpg file below', > +'urlfilter backup' => 'Create backup file', > +'urlfilter backup error' => 'Unable to create backup file', > +'urlfilter backup settings' => 'Backup URL filter settings', > +'urlfilter banned clients' => 'Banned IP addresses', > +'urlfilter blacklist age 1' => 'Last successful blacklist update was', > +'urlfilter blacklist age 2' => 'days ago', > +'urlfilter blacklist category name' => 'Blacklist category name', > +'urlfilter blacklist editor' => 'Blacklist editor', > +'urlfilter blacklist editor info' => 'Create and edit your own blacklist files', > +'urlfilter blacklist name' => 'Blacklist name', > +'urlfilter blacklist update' => 'Blacklist update', > +'urlfilter block' => 'Block', > +'urlfilter block access' => 'Block access', > +'urlfilter block all' => 'Block all URLs not explicitly allowed', > +'urlfilter block archives' => 'Block compressed archive files', > +'urlfilter block audio-video' => 'Block audio/video files', > +'urlfilter block categories' => 'Block categories', > +'urlfilter block executables' => 'Block executable files', > +'urlfilter block ip' => 'Block sites accessed by it\'s IP address', > +'urlfilter block settings' => 'Block page settings', > +'urlfilter blocked domains' => 'Blocked domains (one per line)', > +'urlfilter blocked expressions' => 'Blocked expressions (as regular expressions)', > +'urlfilter blocked urls' => 'Blocked URLs (one per line)', > +'urlfilter category' => 'Category', > +'urlfilter category all' => 'any', > +'urlfilter category data error' => 'Blacklist is empty', > +'urlfilter category log' => 'Split log by categories', > +'urlfilter category name error' => 'Blacklist category name required', > +'urlfilter client' => 'Client', > +'urlfilter configuration' => 'URL filter configuration', > +'urlfilter constraint definition' => 'Definition', > +'urlfilter constraint outside' => 'outside', > +'urlfilter constraint within' => 'within', > +'urlfilter copy rule' => 'Copy', > +'urlfilter current files' => 'Current files in local repository', > +'urlfilter custom blacklist' => 'Custom blacklist', > +'urlfilter custom expression list' => 'Custom expression list', > +'urlfilter custom url' => 'Custom source URL', > +'urlfilter custom url required' => 'Custom source URL required', > +'urlfilter custom whitelist' => 'Custom whitelist', > +'urlfilter daily' => 'daily', > +'urlfilter disabled' => 'disabled', > +'urlfilter domains' => 'Domains (one per line)', > +'urlfilter dont restart urlfilter' => 'Do not restart URL filter', > +'urlfilter dst' => 'Destination', > +'urlfilter dst error' => 'There must be at least one category selected', > +'urlfilter edit domains urls expressions' => 'Edit domains, URLs and expressions', > +'urlfilter edit time constraint rule' => 'Edit an existing time constraint rule', > +'urlfilter edit user quota rule' => 'Edit an existing user quota rule', > +'urlfilter empty ads' => 'Block "ads" with empty window', > +'urlfilter empty repository' => 'Local file repository is empty', > +'urlfilter enable automatic blacklist update' => 'Enable automatic update', > +'urlfilter enable custom blacklist' => 'Enable custom blacklist', > +'urlfilter enable custom expression list' => 'Enable custom expression list', > +'urlfilter enable custom whitelist' => 'Enable custom whitelist', > +'urlfilter enable expression lists' => 'Enable expression lists', > +'urlfilter enable full backup' => 'Include complete blacklist', > +'urlfilter enable jpeg' => 'Enable background image', > +'urlfilter enable log' => 'Enable log', > +'urlfilter enable rewrite rules' => 'Enable local file redirection', > +'urlfilter enabled' => 'Enabled:', > +'urlfilter example' => 'Example: www.domain.com', > +'urlfilter example ads' => 'Example: www.domain.com/ads/', > +'urlfilter export blacklist' => 'Export blacklist', > +'urlfilter export error' => 'Unable to create export file', > +'urlfilter expressions' => 'Expressions (one per line)', > +'urlfilter file ext block' => 'File extension blocking', > +'urlfilter filename' => 'Name', > +'urlfilter filesize' => 'Size', > +'urlfilter filter settings' => 'URL filter settings', > +'urlfilter fri' => 'F', > +'urlfilter friday' => 'Fri', > +'urlfilter from' => 'From', > +'urlfilter hourly' => 'hourly', > +'urlfilter import blacklist' => 'Import blacklist', > +'urlfilter import text' => 'To import a previously saved blacklist editor file upload the .tar.gz file below', > +'urlfilter install blacklist' => 'Install blacklist', > +'urlfilter install information' => 'The new blacklist will be automatically compiled to prebuilt databases. Depending on the size of the blacklist, this may take several minutes.', > +'urlfilter invalid content' => 'File is not a squidGuard compatible blacklist', > +'urlfilter invalid import file' => 'File is not a valid URL filter blacklist editor file', > +'urlfilter invalid ip or mask error' => 'Invalid IP address or network mask', > +'urlfilter invalid restore file' => 'File is not a valid URL filter backup file', > +'urlfilter invalid user error' => 'Invalid username', > +'urlfilter load blacklist' => 'Load blacklist', > +'urlfilter local file redirection' => 'Local file redirection', > +'urlfilter log' => 'urlfilter log', > +'urlfilter log summary' => 'Total number of URL filter hits for', > +'urlfilter log viewer' => 'URL过滤日志查看', > +'urlfilter logs' => 'URL过滤日志', > +'urlfilter maintenance' => 'URL filter maintenance', > +'urlfilter manage local file repository' => 'Manage local file repository', > +'urlfilter manage repository' => 'Manage repository', > +'urlfilter minutes' => 'minutes', > +'urlfilter mode allow' => 'allow', > +'urlfilter mode block' => 'block', > +'urlfilter mon' => 'M', > +'urlfilter monday' => 'Mon', > +'urlfilter monthly' => 'monthly', > +'urlfilter msg text 1' => 'Message line 1', > +'urlfilter msg text 2' => 'Message line 2', > +'urlfilter msg text 3' => 'Message line 3', > +'urlfilter network access control' => 'Network based access control', > +'urlfilter no categories' => 'No categories available', > +'urlfilter not enabled' => 'URL filter is not enabled on the Web proxy page', > +'urlfilter quota restart message' => 'Note: The counters will be reset for all users when restarting the URL filter', > +'urlfilter quota time error' => 'Invalid value for time quota', > +'urlfilter quota user error' => 'At least one username is required', > +'urlfilter redirect template' => 'Redirect page template', > +'urlfilter redirectpage' => 'Redirect to this URL', > +'urlfilter remove file' => 'Remove file from repository', > +'urlfilter renewal' => 'Renewal', > +'urlfilter renewal period' => 'Renewal period', > +'urlfilter repository information' => 'Download requests for these files will be redirected from the original source to the local file repository.', > +'urlfilter reset' => '重设', > +'urlfilter restart' => 'Restart URL filter', > +'urlfilter restart message' => 'The URL filter must be restarted to activate the changed rules', > +'urlfilter restart notification' => 'Activate changed rules', > +'urlfilter restore' => 'Import backup file', > +'urlfilter restore results' => '还原默认值', > +'urlfilter restore settings' => 'Restore URL filter settings', > +'urlfilter restore success' => 'URL filter configuration has been restored. The URL filter must be restarted to activate the new settings.', > +'urlfilter restore text' => 'To restore a previously saved configuration upload the .tar.gz backup file below', > +'urlfilter safesearch' => 'Enable SafeSearch', > +'urlfilter sat' => 'S', > +'urlfilter saturday' => 'Sat', > +'urlfilter save and restart' => 'Save and Restart', > +'urlfilter save schedule' => 'Save update settings', > +'urlfilter select blacklist' => 'Select existing blacklist', > +'urlfilter select multi' => 'Press ctrl key to select multiple categories', > +'urlfilter select source' => 'Select download source', > +'urlfilter set time constraints' => 'Set time constraints', > +'urlfilter set user quota' => 'Set user quota', > +'urlfilter show category' => 'Show category on block page', > +'urlfilter show dnserror' => 'Use "DNS error" to block URLs', > +'urlfilter show ip' => 'Show IP on block page', > +'urlfilter show url' => 'Show URL on block page', > +'urlfilter source' => 'Source host(s) or network(s)', > +'urlfilter src' => 'Source', > +'urlfilter src error' => 'Source cannot be empty', > +'urlfilter sun' => 'S', > +'urlfilter sunday' => 'Sun', > +'urlfilter tar error' => 'Could not extract files from tar archive', > +'urlfilter thu' => 'T', > +'urlfilter thursday' => 'Thu', > +'urlfilter time' => 'Time', > +'urlfilter time quota' => 'Time quota', > +'urlfilter time space' => 'Time space', > +'urlfilter timebased access control' => 'Time based access control', > +'urlfilter timespace error' => 'Error in time space declaration', > +'urlfilter to' => 'To', > +'urlfilter tue' => 'T', > +'urlfilter tuesday' => 'Tue', > +'urlfilter unfiltered clients' => 'Unfiltered IP addresses', > +'urlfilter update information' => 'There is an updated version available for download. Visit <a href="http://www.urlfilter.net" target="_blank">http://www.urlfilter.net</a> for more information.', > +'urlfilter update notification' => 'Update notification!', > +'urlfilter update now' => 'Update now', > +'urlfilter update results' => 'Blacklist update results', > +'urlfilter update rule' => 'Update', > +'urlfilter upload background' => 'Upload image', > +'urlfilter upload blacklist' => 'Upload blacklist', > +'urlfilter upload file' => 'Upload file', > +'urlfilter upload file information 1' => 'Note', > +'urlfilter upload file information 2' => 'The URL filter needs to be restarted to activate changes to the repository.', > +'urlfilter upload file text' => 'To add a file to the local repository upload the file below', > +'urlfilter upload information' => 'The new blacklist will be automatically compiled to prebuilt databases. Depending on the size of the blacklist, this may take several minutes. Please wait for this task to be finished before restarting the URL filter.', > +'urlfilter upload success' => 'Blacklist upload successfully completed.', > +'urlfilter upload text' => 'To install an updated blacklist upload the .tar.gz file below', > +'urlfilter url filter' => 'URL过滤', > +'urlfilter urlfilter blacklist editor' => 'URL filter blacklist editor', > +'urlfilter urls' => 'URLs (one per line)', > +'urlfilter user time quota' => 'Time quota (in minutes)', > +'urlfilter username' => 'Username', > +'urlfilter username log' => 'Log username', > +'urlfilter web proxy service required' => 'Web proxy service must be enabled to use URL filter', > +'urlfilter wed' => 'W', > +'urlfilter wednesday' => 'Wed', > +'urlfilter weekday error' => 'There must be at least one day selected', > +'urlfilter weekly' => 'weekly', > +'urlfilter whitelist always allowed' => 'Allow custom whitelist for banned clients', > +'urlfilter wrong filetype' => 'File has not the extension .tar.gz', > +'use' => 'Use', > +'use a pre-shared key' => 'Use a pre-shared key:', > +'use dov' => 'Use data over voice (DOV):', > +'use ibod' => 'Use Bandwidth on Demand (iBOD):', > +'use ipfire red ip' => 'The classical RED IP used by IPFire during connection', > +'use only proposed settings' => 'Use only proposed settings.', > +'used' => '已经使用', > +'used memory' => 'Used Memory ', > +'used swap' => 'Used Swap', > +'user' => 'User', > +'user log' => 'user log', > +'user proxy logs' => 'user proxy log', > +'username' => 'Username:', > +'username not set' => 'Username not set.', > +'users department' => 'User\'s department', > +'users email' => 'User\'s E-mail address', > +'users fullname or system hostname' => 'User\'s full name or system hostname', > +'valid root certificate already exists' => 'A valid root certificate already exists.', > +'valid till' => 'Valid till', > +'vci number' => 'VCI number:', > +'vendor' => 'Vendor', > +'view log' => 'view log', > +'virtual address' => 'Virtual Address', > +'virtual private networking' => 'Virtual Private Networking', > +'visible in browselist' => 'visible in browselist', > +'visit us at' => '请在如下地址访问我们', > +'voldown10' => 'Decrease volume by 10', > +'voldown5' => 'Decrease volume by 5', > +'volup10' => 'Increase volume by 10', > +'volup5' => 'Increase volume by 5', > +'vpi number' => 'VPI number:', > +'vpn' => 'VPN', > +'vpn aggrmode' => 'IKE aggressive mode allowed. Avoid if possible (preshared key is transmitted in clear text)!', > +'vpn altname syntax' => 'SubjectAltName is a comma separated list of e-mail, dns, uri, rid and ip objects. email:an email address. Syntax email:copy takes the email field from the cert to be used. DNS:a valid domain name. URI:any valid uri. RID:registered object identifier. IP:an IP address. Note:charset is limited and case is significant. Example: e-mail:ipfire(a)foo.org,email:copy,DNS:www.ipfire.org,IP:127.0.0.1,URI:http://url/to/something', > +'vpn auth-dn' => 'Peer is identified by either IPV4_ADDR, FQDN, USER_FQDN or DER_ASN1_DN string in remote ID field', > +'vpn broken' => 'Broken', > +'vpn configuration main' => 'VPN Configuration', > +'vpn connecting' => 'CONNECTING', > +'vpn delayed start' => 'Delay before launching VPN (seconds)', > +'vpn delayed start help' => 'If required, this delay can be used to allow dynamic DNS updates to propagate properly. 60 is a common value when RED is a dynamic IP.', > +'vpn force mobike' => 'Force using MOBIKE (only IKEv2)', > +'vpn inactivity timeout' => 'Inactivity Timeout', > +'vpn incompatible use of defaultroute' => 'hostname=%defaultroute not allowed', > +'vpn keyexchange' => 'Keyexchange', > +'vpn local id' => 'Local ID', > +'vpn missing remote id' => 'You must specify a correct Distinguished Name (DN) for this authentication.', > +'vpn mtu invalid' => 'MTU must be a numeric value!', > +'vpn no full pki' => 'missing private key to generate cert', > +'vpn on blue' => 'VPN on BLUE', > +'vpn on green' => 'VPN on GREEN', > +'vpn on orange' => 'VPN on ORANGE', > +'vpn on-demand' => 'ON-DEMAND', > +'vpn payload compression' => 'Negotiate payload compression', > +'vpn red name' => 'Public IP or FQDN for RED interface or <%defaultroute>', > +'vpn remote id' => 'Remote ID', > +'vpn start action' => 'Start Action', > +'vpn start action add' => 'Wait for connection initiation', > +'vpn start action route' => 'On Demand', > +'vpn start action start' => 'Always On', > +'vpn statistic n2n' => 'VPN: Net-to-Net Statistics', > +'vpn statistic rw' => 'VPN: Roadwarrior Statistics', > +'vpn subjectaltname' => 'Subject Alt Name', > +'vpn wait' => 'WAITING', > +'vpn watch' => 'Restart net-to-net vpn when remote peer IP changes (dyndns).', > +'vpn weak' => 'Weak', > +'waiting to synchronize clock' => 'Waiting to synchronize clock', > +'warn when traffic reaches' => 'Warn when traffic reaches x %', > +'warning messages' => 'Warning messages', > +'was deleted' => 'was deleted', > +'web hits' => 'Total number of websites matching selected criteria for', > +'web proxy' => 'Web Proxy', > +'web proxy configuration' => 'Web proxy configuration', > +'web server' => 'Web Server', > +'webradio playlist' => 'Webradio Playlist', > +'website' => 'Website', > +'wednesday' => 'Wednesday', > +'week' => '周', > +'week-graph' => '周', > +'weekly firewallhits' => 'weekly firewallhits', > +'weeks' => 'Weeks', > +'wildcards' => 'Wildcards', > +'wins server' => 'Wins Server', > +'wins support' => 'Wins Support', > +'wireless' => '无线', > +'wireless config added' => 'Wireless config added', > +'wireless config changed' => 'Wireless config changed', > +'wireless configuration' => 'Wireless Configuration', > +'wireless network' => 'WiFi Network', > +'wlan client' => 'Wireless client', > +'wlan client advanced settings' => 'Advanced settings', > +'wlan client and' => 'and', > +'wlan client anonymous identity' => 'Anonymous Identity', > +'wlan client auth auto' => 'Auto', > +'wlan client auth peap' => 'PEAP', > +'wlan client auth ttls' => 'TTLS', > +'wlan client authentication settings' => 'Authentication Settings', > +'wlan client bssid' => 'BSSID', > +'wlan client ccmp' => 'CCMP', > +'wlan client configuration' => 'Wireless Client Configuration', > +'wlan client disconnected' => 'Disconnected', > +'wlan client duplicate ssid' => 'Duplicate SSID', > +'wlan client eap authentication method' => 'EAP Authentication Method', > +'wlan client eap phase2 method' => 'EAP Phase 2 Method', > +'wlan client eap state' => 'EAP Status', > +'wlan client edit entry' => 'Edit wireless client configuration', > +'wlan client encryption' => 'Encryption', > +'wlan client encryption eap' => 'EAP', > +'wlan client encryption none' => 'None', > +'wlan client encryption wep' => 'WEP', > +'wlan client encryption wpa' => 'WPA', > +'wlan client encryption wpa2' => 'WPA2', > +'wlan client group cipher' => 'Group cipher', > +'wlan client group key algorithm' => 'GKA', > +'wlan client identity' => 'Identity', > +'wlan client invalid key length' => 'Invalid key length.', > +'wlan client method' => 'Method', > +'wlan client new entry' => 'Create new wireless client configuration', > +'wlan client new network' => 'New network', > +'wlan client pairwise cipher' => 'Pairwise cipher', > +'wlan client pairwise key algorithm' => 'PKA', > +'wlan client pairwise key group key' => 'Pairwise key/group key', > +'wlan client password' => 'Password', > +'wlan client psk' => 'Pre-shared key', > +'wlan client ssid' => 'SSID', > +'wlan client tkip' => 'TKIP', > +'wlan client tls cipher' => 'TLS Cipher', > +'wlan client tls version' => 'TLS Version', > +'wlan client wpa mode' => 'WPA mode', > +'wlan client wpa mode all' => 'Auto', > +'wlan client wpa mode ccmp ccmp' => 'CCMP-CCMP', > +'wlan client wpa mode ccmp tkip' => 'CCMP-TKIP', > +'wlan client wpa mode tkip tkip' => 'TKIP-TKIP', > +'wlan clients' => 'Wireless clients', > +'wlanap' => 'Access Point', > +'wlanap channel' => 'Channel', > +'wlanap configuration' => 'Access Point Configuration', > +'wlanap country' => 'Country Code', > +'wlanap debugging' => 'Debugging', > +'wlanap del interface' => 'Remove selected interface?', > +'wlanap encryption' => 'Encryption', > +'wlanap informations' => 'Informations', > +'wlanap interface' => 'Select interface', > +'wlanap invalid wpa' => 'Invalid length in WPA Passphrase. Must be between 8 and 63 characters.', > +'wlanap link dhcp' => 'Wireless lan DHCP configuration', > +'wlanap link wireless' => 'Activate wireless lan clients', > +'wlanap neighbor scan' => 'Neighborhood scan', > +'wlanap neighbor scan warning' => 'Warning! Disabling may violate regulatory rules!', > +'wlanap no interface' => 'Selected interface is not a wirless lan card!', > +'wlanap none' => 'none', > +'wlanap notifications' => 'Notifications', > +'wlanap select interface' => 'Please select the wireless lan interface.', > +'wlanap verbose' => 'Verbose', > +'wlanap warnings' => 'Warnings', > +'wlanap wlan card' => 'WLan Card', > +'wlanap wlan services' => 'WLan Services', > +'wlanap wlan settings' => 'WLan Settings', > +'wlanap wlan status' => 'WLan Status', > +'wol wakeup' => '唤醒', > +'workgroup' => 'Workgroup', > +'written bytes' => 'Writen Bytes', > +'xtaccess all error' => 'You cannot set an external access to ALL, that is done in the port forwarding record.', > +'xtaccess bad transfert' => 'If you specify a port destination range, the source range must be identical !', > +'year' => '年', > +'year-graph' => '年', > +'yearly firewallhits' => 'yearly firewallhits', > +'yes' => 'Yes', > +'you can only define one roadwarrior connection when using pre-shared key authentication' => 'You can only define one Roadwarrior connection when using pre-shared key authentication. Either you already have a Roadwarrior connection with pre-shared key authentication, or you\'re trying to add one now.', > +'your department' => 'Your department', > +'your e-mail' => 'Your e-mail address', > +); > + > +#EOF > -- > 2.23.0 > >

2 1

[PATCH 0/5] ipblacklist: IP Address Blacklists
by Tim FitzGeorge 16 Dec '19

16 Dec '19

Implements downloading of IP address blacklists and implementing them as IPSets. A separate IPSet is used for each blacklist; this simplifies handling of overlaps between different lists. Traffic to or from the red0/ppp0 interface is checked against the IPSets. The check is placed before the IPS check as the IPSet check is much lighter on CPU use which means that overall CPU use is reduced. The available lists are defined in a separate file. A WUI page allows the desired lists to be enabled and the interval between checks for updates to be defined. A minimum update check interval is defined for each blacklist in the definition file. Optionally, an automatically updating blacklist can be enabled. This adds addresses to an IPSet if the rate of packets dropped by the default red0/ppp0 input policy exceeds a user defined threshold. The addresses are kept in the IPSet until a user defined period without packets from the blocked address has passed. Tim FitzGeorge (5): ipblacklist: Main script ipblacklist: WUI and language file ipblacklist: Ancillary files ipblacklist: Modifications to system ipblacklist: Build infrastructure config/backup/backup.pl | 1 + config/backup/include | 2 + config/firewall/firewall-policy | 5 + config/ipblacklist/sources | 151 +++ config/logwatch/ipblacklist | 103 ++ config/logwatch/ipblacklist.conf | 34 + config/menu/50-firewall.menu | 5 + config/rootfiles/common/aarch64/stage2 | 1 + config/rootfiles/common/configroot | 2 + config/rootfiles/common/ipblacklist-sources | 1 + config/rootfiles/common/logwatch | 2 + config/rootfiles/common/misc-progs | 2 + config/rootfiles/common/stage2 | 1 + config/rootfiles/common/web-user-interface | 1 + config/rootfiles/common/x86_64/stage2 | 1 + html/cgi-bin/ipblacklist.cgi | 725 +++++++++++++ html/cgi-bin/logs.cgi/log.dat | 2 + langs/en/cgi-bin/en.pl | 31 + lfs/configroot | 4 +- lfs/ipblacklist-sources | 53 + lfs/logwatch | 2 + make.sh | 11 +- src/initscripts/system/firewall | 20 + src/misc-progs/Makefile | 2 +- src/misc-progs/getipsetstat.c | 28 + src/misc-progs/ipblacklistctrl.c | 52 + src/scripts/ipblacklist | 1558 +++++++++++++++++++++++++++ 27 files changed, 2792 insertions(+), 8 deletions(-) create mode 100644 config/ipblacklist/sources create mode 100644 config/logwatch/ipblacklist create mode 100644 config/logwatch/ipblacklist.conf create mode 100644 config/rootfiles/common/ipblacklist-sources create mode 100644 html/cgi-bin/ipblacklist.cgi create mode 100644 lfs/ipblacklist-sources create mode 100644 src/misc-progs/getipsetstat.c create mode 100644 src/misc-progs/ipblacklistctrl.c create mode 100755 src/scripts/ipblacklist -- 2.16.4

3 17

[PATCH] spectre-meltdown-checker: update to 0.42
by Peter Müller 02 Dec '19

02 Dec '19

See https://github.com/speed47/spectre-meltdown-checker/releases/tag/v0.42 for release announcements. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- lfs/spectre-meltdown-checker | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/lfs/spectre-meltdown-checker b/lfs/spectre-meltdown-checker index 4f8d9a1cc..6c540dfa5 100644 --- a/lfs/spectre-meltdown-checker +++ b/lfs/spectre-meltdown-checker @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2018 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2019 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 0.41 +VER = 0.42 THISAPP = spectre-meltdown-checker-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = spectre-meltdown-checker -PAK_VER = 2 +PAK_VER = 3 DEPS = "" @@ -44,7 +44,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = d3adcb3ac32e226dc18ab7f6ef6f7617 +$(DL_FILE)_MD5 = c8aca684284d604adb67cb6d9d07ce70 install : $(TARGET) -- 2.16.4

2 1

[PATCH] nano: Update to 4.6
by Matthias Fischer 01 Dec '19

01 Dec '19

For details see: https://www.nano-editor.org/news.php ... and a long list of other changes in https://www.nano-editor.org/dist/latest/ChangeLog ... Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- lfs/nano | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/nano b/lfs/nano index 3a68bf9cb..198aeb5d0 100644 --- a/lfs/nano +++ b/lfs/nano @@ -24,7 +24,7 @@ include Config -VER = 4.5 +VER = 4.6 THISAPP = nano-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = nano -PAK_VER = 26 +PAK_VER = 27 DEPS = "" @@ -44,7 +44,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 686a169b6e5e1f76fe79570f07934001 +$(DL_FILE)_MD5 = 9e87ae93cc7a5c7f5e64f97db089ae1b install : $(TARGET) -- 2.18.0

2 1

[PATCH] cpio: Update to 2.13
by Matthias Fischer 01 Dec '19

01 Dec '19

For details see: https://www.gnu.org/software/cpio/ Fix CVE-2015-1197 Fix CVE-2016-2037 Fix CVE-2019-14866 Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- config/rootfiles/common/cpio | 1 + lfs/cpio | 6 +++--- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/config/rootfiles/common/cpio b/config/rootfiles/common/cpio index 26ca6f376..45bf9f79c 100644 --- a/config/rootfiles/common/cpio +++ b/config/rootfiles/common/cpio @@ -15,6 +15,7 @@ bin/cpio #usr/share/locale/ko/LC_MESSAGES/cpio.mo #usr/share/locale/nl/LC_MESSAGES/cpio.mo #usr/share/locale/pl/LC_MESSAGES/cpio.mo +#usr/share/locale/pt/LC_MESSAGES/cpio.mo #usr/share/locale/pt_BR/LC_MESSAGES/cpio.mo #usr/share/locale/ro/LC_MESSAGES/cpio.mo #usr/share/locale/ru/LC_MESSAGES/cpio.mo diff --git a/lfs/cpio b/lfs/cpio index f2e12952d..02d72d038 100644 --- a/lfs/cpio +++ b/lfs/cpio @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2018 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2019 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 2.12 +VER = 2.13 THISAPP = cpio-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = fc207561a86b63862eea4b8300313e86 +$(DL_FILE)_MD5 = 389c5452d667c23b5eceb206f5000810 install : $(TARGET) -- 2.18.0

2 1

[PATCH] Postfix: update to 3.4.8
by Peter Müller 29 Nov '19

29 Nov '19

See http://www.postfix.org/announcements/postfix-3.4.8.html for release announcements. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- lfs/postfix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/postfix b/lfs/postfix index 275784c10..887051470 100644 --- a/lfs/postfix +++ b/lfs/postfix @@ -24,7 +24,7 @@ include Config -VER = 3.4.6 +VER = 3.4.8 THISAPP = postfix-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = postfix -PAK_VER = 21 +PAK_VER = 22 DEPS = "" @@ -66,7 +66,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 5aa930a8ce3cc6f82247dbd9f536380c +$(DL_FILE)_MD5 = 6944b946887077a28e3dcb375ff53701 install : $(TARGET) -- 2.16.4

2 1

[PATCH] tzdata: update to 2019c
by Peter Müller 28 Nov '19

28 Nov '19

Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- tzdata/tzdata.nm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/tzdata/tzdata.nm b/tzdata/tzdata.nm index ece9f66ef..8f871624d 100644 --- a/tzdata/tzdata.nm +++ b/tzdata/tzdata.nm @@ -3,8 +3,8 @@ # Copyright (C) - IPFire Development Team <info(a)ipfire.org> # ############################################################################### -tzdata_version = 2019b -tzcode_version = 2019b +tzdata_version = 2019c +tzcode_version = 2019c name = tzdata version = %{tzdata_version} -- 2.16.4

1 0

[PATCH] update ca-certificates CA bundle
by Peter Müller 28 Nov '19

28 Nov '19

Update the CA certificates list to what Mozilla NSS ships currently. The original file can be retrieved from: https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/b… Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- ca-certificates/ca-certificates.nm | 2 +- ca-certificates/certdata.txt | 1309 ++++++++++++++---------------------- 2 files changed, 514 insertions(+), 797 deletions(-) diff --git a/ca-certificates/ca-certificates.nm b/ca-certificates/ca-certificates.nm index 2a44912ae..d46284db6 100644 --- a/ca-certificates/ca-certificates.nm +++ b/ca-certificates/ca-certificates.nm @@ -4,7 +4,7 @@ ############################################################################### name = ca-certificates -version = 2019.05 +version = 2019.11 release = 1 arch = noarch diff --git a/ca-certificates/certdata.txt b/ca-certificates/certdata.txt index 61ce1dee6..5b9d679d1 100644 --- a/ca-certificates/certdata.txt +++ b/ca-certificates/certdata.txt @@ -13,19 +13,21 @@ # # Certificates # -# -- Attribute -- -- type -- -- value -- -# CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE -# CKA_TOKEN CK_BBOOL CK_TRUE -# CKA_PRIVATE CK_BBOOL CK_FALSE -# CKA_MODIFIABLE CK_BBOOL CK_FALSE -# CKA_LABEL UTF8 (varies) -# CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 -# CKA_SUBJECT DER+base64 (varies) -# CKA_ID byte array (varies) -# CKA_ISSUER DER+base64 (varies) -# CKA_SERIAL_NUMBER DER+base64 (varies) -# CKA_VALUE DER+base64 (varies) -# CKA_NSS_EMAIL ASCII7 (unused here) +# -- Attribute -- -- type -- -- value -- +# CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE +# CKA_TOKEN CK_BBOOL CK_TRUE +# CKA_PRIVATE CK_BBOOL CK_FALSE +# CKA_MODIFIABLE CK_BBOOL CK_FALSE +# CKA_LABEL UTF8 (varies) +# CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 +# CKA_SUBJECT DER+base64 (varies) +# CKA_ID byte array (varies) +# CKA_ISSUER DER+base64 (varies) +# CKA_SERIAL_NUMBER DER+base64 (varies) +# CKA_VALUE DER+base64 (varies) +# CKA_NSS_EMAIL ASCII7 (unused here) +# CKA_NSS_SERVER_DISTRUST_AFTER DER+base64 (varies) +# CKA_NSS_EMAIL_DISTRUST_AFTER DER+base64 (varies) # # Trust # @@ -164,6 +166,8 @@ CKA_VALUE MULTILINE_OCTAL \125\342\374\110\311\051\046\151\340 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "GlobalSign Root CA" # Issuer: CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE @@ -298,6 +302,8 @@ CKA_VALUE MULTILINE_OCTAL \152\374\176\102\070\100\144\022\367\236\201\341\223\056 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "GlobalSign Root CA - R2" # Issuer: CN=GlobalSign,O=GlobalSign,OU=GlobalSign Root CA - R2 @@ -454,6 +460,8 @@ CKA_VALUE MULTILINE_OCTAL \113\336\006\226\161\054\362\333\266\037\244\357\077\356 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Verisign Class 1 Public Primary Certification Authority - G3" # Issuer: CN=VeriSign Class 1 Public Primary Certification Authority - G3,OU="(c) 1999 VeriSign, Inc. - For authorized use only",OU=VeriSign Trust Network,O="VeriSign, Inc.",C=US @@ -619,6 +627,8 @@ CKA_VALUE MULTILINE_OCTAL \311\130\020\371\252\357\132\266\317\113\113\337\052 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Verisign Class 2 Public Primary Certification Authority - G3" # Issuer: CN=VeriSign Class 2 Public Primary Certification Authority - G3,OU="(c) 1999 VeriSign, Inc. - For authorized use only",OU=VeriSign Trust Network,O="VeriSign, Inc.",C=US @@ -784,6 +794,8 @@ CKA_VALUE MULTILINE_OCTAL \153\271\012\172\116\117\113\204\356\113\361\175\335\021 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Verisign Class 3 Public Primary Certification Authority - G3" # Issuer: CN=VeriSign Class 3 Public Primary Certification Authority - G3,OU="(c) 1999 VeriSign, Inc. - For authorized use only",OU=VeriSign Trust Network,O="VeriSign, Inc.",C=US @@ -1059,6 +1071,8 @@ CKA_VALUE MULTILINE_OCTAL \174\136\232\166\351\131\220\305\174\203\065\021\145\121 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "Entrust.net Premium 2048 Secure Server CA" # Issuer: CN=Entrust.net Certification Authority (2048),OU=(c) 1999 Entrust.net Limited,OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.),O=Entrust.net @@ -1197,6 +1211,8 @@ CKA_VALUE MULTILINE_OCTAL \347\201\035\031\303\044\102\352\143\071\251 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Baltimore CyberTrust Root" # Issuer: CN=Baltimore CyberTrust Root,OU=CyberTrust,O=Baltimore,C=IE @@ -1341,6 +1357,8 @@ CKA_VALUE MULTILINE_OCTAL \065\341\035\026\034\320\274\053\216\326\161\331 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "AddTrust Low-Value Services Root" # Issuer: CN=AddTrust Class 1 CA Root,OU=AddTrust TTP Network,O=AddTrust AB,C=SE @@ -1490,6 +1508,8 @@ CKA_VALUE MULTILINE_OCTAL \027\132\173\320\274\307\217\116\206\004 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "AddTrust External Root" # Issuer: CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE @@ -1654,6 +1674,8 @@ CKA_VALUE MULTILINE_OCTAL \036\177\132\264\074 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Entrust Root Certification Authority" # Issuer: CN=Entrust Root Certification Authority,OU="(c) 2006 Entrust, Inc.",OU=www.entrust.net/CPS is incorporated by reference,O="Entrust, Inc.",C=US @@ -1788,6 +1810,8 @@ CKA_VALUE MULTILINE_OCTAL \302\005\146\200\241\313\346\063 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "GeoTrust Global CA" # Issuer: CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US @@ -1948,6 +1972,8 @@ CKA_VALUE MULTILINE_OCTAL \244\346\216\330\371\051\110\212\316\163\376\054 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "GeoTrust Universal CA" # Issuer: CN=GeoTrust Universal CA,O=GeoTrust Inc.,C=US @@ -2108,6 +2134,8 @@ CKA_VALUE MULTILINE_OCTAL \362\034\054\176\256\002\026\322\126\320\057\127\123\107\350\222 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "GeoTrust Universal CA 2" # Issuer: CN=GeoTrust Universal CA 2,O=GeoTrust Inc.,C=US @@ -2228,6 +2256,8 @@ CKA_VALUE MULTILINE_OCTAL \350\140\052\233\205\112\100\363\153\212\044\354\006\026\054\163 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Certum Root CA" # Issuer: CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL @@ -2374,6 +2404,8 @@ CKA_VALUE MULTILINE_OCTAL \225\351\066\226\230\156 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Comodo AAA Services root" # Issuer: CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB @@ -2552,6 +2584,8 @@ CKA_VALUE MULTILINE_OCTAL \112\164\066\371 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "QuoVadis Root CA" # Issuer: CN=QuoVadis Root Certification Authority,OU=Root Certification Authority,O=QuoVadis Limited,C=BM @@ -2721,6 +2755,8 @@ CKA_VALUE MULTILINE_OCTAL \020\005\145\325\202\020\352\302\061\315\056 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "QuoVadis Root CA 2" # Issuer: CN=QuoVadis Root CA 2,O=QuoVadis Limited,C=BM @@ -2901,6 +2937,8 @@ CKA_VALUE MULTILINE_OCTAL \332 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "QuoVadis Root CA 3" # Issuer: CN=QuoVadis Root CA 3,O=QuoVadis Limited,C=BM @@ -3030,6 +3068,8 @@ CKA_VALUE MULTILINE_OCTAL \057\317\246\356\311\160\042\024\275\375\276\154\013\003 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Security Communication Root CA" # Issuer: OU=Security Communication RootCA1,O=SECOM Trust.net,C=JP @@ -3153,6 +3193,8 @@ CKA_VALUE MULTILINE_OCTAL \160\254\337\114 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Sonera Class 2 Root CA" # Issuer: CN=Sonera Class2 CA,O=Sonera,C=FI @@ -3188,177 +3230,6 @@ CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE -# -# Certificate "UTN USERFirst Email Root CA" -# -# Issuer: CN=UTN-USERFirst-Client Authentication and Email,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US -# Serial Number:44:be:0c:8b:50:00:24:b4:11:d3:36:25:25:67:c9:89 -# Subject: CN=UTN-USERFirst-Client Authentication and Email,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US -# Not Valid Before: Fri Jul 09 17:28:50 1999 -# Not Valid After : Tue Jul 09 17:36:58 2019 -# Fingerprint (MD5): D7:34:3D:EF:1D:27:09:28:E1:31:02:5B:13:2B:DD:F7 -# Fingerprint (SHA1): B1:72:B1:A5:6D:95:F9:1F:E5:02:87:E1:4D:37:EA:6A:44:63:76:8A -CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "UTN USERFirst Email Root CA" -CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 -CKA_SUBJECT MULTILINE_OCTAL -\060\201\256\061\013\060\011\006\003\125\004\006\023\002\125\123 -\061\013\060\011\006\003\125\004\010\023\002\125\124\061\027\060 -\025\006\003\125\004\007\023\016\123\141\154\164\040\114\141\153 -\145\040\103\151\164\171\061\036\060\034\006\003\125\004\012\023 -\025\124\150\145\040\125\123\105\122\124\122\125\123\124\040\116 -\145\164\167\157\162\153\061\041\060\037\006\003\125\004\013\023 -\030\150\164\164\160\072\057\057\167\167\167\056\165\163\145\162 -\164\162\165\163\164\056\143\157\155\061\066\060\064\006\003\125 -\004\003\023\055\125\124\116\055\125\123\105\122\106\151\162\163 -\164\055\103\154\151\145\156\164\040\101\165\164\150\145\156\164 -\151\143\141\164\151\157\156\040\141\156\144\040\105\155\141\151 -\154 -END -CKA_ID UTF8 "0" -CKA_ISSUER MULTILINE_OCTAL -\060\201\256\061\013\060\011\006\003\125\004\006\023\002\125\123 -\061\013\060\011\006\003\125\004\010\023\002\125\124\061\027\060 -\025\006\003\125\004\007\023\016\123\141\154\164\040\114\141\153 -\145\040\103\151\164\171\061\036\060\034\006\003\125\004\012\023 -\025\124\150\145\040\125\123\105\122\124\122\125\123\124\040\116 -\145\164\167\157\162\153\061\041\060\037\006\003\125\004\013\023 -\030\150\164\164\160\072\057\057\167\167\167\056\165\163\145\162 -\164\162\165\163\164\056\143\157\155\061\066\060\064\006\003\125 -\004\003\023\055\125\124\116\055\125\123\105\122\106\151\162\163 -\164\055\103\154\151\145\156\164\040\101\165\164\150\145\156\164 -\151\143\141\164\151\157\156\040\141\156\144\040\105\155\141\151 -\154 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\020\104\276\014\213\120\000\044\264\021\323\066\045\045\147 -\311\211 -END -CKA_VALUE MULTILINE_OCTAL -\060\202\004\242\060\202\003\212\240\003\002\001\002\002\020\104 -\276\014\213\120\000\044\264\021\323\066\045\045\147\311\211\060 -\015\006\011\052\206\110\206\367\015\001\001\005\005\000\060\201 -\256\061\013\060\011\006\003\125\004\006\023\002\125\123\061\013 -\060\011\006\003\125\004\010\023\002\125\124\061\027\060\025\006 -\003\125\004\007\023\016\123\141\154\164\040\114\141\153\145\040 -\103\151\164\171\061\036\060\034\006\003\125\004\012\023\025\124 -\150\145\040\125\123\105\122\124\122\125\123\124\040\116\145\164 -\167\157\162\153\061\041\060\037\006\003\125\004\013\023\030\150 -\164\164\160\072\057\057\167\167\167\056\165\163\145\162\164\162 -\165\163\164\056\143\157\155\061\066\060\064\006\003\125\004\003 -\023\055\125\124\116\055\125\123\105\122\106\151\162\163\164\055 -\103\154\151\145\156\164\040\101\165\164\150\145\156\164\151\143 -\141\164\151\157\156\040\141\156\144\040\105\155\141\151\154\060 -\036\027\015\071\071\060\067\060\071\061\067\062\070\065\060\132 -\027\015\061\071\060\067\060\071\061\067\063\066\065\070\132\060 -\201\256\061\013\060\011\006\003\125\004\006\023\002\125\123\061 -\013\060\011\006\003\125\004\010\023\002\125\124\061\027\060\025 -\006\003\125\004\007\023\016\123\141\154\164\040\114\141\153\145 -\040\103\151\164\171\061\036\060\034\006\003\125\004\012\023\025 -\124\150\145\040\125\123\105\122\124\122\125\123\124\040\116\145 -\164\167\157\162\153\061\041\060\037\006\003\125\004\013\023\030 -\150\164\164\160\072\057\057\167\167\167\056\165\163\145\162\164 -\162\165\163\164\056\143\157\155\061\066\060\064\006\003\125\004 -\003\023\055\125\124\116\055\125\123\105\122\106\151\162\163\164 -\055\103\154\151\145\156\164\040\101\165\164\150\145\156\164\151 -\143\141\164\151\157\156\040\141\156\144\040\105\155\141\151\154 -\060\202\001\042\060\015\006\011\052\206\110\206\367\015\001\001 -\001\005\000\003\202\001\017\000\060\202\001\012\002\202\001\001 -\000\262\071\205\244\362\175\253\101\073\142\106\067\256\315\301 -\140\165\274\071\145\371\112\032\107\242\271\314\110\314\152\230 -\325\115\065\031\271\244\102\345\316\111\342\212\057\036\174\322 -\061\007\307\116\264\203\144\235\056\051\325\242\144\304\205\275 -\205\121\065\171\244\116\150\220\173\034\172\244\222\250\027\362 -\230\025\362\223\314\311\244\062\225\273\014\117\060\275\230\240 -\013\213\345\156\033\242\106\372\170\274\242\157\253\131\136\245 -\057\317\312\332\155\252\057\353\254\241\263\152\252\267\056\147 -\065\213\171\341\036\151\210\342\346\106\315\240\245\352\276\013 -\316\166\072\172\016\233\352\374\332\047\133\075\163\037\042\346 -\110\141\306\114\363\151\261\250\056\033\266\324\061\040\054\274 -\202\212\216\244\016\245\327\211\103\374\026\132\257\035\161\327 -\021\131\332\272\207\015\257\372\363\341\302\360\244\305\147\214 -\326\326\124\072\336\012\244\272\003\167\263\145\310\375\036\323 -\164\142\252\030\312\150\223\036\241\205\176\365\107\145\313\370 -\115\127\050\164\322\064\377\060\266\356\366\142\060\024\214\054 -\353\002\003\001\000\001\243\201\271\060\201\266\060\013\006\003 -\125\035\017\004\004\003\002\001\306\060\017\006\003\125\035\023 -\001\001\377\004\005\060\003\001\001\377\060\035\006\003\125\035 -\016\004\026\004\024\211\202\147\175\304\235\046\160\000\113\264 -\120\110\174\336\075\256\004\156\175\060\130\006\003\125\035\037 -\004\121\060\117\060\115\240\113\240\111\206\107\150\164\164\160 -\072\057\057\143\162\154\056\165\163\145\162\164\162\165\163\164 -\056\143\157\155\057\125\124\116\055\125\123\105\122\106\151\162 -\163\164\055\103\154\151\145\156\164\101\165\164\150\145\156\164 -\151\143\141\164\151\157\156\141\156\144\105\155\141\151\154\056 -\143\162\154\060\035\006\003\125\035\045\004\026\060\024\006\010 -\053\006\001\005\005\007\003\002\006\010\053\006\001\005\005\007 -\003\004\060\015\006\011\052\206\110\206\367\015\001\001\005\005 -\000\003\202\001\001\000\261\155\141\135\246\032\177\174\253\112 -\344\060\374\123\157\045\044\306\312\355\342\061\134\053\016\356 -\356\141\125\157\004\076\317\071\336\305\033\111\224\344\353\040 -\114\264\346\236\120\056\162\331\215\365\252\243\263\112\332\126 -\034\140\227\200\334\202\242\255\112\275\212\053\377\013\011\264 -\306\327\040\004\105\344\315\200\001\272\272\053\156\316\252\327 -\222\376\344\257\353\364\046\035\026\052\177\154\060\225\067\057 -\063\022\254\177\335\307\321\021\214\121\230\262\320\243\221\320 -\255\366\237\236\203\223\036\035\102\270\106\257\153\146\360\233 -\177\352\343\003\002\345\002\121\301\252\325\065\235\162\100\003 -\211\272\061\035\305\020\150\122\236\337\242\205\305\134\010\246 -\170\346\123\117\261\350\267\323\024\236\223\246\303\144\343\254 -\176\161\315\274\237\351\003\033\314\373\351\254\061\301\257\174 -\025\164\002\231\303\262\107\246\302\062\141\327\307\157\110\044 -\121\047\241\325\207\125\362\173\217\230\075\026\236\356\165\266 -\370\320\216\362\363\306\256\050\133\247\360\363\066\027\374\303 -\005\323\312\003\112\124 -END -CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE - -# Trust for Certificate "UTN USERFirst Email Root CA" -# Issuer: CN=UTN-USERFirst-Client Authentication and Email,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US -# Serial Number:44:be:0c:8b:50:00:24:b4:11:d3:36:25:25:67:c9:89 -# Subject: CN=UTN-USERFirst-Client Authentication and Email,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US -# Not Valid Before: Fri Jul 09 17:28:50 1999 -# Not Valid After : Tue Jul 09 17:36:58 2019 -# Fingerprint (MD5): D7:34:3D:EF:1D:27:09:28:E1:31:02:5B:13:2B:DD:F7 -# Fingerprint (SHA1): B1:72:B1:A5:6D:95:F9:1F:E5:02:87:E1:4D:37:EA:6A:44:63:76:8A -CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "UTN USERFirst Email Root CA" -CKA_CERT_SHA1_HASH MULTILINE_OCTAL -\261\162\261\245\155\225\371\037\345\002\207\341\115\067\352\152 -\104\143\166\212 -END -CKA_CERT_MD5_HASH MULTILINE_OCTAL -\327\064\075\357\035\047\011\050\341\061\002\133\023\053\335\367 -END -CKA_ISSUER MULTILINE_OCTAL -\060\201\256\061\013\060\011\006\003\125\004\006\023\002\125\123 -\061\013\060\011\006\003\125\004\010\023\002\125\124\061\027\060 -\025\006\003\125\004\007\023\016\123\141\154\164\040\114\141\153 -\145\040\103\151\164\171\061\036\060\034\006\003\125\004\012\023 -\025\124\150\145\040\125\123\105\122\124\122\125\123\124\040\116 -\145\164\167\157\162\153\061\041\060\037\006\003\125\004\013\023 -\030\150\164\164\160\072\057\057\167\167\167\056\165\163\145\162 -\164\162\165\163\164\056\143\157\155\061\066\060\064\006\003\125 -\004\003\023\055\125\124\116\055\125\123\105\122\106\151\162\163 -\164\055\103\154\151\145\156\164\040\101\165\164\150\145\156\164 -\151\143\141\164\151\157\156\040\141\156\144\040\105\155\141\151 -\154 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\020\104\276\014\213\120\000\044\264\021\323\066\045\045\147 -\311\211 -END -CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST -CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST -CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE - # # Certificate "Camerfirma Chambers of Commerce Root" # @@ -3481,6 +3352,8 @@ CKA_VALUE MULTILINE_OCTAL \334 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Camerfirma Chambers of Commerce Root" # Issuer: CN=Chambers of Commerce Root,OU=http://www.chambersign.org,O=AC Camerfirma SA CIF A82743287,C=EU @@ -3641,6 +3514,8 @@ CKA_VALUE MULTILINE_OCTAL \166\135\165\220\032\365\046\217\360 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Camerfirma Global Chambersign Root" # Issuer: CN=Global Chambersign Root,OU=http://www.chambersign.org,O=AC Camerfirma SA CIF A82743287,C=EU @@ -3794,6 +3669,8 @@ CKA_VALUE MULTILINE_OCTAL \264\003\045\274 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "XRamp Global CA Root" # Issuer: CN=XRamp Global Certification Authority,O=XRamp Security Services Inc,OU=www.xrampsecurity.com,C=US @@ -3941,6 +3818,8 @@ CKA_VALUE MULTILINE_OCTAL \177\333\275\237 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Go Daddy Class 2 CA" # Issuer: OU=Go Daddy Class 2 Certification Authority,O="The Go Daddy Group, Inc.",C=US @@ -4086,6 +3965,8 @@ CKA_VALUE MULTILINE_OCTAL \037\027\224 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Starfield Class 2 CA" # Issuer: OU=Starfield Class 2 Certification Authority,O="Starfield Technologies, Inc.",C=US @@ -4250,6 +4131,8 @@ CKA_VALUE MULTILINE_OCTAL \245\206\054\174\364\022 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Taiwan GRCA" # Issuer: O=Government Root Certification Authority,C=TW @@ -4389,6 +4272,8 @@ CKA_VALUE MULTILINE_OCTAL \346\120\262\247\372\012\105\057\242\360\362 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "DigiCert Assured ID Root CA" # Issuer: CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US @@ -4530,6 +4415,8 @@ CKA_VALUE MULTILINE_OCTAL \225\155\336 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "DigiCert Global Root CA" # Issuer: CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US @@ -4672,6 +4559,8 @@ CKA_VALUE MULTILINE_OCTAL \370\351\056\023\243\167\350\037\112 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "DigiCert High Assurance EV Root CA" # Issuer: CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US @@ -4711,136 +4600,6 @@ CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE -# -# Certificate "Certplus Class 2 Primary CA" -# -# Issuer: CN=Class 2 Primary CA,O=Certplus,C=FR -# Serial Number:00:85:bd:4b:f3:d8:da:e3:69:f6:94:d7:5f:c3:a5:44:23 -# Subject: CN=Class 2 Primary CA,O=Certplus,C=FR -# Not Valid Before: Wed Jul 07 17:05:00 1999 -# Not Valid After : Sat Jul 06 23:59:59 2019 -# Fingerprint (MD5): 88:2C:8C:52:B8:A2:3C:F3:F7:BB:03:EA:AE:AC:42:0B -# Fingerprint (SHA1): 74:20:74:41:72:9C:DD:92:EC:79:31:D8:23:10:8D:C2:81:92:E2:BB -CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "Certplus Class 2 Primary CA" -CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 -CKA_SUBJECT MULTILINE_OCTAL -\060\075\061\013\060\011\006\003\125\004\006\023\002\106\122\061 -\021\060\017\006\003\125\004\012\023\010\103\145\162\164\160\154 -\165\163\061\033\060\031\006\003\125\004\003\023\022\103\154\141 -\163\163\040\062\040\120\162\151\155\141\162\171\040\103\101 -END -CKA_ID UTF8 "0" -CKA_ISSUER MULTILINE_OCTAL -\060\075\061\013\060\011\006\003\125\004\006\023\002\106\122\061 -\021\060\017\006\003\125\004\012\023\010\103\145\162\164\160\154 -\165\163\061\033\060\031\006\003\125\004\003\023\022\103\154\141 -\163\163\040\062\040\120\162\151\155\141\162\171\040\103\101 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\021\000\205\275\113\363\330\332\343\151\366\224\327\137\303 -\245\104\043 -END -CKA_VALUE MULTILINE_OCTAL -\060\202\003\222\060\202\002\172\240\003\002\001\002\002\021\000 -\205\275\113\363\330\332\343\151\366\224\327\137\303\245\104\043 -\060\015\006\011\052\206\110\206\367\015\001\001\005\005\000\060 -\075\061\013\060\011\006\003\125\004\006\023\002\106\122\061\021 -\060\017\006\003\125\004\012\023\010\103\145\162\164\160\154\165 -\163\061\033\060\031\006\003\125\004\003\023\022\103\154\141\163 -\163\040\062\040\120\162\151\155\141\162\171\040\103\101\060\036 -\027\015\071\071\060\067\060\067\061\067\060\065\060\060\132\027 -\015\061\071\060\067\060\066\062\063\065\071\065\071\132\060\075 -\061\013\060\011\006\003\125\004\006\023\002\106\122\061\021\060 -\017\006\003\125\004\012\023\010\103\145\162\164\160\154\165\163 -\061\033\060\031\006\003\125\004\003\023\022\103\154\141\163\163 -\040\062\040\120\162\151\155\141\162\171\040\103\101\060\202\001 -\042\060\015\006\011\052\206\110\206\367\015\001\001\001\005\000 -\003\202\001\017\000\060\202\001\012\002\202\001\001\000\334\120 -\226\320\022\370\065\322\010\170\172\266\122\160\375\157\356\317 -\271\021\313\135\167\341\354\351\176\004\215\326\314\157\163\103 -\127\140\254\063\012\104\354\003\137\034\200\044\221\345\250\221 -\126\022\202\367\340\053\364\333\256\141\056\211\020\215\153\154 -\272\263\002\275\325\066\305\110\067\043\342\360\132\067\122\063 -\027\022\342\321\140\115\276\057\101\021\343\366\027\045\014\213 -\221\300\033\231\173\231\126\015\257\356\322\274\107\127\343\171 -\111\173\064\211\047\044\204\336\261\354\351\130\116\376\116\337 -\132\276\101\255\254\010\305\030\016\357\322\123\356\154\320\235 -\022\001\023\215\334\200\142\367\225\251\104\210\112\161\116\140 -\125\236\333\043\031\171\126\007\014\077\143\013\134\260\342\276 -\176\025\374\224\063\130\101\070\164\304\341\217\213\337\046\254 -\037\265\213\073\267\103\131\153\260\044\246\155\220\213\304\162 -\352\135\063\230\267\313\336\136\173\357\224\361\033\076\312\311 -\041\301\305\230\002\252\242\366\133\167\233\365\176\226\125\064 -\034\147\151\300\361\102\343\107\254\374\050\034\146\125\002\003 -\001\000\001\243\201\214\060\201\211\060\017\006\003\125\035\023 -\004\010\060\006\001\001\377\002\001\012\060\013\006\003\125\035 -\017\004\004\003\002\001\006\060\035\006\003\125\035\016\004\026 -\004\024\343\163\055\337\313\016\050\014\336\335\263\244\312\171 -\270\216\273\350\060\211\060\021\006\011\140\206\110\001\206\370 -\102\001\001\004\004\003\002\001\006\060\067\006\003\125\035\037 -\004\060\060\056\060\054\240\052\240\050\206\046\150\164\164\160 -\072\057\057\167\167\167\056\143\145\162\164\160\154\165\163\056 -\143\157\155\057\103\122\114\057\143\154\141\163\163\062\056\143 -\162\154\060\015\006\011\052\206\110\206\367\015\001\001\005\005 -\000\003\202\001\001\000\247\124\317\210\104\031\313\337\324\177 -\000\337\126\063\142\265\367\121\001\220\353\303\077\321\210\104 -\351\044\135\357\347\024\275\040\267\232\074\000\376\155\237\333 -\220\334\327\364\142\326\213\160\135\347\345\004\110\251\150\174 -\311\361\102\363\154\177\305\172\174\035\121\210\272\322\012\076 -\047\135\336\055\121\116\323\023\144\151\344\056\343\323\347\233 -\011\231\246\340\225\233\316\032\327\177\276\074\316\122\263\021 -\025\301\017\027\315\003\273\234\045\025\272\242\166\211\374\006 -\361\030\320\223\113\016\174\202\267\245\364\366\137\376\355\100 -\246\235\204\164\071\271\334\036\205\026\332\051\033\206\043\000 -\311\273\211\176\156\200\210\036\057\024\264\003\044\250\062\157 -\003\232\107\054\060\276\126\306\247\102\002\160\033\352\100\330 -\272\005\003\160\007\244\226\377\375\110\063\012\341\334\245\201 -\220\233\115\335\175\347\347\262\315\134\310\152\225\370\245\366 -\215\304\135\170\010\276\173\006\326\111\317\031\066\120\043\056 -\010\346\236\005\115\107\030\325\026\351\261\326\266\020\325\273 -\227\277\242\216\264\124 -END -CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE - -# Trust for Certificate "Certplus Class 2 Primary CA" -# Issuer: CN=Class 2 Primary CA,O=Certplus,C=FR -# Serial Number:00:85:bd:4b:f3:d8:da:e3:69:f6:94:d7:5f:c3:a5:44:23 -# Subject: CN=Class 2 Primary CA,O=Certplus,C=FR -# Not Valid Before: Wed Jul 07 17:05:00 1999 -# Not Valid After : Sat Jul 06 23:59:59 2019 -# Fingerprint (MD5): 88:2C:8C:52:B8:A2:3C:F3:F7:BB:03:EA:AE:AC:42:0B -# Fingerprint (SHA1): 74:20:74:41:72:9C:DD:92:EC:79:31:D8:23:10:8D:C2:81:92:E2:BB -CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "Certplus Class 2 Primary CA" -CKA_CERT_SHA1_HASH MULTILINE_OCTAL -\164\040\164\101\162\234\335\222\354\171\061\330\043\020\215\302 -\201\222\342\273 -END -CKA_CERT_MD5_HASH MULTILINE_OCTAL -\210\054\214\122\270\242\074\363\367\273\003\352\256\254\102\013 -END -CKA_ISSUER MULTILINE_OCTAL -\060\075\061\013\060\011\006\003\125\004\006\023\002\106\122\061 -\021\060\017\006\003\125\004\012\023\010\103\145\162\164\160\154 -\165\163\061\033\060\031\006\003\125\004\003\023\022\103\154\141 -\163\163\040\062\040\120\162\151\155\141\162\171\040\103\101 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\021\000\205\275\113\363\330\332\343\151\366\224\327\137\303 -\245\104\043 -END -CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST -CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE - # # Certificate "DST Root CA X3" # @@ -4932,6 +4691,8 @@ CKA_VALUE MULTILINE_OCTAL \013\004\216\007\333\051\266\012\356\235\202\065\065\020 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "DST Root CA X3" # Issuer: CN=DST Root CA X3,O=Digital Signature Trust Co. @@ -5099,6 +4860,8 @@ CKA_VALUE MULTILINE_OCTAL \205\206\171\145\322 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "SwissSign Platinum CA - G2" # Issuer: CN=SwissSign Platinum CA - G2,O=SwissSign AG,C=CH @@ -5264,6 +5027,8 @@ CKA_VALUE MULTILINE_OCTAL \111\044\133\311\260\320\127\301\372\076\172\341\227\311 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "SwissSign Gold CA - G2" # Issuer: CN=SwissSign Gold CA - G2,O=SwissSign AG,C=CH @@ -5430,6 +5195,8 @@ CKA_VALUE MULTILINE_OCTAL \156 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "SwissSign Silver CA - G2" # Issuer: CN=SwissSign Silver CA - G2,O=SwissSign AG,C=CH @@ -5562,6 +5329,8 @@ CKA_VALUE MULTILINE_OCTAL \253\022\350\263\336\132\345\240\174\350\017\042\035\132\351\131 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "GeoTrust Primary Certification Authority" # Issuer: CN=GeoTrust Primary Certification Authority,O=GeoTrust Inc.,C=US @@ -5717,6 +5486,8 @@ CKA_VALUE MULTILINE_OCTAL \215\126\214\150 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "thawte Primary Root CA" # Issuer: CN=thawte Primary Root CA,OU="(c) 2006 thawte, Inc. - For authorized use only",OU=Certification Services Division,O="thawte, Inc.",C=US @@ -5892,6 +5663,8 @@ CKA_VALUE MULTILINE_OCTAL \254\021\326\250\355\143\152 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "VeriSign Class 3 Public Primary Certification Authority - G5" # Issuer: CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU="(c) 2006 VeriSign, Inc. - For authorized use only",OU=VeriSign Trust Network,O="VeriSign, Inc.",C=US @@ -6035,6 +5808,8 @@ CKA_VALUE MULTILINE_OCTAL \113\035\236\054\302\270\150\274\355\002\356\061 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "SecureTrust CA" # Issuer: CN=SecureTrust CA,O=SecureTrust Corporation,C=US @@ -6170,6 +5945,8 @@ CKA_VALUE MULTILINE_OCTAL \117\043\037\332\154\254\037\104\341\335\043\170\121\133\307\026 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Secure Global CA" # Issuer: CN=Secure Global CA,O=SecureTrust Corporation,C=US @@ -6320,6 +6097,8 @@ CKA_VALUE MULTILINE_OCTAL \145 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "COMODO Certification Authority" # Issuer: CN=COMODO Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB @@ -6466,6 +6245,8 @@ CKA_VALUE MULTILINE_OCTAL \244\140\114\260\125\240\240\173\127\262 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Network Solutions Certificate Authority" # Issuer: CN=Network Solutions Certificate Authority,O=Network Solutions L.L.C.,C=US @@ -6592,6 +6373,8 @@ CKA_VALUE MULTILINE_OCTAL \334\335\363\377\035\054\072\026\127\331\222\071\326 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "COMODO ECC Certification Authority" # Issuer: CN=COMODO ECC Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB @@ -6743,6 +6526,8 @@ CKA_VALUE MULTILINE_OCTAL \374\276\337\012\015 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "OISTE WISeKey Global Root GA CA" # Issuer: CN=OISTE WISeKey Global Root GA CA,OU=OISTE Foundation Endorsed,OU=Copyright (c) 2005,O=WISeKey,C=CH @@ -6878,6 +6663,8 @@ CKA_VALUE MULTILINE_OCTAL \300\226\130\057\352\273\106\327\273\344\331\056 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Certigna" # Issuer: CN=Certigna,O=Dhimyotis,C=FR @@ -6913,147 +6700,6 @@ CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE -# -# Certificate "Deutsche Telekom Root CA 2" -# -# Issuer: CN=Deutsche Telekom Root CA 2,OU=T-TeleSec Trust Center,O=Deutsche Telekom AG,C=DE -# Serial Number: 38 (0x26) -# Subject: CN=Deutsche Telekom Root CA 2,OU=T-TeleSec Trust Center,O=Deutsche Telekom AG,C=DE -# Not Valid Before: Fri Jul 09 12:11:00 1999 -# Not Valid After : Tue Jul 09 23:59:00 2019 -# Fingerprint (MD5): 74:01:4A:91:B1:08:C4:58:CE:47:CD:F0:DD:11:53:08 -# Fingerprint (SHA1): 85:A4:08:C0:9C:19:3E:5D:51:58:7D:CD:D6:13:30:FD:8C:DE:37:BF -CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "Deutsche Telekom Root CA 2" -CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 -CKA_SUBJECT MULTILINE_OCTAL -\060\161\061\013\060\011\006\003\125\004\006\023\002\104\105\061 -\034\060\032\006\003\125\004\012\023\023\104\145\165\164\163\143 -\150\145\040\124\145\154\145\153\157\155\040\101\107\061\037\060 -\035\006\003\125\004\013\023\026\124\055\124\145\154\145\123\145 -\143\040\124\162\165\163\164\040\103\145\156\164\145\162\061\043 -\060\041\006\003\125\004\003\023\032\104\145\165\164\163\143\150 -\145\040\124\145\154\145\153\157\155\040\122\157\157\164\040\103 -\101\040\062 -END -CKA_ID UTF8 "0" -CKA_ISSUER MULTILINE_OCTAL -\060\161\061\013\060\011\006\003\125\004\006\023\002\104\105\061 -\034\060\032\006\003\125\004\012\023\023\104\145\165\164\163\143 -\150\145\040\124\145\154\145\153\157\155\040\101\107\061\037\060 -\035\006\003\125\004\013\023\026\124\055\124\145\154\145\123\145 -\143\040\124\162\165\163\164\040\103\145\156\164\145\162\061\043 -\060\041\006\003\125\004\003\023\032\104\145\165\164\163\143\150 -\145\040\124\145\154\145\153\157\155\040\122\157\157\164\040\103 -\101\040\062 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\001\046 -END -CKA_VALUE MULTILINE_OCTAL -\060\202\003\237\060\202\002\207\240\003\002\001\002\002\001\046 -\060\015\006\011\052\206\110\206\367\015\001\001\005\005\000\060 -\161\061\013\060\011\006\003\125\004\006\023\002\104\105\061\034 -\060\032\006\003\125\004\012\023\023\104\145\165\164\163\143\150 -\145\040\124\145\154\145\153\157\155\040\101\107\061\037\060\035 -\006\003\125\004\013\023\026\124\055\124\145\154\145\123\145\143 -\040\124\162\165\163\164\040\103\145\156\164\145\162\061\043\060 -\041\006\003\125\004\003\023\032\104\145\165\164\163\143\150\145 -\040\124\145\154\145\153\157\155\040\122\157\157\164\040\103\101 -\040\062\060\036\027\015\071\071\060\067\060\071\061\062\061\061 -\060\060\132\027\015\061\071\060\067\060\071\062\063\065\071\060 -\060\132\060\161\061\013\060\011\006\003\125\004\006\023\002\104 -\105\061\034\060\032\006\003\125\004\012\023\023\104\145\165\164 -\163\143\150\145\040\124\145\154\145\153\157\155\040\101\107\061 -\037\060\035\006\003\125\004\013\023\026\124\055\124\145\154\145 -\123\145\143\040\124\162\165\163\164\040\103\145\156\164\145\162 -\061\043\060\041\006\003\125\004\003\023\032\104\145\165\164\163 -\143\150\145\040\124\145\154\145\153\157\155\040\122\157\157\164 -\040\103\101\040\062\060\202\001\042\060\015\006\011\052\206\110 -\206\367\015\001\001\001\005\000\003\202\001\017\000\060\202\001 -\012\002\202\001\001\000\253\013\243\065\340\213\051\024\261\024 -\205\257\074\020\344\071\157\065\135\112\256\335\352\141\215\225 -\111\364\157\144\243\032\140\146\244\251\100\042\204\331\324\245 -\345\170\223\016\150\001\255\271\115\134\072\316\323\270\250\102 -\100\337\317\243\272\202\131\152\222\033\254\034\232\332\010\053 -\045\047\371\151\043\107\361\340\353\054\172\233\365\023\002\320 -\176\064\174\302\236\074\000\131\253\365\332\014\365\062\074\053 -\254\120\332\326\303\336\203\224\312\250\014\231\062\016\010\110 -\126\133\152\373\332\341\130\130\001\111\137\162\101\074\025\006 -\001\216\135\255\252\270\223\264\315\236\353\247\350\152\055\122 -\064\333\072\357\134\165\121\332\333\363\061\371\356\161\230\062 -\304\124\025\104\014\371\233\125\355\255\337\030\010\240\243\206 -\212\111\356\123\005\217\031\114\325\336\130\171\233\322\152\034 -\102\253\305\325\247\317\150\017\226\344\341\141\230\166\141\310 -\221\174\326\076\000\342\221\120\207\341\235\012\346\255\227\322 -\035\306\072\175\313\274\332\003\064\325\216\133\001\365\152\007 -\267\026\266\156\112\177\002\003\001\000\001\243\102\060\100\060 -\035\006\003\125\035\016\004\026\004\024\061\303\171\033\272\365 -\123\327\027\340\211\172\055\027\154\012\263\053\235\063\060\017 -\006\003\125\035\023\004\010\060\006\001\001\377\002\001\005\060 -\016\006\003\125\035\017\001\001\377\004\004\003\002\001\006\060 -\015\006\011\052\206\110\206\367\015\001\001\005\005\000\003\202 -\001\001\000\224\144\131\255\071\144\347\051\353\023\376\132\303 -\213\023\127\310\004\044\360\164\167\300\140\343\147\373\351\211 -\246\203\277\226\202\174\156\324\303\075\357\236\200\156\273\051 -\264\230\172\261\073\124\353\071\027\107\176\032\216\013\374\037 -\061\131\061\004\262\316\027\363\054\307\142\066\125\342\042\330 -\211\125\264\230\110\252\144\372\326\034\066\330\104\170\132\132 -\043\072\127\227\365\172\060\117\256\237\152\114\113\053\216\240 -\003\343\076\340\251\324\322\173\322\263\250\342\162\074\255\236 -\377\200\131\344\233\105\264\366\073\260\315\071\031\230\062\345 -\352\041\141\220\344\061\041\216\064\261\367\057\065\112\205\020 -\332\347\212\067\041\276\131\143\340\362\205\210\061\123\324\124 -\024\205\160\171\364\056\006\167\047\165\057\037\270\212\371\376 -\305\272\330\066\344\203\354\347\145\267\277\143\132\363\106\257 -\201\224\067\324\101\214\326\043\326\036\317\365\150\033\104\143 -\242\132\272\247\065\131\241\345\160\005\233\016\043\127\231\224 -\012\155\272\071\143\050\206\222\363\030\204\330\373\321\317\005 -\126\144\127 -END -CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE - -# Trust for Certificate "Deutsche Telekom Root CA 2" -# Issuer: CN=Deutsche Telekom Root CA 2,OU=T-TeleSec Trust Center,O=Deutsche Telekom AG,C=DE -# Serial Number: 38 (0x26) -# Subject: CN=Deutsche Telekom Root CA 2,OU=T-TeleSec Trust Center,O=Deutsche Telekom AG,C=DE -# Not Valid Before: Fri Jul 09 12:11:00 1999 -# Not Valid After : Tue Jul 09 23:59:00 2019 -# Fingerprint (MD5): 74:01:4A:91:B1:08:C4:58:CE:47:CD:F0:DD:11:53:08 -# Fingerprint (SHA1): 85:A4:08:C0:9C:19:3E:5D:51:58:7D:CD:D6:13:30:FD:8C:DE:37:BF -CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "Deutsche Telekom Root CA 2" -CKA_CERT_SHA1_HASH MULTILINE_OCTAL -\205\244\010\300\234\031\076\135\121\130\175\315\326\023\060\375 -\214\336\067\277 -END -CKA_CERT_MD5_HASH MULTILINE_OCTAL -\164\001\112\221\261\010\304\130\316\107\315\360\335\021\123\010 -END -CKA_ISSUER MULTILINE_OCTAL -\060\161\061\013\060\011\006\003\125\004\006\023\002\104\105\061 -\034\060\032\006\003\125\004\012\023\023\104\145\165\164\163\143 -\150\145\040\124\145\154\145\153\157\155\040\101\107\061\037\060 -\035\006\003\125\004\013\023\026\124\055\124\145\154\145\123\145 -\143\040\124\162\165\163\164\040\103\145\156\164\145\162\061\043 -\060\041\006\003\125\004\003\023\032\104\145\165\164\163\143\150 -\145\040\124\145\154\145\153\157\155\040\122\157\157\164\040\103 -\101\040\062 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\001\046 -END -CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST -CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE - # # Certificate "Cybertrust Global Root" # @@ -7148,6 +6794,8 @@ CKA_VALUE MULTILINE_OCTAL \246\210\070\316\125 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Cybertrust Global Root" # Issuer: CN=Cybertrust Global Root,O="Cybertrust, Inc" @@ -7315,6 +6963,8 @@ CKA_VALUE MULTILINE_OCTAL \201\370\021\234 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "ePKI Root Certification Authority" # Issuer: OU=ePKI Root Certification Authority,O="Chunghwa Telecom Co., Ltd.",C=TW @@ -7440,6 +7090,8 @@ CKA_VALUE MULTILINE_OCTAL \366\356\260\132\116\111\104\124\130\137\102\203 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "certSIGN ROOT CA" # Issuer: OU=certSIGN ROOT CA,O=certSIGN,C=RO @@ -7588,6 +7240,8 @@ CKA_VALUE MULTILINE_OCTAL \021\055 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "GeoTrust Primary Certification Authority - G3" # Issuer: CN=GeoTrust Primary Certification Authority - G3,OU=(c) 2008 GeoTrust Inc. - For authorized use only,O=GeoTrust Inc.,C=US @@ -7717,6 +7371,8 @@ CKA_VALUE MULTILINE_OCTAL \367\130\077\056\162\002\127\243\217\241\024\056 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "thawte Primary Root CA - G2" # Issuer: CN=thawte Primary Root CA - G2,OU="(c) 2007 thawte, Inc. - For authorized use only",O="thawte, Inc.",C=US @@ -7877,6 +7533,8 @@ CKA_VALUE MULTILINE_OCTAL \061\324\100\032\142\064\066\077\065\001\256\254\143\240 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "thawte Primary Root CA - G3" # Issuer: CN=thawte Primary Root CA - G3,OU="(c) 2008 thawte, Inc. - For authorized use only",OU=Certification Services Division,O="thawte, Inc.",C=US @@ -8013,6 +7671,8 @@ CKA_VALUE MULTILINE_OCTAL \017\212 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "GeoTrust Primary Certification Authority - G2" # Issuer: CN=GeoTrust Primary Certification Authority - G2,OU=(c) 2007 GeoTrust Inc. - For authorized use only,O=GeoTrust Inc.,C=US @@ -8183,6 +7843,8 @@ CKA_VALUE MULTILINE_OCTAL \354\315\202\141\361\070\346\117\227\230\052\132\215 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "VeriSign Universal Root Certification Authority" # Issuer: CN=VeriSign Universal Root Certification Authority,OU="(c) 2008 VeriSign, Inc. - For authorized use only",OU=VeriSign Trust Network,O="VeriSign, Inc.",C=US @@ -8338,6 +8000,8 @@ CKA_VALUE MULTILINE_OCTAL \055\247\330\206\052\335\056\020 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "VeriSign Class 3 Public Primary Certification Authority - G4" # Issuer: CN=VeriSign Class 3 Public Primary Certification Authority - G4,OU="(c) 2007 VeriSign, Inc. - For authorized use only",OU=VeriSign Trust Network,O="VeriSign, Inc.",C=US @@ -8498,6 +8162,8 @@ CKA_VALUE MULTILINE_OCTAL \330\316\304\143\165\077\131\107\261 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "NetLock Arany (Class Gold) Főtanúsítvány" # Issuer: CN=NetLock Arany (Class Gold) F..tan..s..tv..ny,OU=Tan..s..tv..nykiad..k (Certification Services),O=NetLock Kft.,L=Budapest,C=HU @@ -8672,6 +8338,8 @@ CKA_VALUE MULTILINE_OCTAL \370\161\012\334\271\374\175\062\140\346\353\257\212\001 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Staat der Nederlanden Root CA - G2" # Issuer: CN=Staat der Nederlanden Root CA - G2,O=Staat der Nederlanden,C=NL @@ -8798,6 +8466,8 @@ CKA_VALUE MULTILINE_OCTAL \002\153\331\132 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Hongkong Post Root CA 1" # Issuer: CN=Hongkong Post Root CA 1,O=Hongkong Post,C=HK @@ -8929,6 +8599,8 @@ CKA_VALUE MULTILINE_OCTAL \362 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "SecureSign RootCA11" # Issuer: CN=SecureSign RootCA11,O="Japan Certification Services, Inc.",C=JP @@ -9076,6 +8748,8 @@ CKA_VALUE MULTILINE_OCTAL \202\042\055\172\124\253\160\303\175\042\145\202\160\226 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Microsec e-Szigno Root CA 2009" # Issuer: E=info(a)e-szigno.hu,CN=Microsec e-Szigno Root CA 2009,O=Microsec Ltd.,L=Budapest,C=HU @@ -9208,6 +8882,8 @@ CKA_VALUE MULTILINE_OCTAL \130\077\137 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "GlobalSign Root CA - R3" # Issuer: CN=GlobalSign,O=GlobalSign,OU=GlobalSign Root CA - R3 @@ -9381,6 +9057,8 @@ CKA_VALUE MULTILINE_OCTAL \156\117\022\176\012\074\235\225 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" # Issuer: CN=Autoridad de Certificacion Firmaprofesional CIF A62634068,C=ES @@ -9550,6 +9228,8 @@ CKA_VALUE MULTILINE_OCTAL \333\374\046\210\307 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Izenpe.com" # Issuer: CN=Izenpe.com,O=IZENPE S.A.,C=ES @@ -9755,6 +9435,8 @@ CKA_VALUE MULTILINE_OCTAL \167\110\320 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Chambers of Commerce Root - 2008" # Issuer: CN=Chambers of Commerce Root - 2008,O=AC Camerfirma S.A.,serialNumber=A82743287,L=Madrid (see current address at www.camerfirma.com/address),C=EU @@ -9964,6 +9646,8 @@ CKA_VALUE MULTILINE_OCTAL \351\233\256\325\124\300\164\200\321\013\102\237\301 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Global Chambersign Root - 2008" # Issuer: CN=Global Chambersign Root - 2008,O=AC Camerfirma S.A.,serialNumber=A82743287,L=Madrid (see current address at www.camerfirma.com/address),C=EU @@ -10112,6 +9796,8 @@ CKA_VALUE MULTILINE_OCTAL \342\342\104\276\134\367\352\034\365 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Go Daddy Root Certificate Authority - G2" # Issuer: CN=Go Daddy Root Certificate Authority - G2,O="GoDaddy.com, Inc.",L=Scottsdale,ST=Arizona,C=US @@ -10262,6 +9948,8 @@ CKA_VALUE MULTILINE_OCTAL \364 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Starfield Root Certificate Authority - G2" # Issuer: CN=Starfield Root Certificate Authority - G2,O="Starfield Technologies, Inc.",L=Scottsdale,ST=Arizona,C=US @@ -10414,6 +10102,8 @@ CKA_VALUE MULTILINE_OCTAL \261\050\272 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Starfield Services Root Certificate Authority - G2" # Issuer: CN=Starfield Services Root Certificate Authority - G2,O="Starfield Technologies, Inc.",L=Scottsdale,ST=Arizona,C=US @@ -10545,6 +10235,8 @@ CKA_VALUE MULTILINE_OCTAL \007\072\027\144\265\004\265\043\041\231\012\225\073\227\174\357 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "AffirmTrust Commercial" # Issuer: CN=AffirmTrust Commercial,O=AffirmTrust,C=US @@ -10671,6 +10363,8 @@ CKA_VALUE MULTILINE_OCTAL \355\132\000\124\205\034\026\066\222\014\134\372\246\255\277\333 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "AffirmTrust Networking" # Issuer: CN=AffirmTrust Networking,O=AffirmTrust,C=US @@ -10829,6 +10523,8 @@ CKA_VALUE MULTILINE_OCTAL \051\340\266\270\011\150\031\034\030\103 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "AffirmTrust Premium" # Issuer: CN=AffirmTrust Premium,O=AffirmTrust,C=US @@ -10935,6 +10631,8 @@ CKA_VALUE MULTILINE_OCTAL \214\171 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "AffirmTrust Premium ECC" # Issuer: CN=AffirmTrust Premium ECC,O=AffirmTrust,C=US @@ -11074,6 +10772,8 @@ CKA_VALUE MULTILINE_OCTAL \326\267\064\365\176\316\071\232\331\070\361\121\367\117\054 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Certum Trusted Network CA" # Issuer: CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL @@ -11210,6 +10910,8 @@ CKA_VALUE MULTILINE_OCTAL \274\060\376\173\016\063\220\373\355\322\024\221\037\007\257 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "TWCA Root Certification Authority" # Issuer: CN=TWCA Root Certification Authority,OU=Root CA,O=TAIWAN-CA,C=TW @@ -11693,6 +11395,8 @@ CKA_VALUE MULTILINE_OCTAL \201\050\174\247\175\047\353\000\256\215\067 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Security Communication RootCA2" # Issuer: OU=Security Communication RootCA2,O="SECOM Trust Systems CO.,LTD.",C=JP @@ -11876,6 +11580,8 @@ CKA_VALUE MULTILINE_OCTAL \371\210\075\176\270\157\156\003\344\102 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "EC-ACC" # Issuer: CN=EC-ACC,OU=Jerarquia Entitats de Certificacio Catalanes,OU=Vegeu https://www.catcert.net/verarrel (c)03,OU=Serveis Publics de Certificacio,O=Agencia Catalana de Certificacio (NIF Q-0801176-I),C=ES @@ -12039,6 +11745,8 @@ CKA_VALUE MULTILINE_OCTAL \113\321\047\327\270 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for Certificate "Hellenic Academic and Research Institutions RootCA 2011" # Issuer: CN=Hellenic Academic and Research Institutions RootCA 2011,O=Hellenic Academic and Research Institutions Cert. Authority,C=GR @@ -12275,6 +11983,8 @@ CKA_VALUE MULTILINE_OCTAL \216\362\024\212\314\351\265\174\373\154\235\014\245\341\226 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "Actalis Authentication Root CA" # Issuer: CN=Actalis Authentication Root CA,O=Actalis S.p.A./03358520967,L=Milan,C=IT @@ -12406,6 +12116,8 @@ CKA_VALUE MULTILINE_OCTAL \145\353\127\331\363\127\226\273\110\315\201 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "Trustis FPS Root CA" # Issuer: OU=Trustis FPS Root CA,O=Trustis Limited,C=GB @@ -12566,6 +12278,8 @@ CKA_VALUE MULTILINE_OCTAL \327\201\011\361\311\307\046\015\254\230\026\126\240 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "Buypass Class 2 Root CA" # Issuer: CN=Buypass Class 2 Root CA,O=Buypass AS-983163327,C=NO @@ -12725,6 +12439,8 @@ CKA_VALUE MULTILINE_OCTAL \061\356\006\274\163\277\023\142\012\237\307\271\227 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "Buypass Class 3 Root CA" # Issuer: CN=Buypass Class 3 Root CA,O=Buypass AS-983163327,C=NO @@ -12867,6 +12583,8 @@ CKA_VALUE MULTILINE_OCTAL \116\223\303\244\124\024\133 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "T-TeleSec GlobalRoot Class 3" # Issuer: CN=T-TeleSec GlobalRoot Class 3,OU=T-Systems Trust Center,O=T-Systems Enterprise Services GmbH,C=DE @@ -13016,6 +12734,8 @@ CKA_VALUE MULTILINE_OCTAL \307\314\165\301\226\305\235 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "EE Certification Centre Root CA" # Issuer: E=pki(a)sk.ee,CN=EE Certification Centre Root CA,O=AS Sertifitseerimiskeskus,C=EE @@ -13229,6 +12949,8 @@ CKA_VALUE MULTILINE_OCTAL \164\145\327\134\376\243\342 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "D-TRUST Root Class 3 CA 2 2009" # Issuer: CN=D-TRUST Root Class 3 CA 2 2009,O=D-Trust GmbH,C=DE @@ -13373,6 +13095,8 @@ CKA_VALUE MULTILINE_OCTAL \352\237\026\361\054\124\265 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "D-TRUST Root Class 3 CA 2 EV 2009" # Issuer: CN=D-TRUST Root Class 3 CA 2 EV 2009,O=D-Trust GmbH,C=DE @@ -13410,181 +13134,6 @@ CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE -# -# Certificate "Swisscom Root CA 2" -# -# Issuer: CN=Swisscom Root CA 2,OU=Digital Certificate Services,O=Swisscom,C=ch -# Serial Number:1e:9e:28:e8:48:f2:e5:ef:c3:7c:4a:1e:5a:18:67:b6 -# Subject: CN=Swisscom Root CA 2,OU=Digital Certificate Services,O=Swisscom,C=ch -# Not Valid Before: Fri Jun 24 08:38:14 2011 -# Not Valid After : Wed Jun 25 07:38:14 2031 -# Fingerprint (MD5): 5B:04:69:EC:A5:83:94:63:18:A7:86:D0:E4:F2:6E:19 -# Fingerprint (SHA1): 77:47:4F:C6:30:E4:0F:4C:47:64:3F:84:BA:B8:C6:95:4A:8A:41:EC -CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "Swisscom Root CA 2" -CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 -CKA_SUBJECT MULTILINE_OCTAL -\060\144\061\013\060\011\006\003\125\004\006\023\002\143\150\061 -\021\060\017\006\003\125\004\012\023\010\123\167\151\163\163\143 -\157\155\061\045\060\043\006\003\125\004\013\023\034\104\151\147 -\151\164\141\154\040\103\145\162\164\151\146\151\143\141\164\145 -\040\123\145\162\166\151\143\145\163\061\033\060\031\006\003\125 -\004\003\023\022\123\167\151\163\163\143\157\155\040\122\157\157 -\164\040\103\101\040\062 -END -CKA_ID UTF8 "0" -CKA_ISSUER MULTILINE_OCTAL -\060\144\061\013\060\011\006\003\125\004\006\023\002\143\150\061 -\021\060\017\006\003\125\004\012\023\010\123\167\151\163\163\143 -\157\155\061\045\060\043\006\003\125\004\013\023\034\104\151\147 -\151\164\141\154\040\103\145\162\164\151\146\151\143\141\164\145 -\040\123\145\162\166\151\143\145\163\061\033\060\031\006\003\125 -\004\003\023\022\123\167\151\163\163\143\157\155\040\122\157\157 -\164\040\103\101\040\062 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\020\036\236\050\350\110\362\345\357\303\174\112\036\132\030 -\147\266 -END -CKA_VALUE MULTILINE_OCTAL -\060\202\005\331\060\202\003\301\240\003\002\001\002\002\020\036 -\236\050\350\110\362\345\357\303\174\112\036\132\030\147\266\060 -\015\006\011\052\206\110\206\367\015\001\001\013\005\000\060\144 -\061\013\060\011\006\003\125\004\006\023\002\143\150\061\021\060 -\017\006\003\125\004\012\023\010\123\167\151\163\163\143\157\155 -\061\045\060\043\006\003\125\004\013\023\034\104\151\147\151\164 -\141\154\040\103\145\162\164\151\146\151\143\141\164\145\040\123 -\145\162\166\151\143\145\163\061\033\060\031\006\003\125\004\003 -\023\022\123\167\151\163\163\143\157\155\040\122\157\157\164\040 -\103\101\040\062\060\036\027\015\061\061\060\066\062\064\060\070 -\063\070\061\064\132\027\015\063\061\060\066\062\065\060\067\063 -\070\061\064\132\060\144\061\013\060\011\006\003\125\004\006\023 -\002\143\150\061\021\060\017\006\003\125\004\012\023\010\123\167 -\151\163\163\143\157\155\061\045\060\043\006\003\125\004\013\023 -\034\104\151\147\151\164\141\154\040\103\145\162\164\151\146\151 -\143\141\164\145\040\123\145\162\166\151\143\145\163\061\033\060 -\031\006\003\125\004\003\023\022\123\167\151\163\163\143\157\155 -\040\122\157\157\164\040\103\101\040\062\060\202\002\042\060\015 -\006\011\052\206\110\206\367\015\001\001\001\005\000\003\202\002 -\017\000\060\202\002\012\002\202\002\001\000\225\102\116\204\235 -\121\346\323\011\350\162\132\043\151\333\170\160\216\026\361\053 -\217\015\003\316\223\314\056\000\010\173\253\063\214\364\351\100 -\346\027\114\253\236\270\107\024\062\167\062\335\050\014\336\030 -\113\137\166\237\370\071\073\374\116\211\330\174\305\147\357\253 -\322\271\064\137\153\072\363\144\066\316\302\260\317\023\150\312 -\310\313\353\265\342\075\056\041\337\352\054\324\340\371\160\226 -\114\377\152\130\230\267\027\344\033\122\345\176\007\000\035\137 -\332\346\076\225\004\267\151\210\071\241\101\140\045\141\113\225 -\071\150\142\034\261\013\005\211\300\066\202\024\041\077\256\333 -\241\375\274\157\034\140\206\266\123\224\111\271\053\106\305\117 -\000\053\277\241\273\313\077\340\307\127\034\127\350\326\151\370 -\301\044\122\235\210\125\335\302\207\056\164\043\320\024\375\052 -\107\132\273\246\235\375\224\344\321\212\245\137\206\143\166\205 -\313\257\377\111\050\374\200\355\114\171\322\273\344\300\357\001 -\356\120\101\010\065\043\160\053\251\026\264\214\156\205\351\266 -\021\317\061\335\123\046\033\337\055\132\112\002\100\374\304\300 -\266\351\061\032\010\050\345\140\303\037\304\220\216\020\142\140 -\104\015\354\012\276\125\030\161\054\245\364\262\274\025\142\377 -\034\343\276\035\332\036\127\263\074\176\315\202\035\221\343\113 -\353\054\122\064\260\212\375\022\116\226\260\353\160\177\236\071 -\367\146\102\261\253\254\122\332\166\100\127\173\052\275\350\156 -\003\262\013\200\205\210\235\014\307\302\167\260\232\232\127\364 -\270\372\023\134\150\223\072\147\244\227\320\033\231\267\206\062 -\113\140\330\316\357\320\014\177\225\237\157\207\117\207\212\216 -\137\010\174\252\133\374\132\276\241\221\237\125\175\116\260\013 -\151\314\260\224\250\247\207\362\323\112\120\334\137\162\260\026 -\165\036\313\264\030\142\232\260\247\071\252\233\237\146\330\215 -\246\154\226\025\343\346\362\370\361\203\142\154\273\125\351\141 -\223\243\075\365\261\127\213\117\043\260\233\345\224\152\057\337 -\214\337\225\121\051\140\241\013\051\344\134\125\130\267\250\374 -\231\356\045\115\114\016\263\323\114\217\204\350\051\017\375\020 -\124\002\205\310\371\345\303\213\317\347\017\002\003\001\000\001 -\243\201\206\060\201\203\060\016\006\003\125\035\017\001\001\377 -\004\004\003\002\001\206\060\035\006\003\125\035\041\004\026\060 -\024\060\022\006\007\140\205\164\001\123\002\001\006\007\140\205 -\164\001\123\002\001\060\022\006\003\125\035\023\001\001\377\004 -\010\060\006\001\001\377\002\001\007\060\035\006\003\125\035\016 -\004\026\004\024\115\046\040\042\211\113\323\325\244\012\241\157 -\336\342\022\201\305\361\074\056\060\037\006\003\125\035\043\004 -\030\060\026\200\024\115\046\040\042\211\113\323\325\244\012\241 -\157\336\342\022\201\305\361\074\056\060\015\006\011\052\206\110 -\206\367\015\001\001\013\005\000\003\202\002\001\000\062\012\262 -\244\033\313\175\276\202\127\211\271\152\177\363\364\301\056\021 -\175\270\031\076\171\267\250\250\162\067\146\233\032\355\254\023 -\073\016\277\142\360\234\337\236\173\241\123\110\016\101\172\312 -\040\247\027\033\266\170\354\100\221\363\102\255\020\303\134\357 -\377\140\131\177\315\205\243\213\075\110\034\045\002\074\147\175 -\365\062\351\057\060\345\175\245\172\070\320\363\146\052\146\036 -\215\063\203\212\157\174\156\250\132\165\232\270\327\332\130\110 -\104\107\250\114\372\114\111\012\112\302\022\067\250\100\014\303 -\310\341\320\127\015\227\062\225\307\072\237\227\323\127\370\013 -\336\345\162\363\243\333\377\265\330\131\262\163\335\115\052\161 -\262\272\111\365\313\034\325\365\171\310\231\263\374\301\114\164 -\343\264\275\051\067\025\004\050\036\336\105\106\160\354\257\272 -\170\016\212\052\316\000\171\334\300\137\031\147\054\153\113\357 -\150\150\013\103\343\254\301\142\011\357\246\335\145\141\240\257 -\204\125\110\221\122\034\306\045\221\052\320\301\042\043\141\131 -\257\105\021\205\035\001\044\064\217\317\263\377\027\162\040\023 -\302\200\252\041\054\161\071\016\320\217\134\301\323\321\216\042 -\162\106\114\035\226\256\117\161\261\341\005\051\226\131\364\273 -\236\165\075\317\015\067\015\142\333\046\214\143\251\043\337\147 -\006\074\174\072\332\064\102\341\146\264\106\004\336\306\226\230 -\017\113\110\172\044\062\165\221\237\254\367\150\351\052\271\125 -\145\316\135\141\323\047\160\330\067\376\237\271\257\240\056\126 -\267\243\145\121\355\073\253\024\277\114\121\003\350\137\212\005 -\233\356\212\156\234\357\277\150\372\310\332\013\343\102\311\320 -\027\024\234\267\112\340\257\223\047\041\125\046\265\144\057\215 -\361\377\246\100\005\205\005\134\312\007\031\134\013\023\050\114 -\130\177\302\245\357\105\332\140\323\256\145\141\235\123\203\164 -\302\256\362\134\302\026\355\222\076\204\076\163\140\210\274\166 -\364\054\317\320\175\175\323\270\136\321\221\022\020\351\315\335 -\312\045\343\325\355\231\057\276\165\201\113\044\371\105\106\224 -\311\051\041\123\234\046\105\252\023\027\344\347\315\170\342\071 -\301\053\022\236\246\236\033\305\346\016\331\061\331 -END -CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE - -# Trust for "Swisscom Root CA 2" -# Issuer: CN=Swisscom Root CA 2,OU=Digital Certificate Services,O=Swisscom,C=ch -# Serial Number:1e:9e:28:e8:48:f2:e5:ef:c3:7c:4a:1e:5a:18:67:b6 -# Subject: CN=Swisscom Root CA 2,OU=Digital Certificate Services,O=Swisscom,C=ch -# Not Valid Before: Fri Jun 24 08:38:14 2011 -# Not Valid After : Wed Jun 25 07:38:14 2031 -# Fingerprint (MD5): 5B:04:69:EC:A5:83:94:63:18:A7:86:D0:E4:F2:6E:19 -# Fingerprint (SHA1): 77:47:4F:C6:30:E4:0F:4C:47:64:3F:84:BA:B8:C6:95:4A:8A:41:EC -CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "Swisscom Root CA 2" -CKA_CERT_SHA1_HASH MULTILINE_OCTAL -\167\107\117\306\060\344\017\114\107\144\077\204\272\270\306\225 -\112\212\101\354 -END -CKA_CERT_MD5_HASH MULTILINE_OCTAL -\133\004\151\354\245\203\224\143\030\247\206\320\344\362\156\031 -END -CKA_ISSUER MULTILINE_OCTAL -\060\144\061\013\060\011\006\003\125\004\006\023\002\143\150\061 -\021\060\017\006\003\125\004\012\023\010\123\167\151\163\163\143 -\157\155\061\045\060\043\006\003\125\004\013\023\034\104\151\147 -\151\164\141\154\040\103\145\162\164\151\146\151\143\141\164\145 -\040\123\145\162\166\151\143\145\163\061\033\060\031\006\003\125 -\004\003\023\022\123\167\151\163\163\143\157\155\040\122\157\157 -\164\040\103\101\040\062 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\020\036\236\050\350\110\362\345\357\303\174\112\036\132\030 -\147\266 -END -CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_MUST_VERIFY_TRUST -CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST -CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE - # # Certificate "CA Disig Root R2" # @@ -13711,6 +13260,8 @@ CKA_VALUE MULTILINE_OCTAL \363\154\033\165\106\243\345\112\027\351\244\327\013 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "CA Disig Root R2" # Issuer: CN=CA Disig Root R2,O=Disig a.s.,L=Bratislava,C=SK @@ -13911,6 +13462,8 @@ CKA_VALUE MULTILINE_OCTAL \125\064\106\052\213\206\073 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "ACCVRAIZ1" # Issuer: C=ES,O=ACCV,OU=PKIACCV,CN=ACCVRAIZ1 @@ -14071,6 +13624,8 @@ CKA_VALUE MULTILINE_OCTAL \053\006\320\004\315 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "TWCA Global Root CA" # Issuer: CN=TWCA Global Root CA,OU=Root CA,O=TAIWAN-CA,C=TW @@ -14228,6 +13783,8 @@ CKA_VALUE MULTILINE_OCTAL \245\240\314\277\323\366\165\244\165\226\155\126 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "TeliaSonera Root CA v1" # Issuer: CN=TeliaSonera Root CA v1,O=TeliaSonera @@ -14416,6 +13973,8 @@ CKA_VALUE MULTILINE_OCTAL \243\253\157\134\035\266\176\350\263\202\064\355\006\134\044 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "E-Tugra Certification Authority" # Issuer: CN=E-Tugra Certification Authority,OU=E-Tugra Sertifikasyon Merkezi,O=E-Tu..ra EBG Bili..im Teknolojileri ve Hizmetleri A....,L=Ankara,C=TR @@ -14565,6 +14124,8 @@ CKA_VALUE MULTILINE_OCTAL \005\047\216\023\241\156\302 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "T-TeleSec GlobalRoot Class 2" # Issuer: CN=T-TeleSec GlobalRoot Class 2,OU=T-Systems Trust Center,O=T-Systems Enterprise Services GmbH,C=DE @@ -14696,6 +14257,8 @@ CKA_VALUE MULTILINE_OCTAL \035\362\376\011\021\260\360\207\173\247\235 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "Atos TrustedRoot 2011" # Issuer: C=DE,O=Atos,CN=Atos TrustedRoot 2011 @@ -14856,6 +14419,8 @@ CKA_VALUE MULTILINE_OCTAL \063\140\345\303 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "QuoVadis Root CA 1 G3" # Issuer: CN=QuoVadis Root CA 1 G3,O=QuoVadis Limited,C=BM @@ -15018,6 +14583,8 @@ CKA_VALUE MULTILINE_OCTAL \203\336\177\214 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "QuoVadis Root CA 2 G3" # Issuer: CN=QuoVadis Root CA 2 G3,O=QuoVadis Limited,C=BM @@ -15180,6 +14747,8 @@ CKA_VALUE MULTILINE_OCTAL \130\371\230\364 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "QuoVadis Root CA 3 G3" # Issuer: CN=QuoVadis Root CA 3 G3,O=QuoVadis Limited,C=BM @@ -15317,6 +14886,8 @@ CKA_VALUE MULTILINE_OCTAL \042\023\163\154\317\046\365\212\051\347 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "DigiCert Assured ID Root G2" # Issuer: CN=DigiCert Assured ID Root G2,OU=www.digicert.com,O=DigiCert Inc,C=US @@ -15435,6 +15006,8 @@ CKA_VALUE MULTILINE_OCTAL \352\226\143\152\145\105\222\225\001\264 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "DigiCert Assured ID Root G3" # Issuer: CN=DigiCert Assured ID Root G3,OU=www.digicert.com,O=DigiCert Inc,C=US @@ -15574,6 +15147,8 @@ CKA_VALUE MULTILINE_OCTAL \062\266 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "DigiCert Global Root G2" # Issuer: CN=DigiCert Global Root G2,OU=www.digicert.com,O=DigiCert Inc,C=US @@ -15692,6 +15267,8 @@ CKA_VALUE MULTILINE_OCTAL \263\047\027 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "DigiCert Global Root G3" # Issuer: CN=DigiCert Global Root G3,OU=www.digicert.com,O=DigiCert Inc,C=US @@ -15863,6 +15440,8 @@ CKA_VALUE MULTILINE_OCTAL \317\363\146\176 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "DigiCert Trusted Root G4" # Issuer: CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US @@ -16042,6 +15621,8 @@ CKA_VALUE MULTILINE_OCTAL \065\123\205\006\112\135\237\255\273\033\137\164 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "COMODO RSA Certification Authority" # Issuer: CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB @@ -16224,6 +15805,8 @@ CKA_VALUE MULTILINE_OCTAL \250\375 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "USERTrust RSA Certification Authority" # Issuer: CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US @@ -16353,6 +15936,8 @@ CKA_VALUE MULTILINE_OCTAL \127\152\030 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "USERTrust ECC Certification Authority" # Issuer: CN=USERTrust ECC Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US @@ -16465,6 +16050,8 @@ CKA_VALUE MULTILINE_OCTAL \173\013\370\237\204 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "GlobalSign ECC Root CA - R4" # Issuer: CN=GlobalSign,O=GlobalSign,OU=GlobalSign ECC Root CA - R4 @@ -16578,6 +16165,8 @@ CKA_VALUE MULTILINE_OCTAL \220\067 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "GlobalSign ECC Root CA - R5" # Issuer: CN=GlobalSign,O=GlobalSign,OU=GlobalSign ECC Root CA - R5 @@ -16743,6 +16332,8 @@ CKA_VALUE MULTILINE_OCTAL \367\200\173\041\147\047\060\131 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "Staat der Nederlanden Root CA - G3" # Issuer: CN=Staat der Nederlanden Root CA - G3,O=Staat der Nederlanden,C=NL @@ -16907,6 +16498,8 @@ CKA_VALUE MULTILINE_OCTAL \356\354\327\056 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "Staat der Nederlanden EV Root CA" # Issuer: CN=Staat der Nederlanden EV Root CA,O=Staat der Nederlanden,C=NL @@ -17069,6 +16662,8 @@ CKA_VALUE MULTILINE_OCTAL \272\204\156\207 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "IdenTrust Commercial Root CA 1" # Issuer: CN=IdenTrust Commercial Root CA 1,O=IdenTrust,C=US @@ -17231,6 +16826,8 @@ CKA_VALUE MULTILINE_OCTAL \267\254\266\255\267\312\076\001\357\234 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "IdenTrust Public Sector Root CA 1" # Issuer: CN=IdenTrust Public Sector Root CA 1,O=IdenTrust,C=US @@ -17390,6 +16987,8 @@ CKA_VALUE MULTILINE_OCTAL \105\366 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "Entrust Root Certification Authority - G2" # Issuer: CN=Entrust Root Certification Authority - G2,OU="(c) 2009 Entrust, Inc. - for authorized use only",OU=See www.entrust.net/legal-terms,O="Entrust, Inc.",C=US @@ -17535,6 +17134,8 @@ CKA_VALUE MULTILINE_OCTAL \231\267\046\101\133\045\140\256\320\110\032\356\006 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "Entrust Root Certification Authority - EC1" # Issuer: CN=Entrust Root Certification Authority - EC1,OU="(c) 2012 Entrust, Inc. - for authorized use only",OU=See www.entrust.net/legal-terms,O="Entrust, Inc.",C=US @@ -17708,6 +17309,8 @@ CKA_VALUE MULTILINE_OCTAL \056 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "CFCA EV ROOT" # Issuer: CN=CFCA EV ROOT,O=China Financial Certification Authority,C=CN @@ -17745,172 +17348,6 @@ CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE -# -# Certificate "Certinomis - Root CA" -# -# Issuer: CN=Certinomis - Root CA,OU=0002 433998903,O=Certinomis,C=FR -# Serial Number: 1 (0x1) -# Subject: CN=Certinomis - Root CA,OU=0002 433998903,O=Certinomis,C=FR -# Not Valid Before: Mon Oct 21 09:17:18 2013 -# Not Valid After : Fri Oct 21 09:17:18 2033 -# Fingerprint (SHA-256): 2A:99:F5:BC:11:74:B7:3C:BB:1D:62:08:84:E0:1C:34:E5:1C:CB:39:78:DA:12:5F:0E:33:26:88:83:BF:41:58 -# Fingerprint (SHA1): 9D:70:BB:01:A5:A4:A0:18:11:2E:F7:1C:01:B9:32:C5:34:E7:88:A8 -CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "Certinomis - Root CA" -CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 -CKA_SUBJECT MULTILINE_OCTAL -\060\132\061\013\060\011\006\003\125\004\006\023\002\106\122\061 -\023\060\021\006\003\125\004\012\023\012\103\145\162\164\151\156 -\157\155\151\163\061\027\060\025\006\003\125\004\013\023\016\060 -\060\060\062\040\064\063\063\071\071\070\071\060\063\061\035\060 -\033\006\003\125\004\003\023\024\103\145\162\164\151\156\157\155 -\151\163\040\055\040\122\157\157\164\040\103\101 -END -CKA_ID UTF8 "0" -CKA_ISSUER MULTILINE_OCTAL -\060\132\061\013\060\011\006\003\125\004\006\023\002\106\122\061 -\023\060\021\006\003\125\004\012\023\012\103\145\162\164\151\156 -\157\155\151\163\061\027\060\025\006\003\125\004\013\023\016\060 -\060\060\062\040\064\063\063\071\071\070\071\060\063\061\035\060 -\033\006\003\125\004\003\023\024\103\145\162\164\151\156\157\155 -\151\163\040\055\040\122\157\157\164\040\103\101 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\001\001 -END -CKA_VALUE MULTILINE_OCTAL -\060\202\005\222\060\202\003\172\240\003\002\001\002\002\001\001 -\060\015\006\011\052\206\110\206\367\015\001\001\013\005\000\060 -\132\061\013\060\011\006\003\125\004\006\023\002\106\122\061\023 -\060\021\006\003\125\004\012\023\012\103\145\162\164\151\156\157 -\155\151\163\061\027\060\025\006\003\125\004\013\023\016\060\060 -\060\062\040\064\063\063\071\071\070\071\060\063\061\035\060\033 -\006\003\125\004\003\023\024\103\145\162\164\151\156\157\155\151 -\163\040\055\040\122\157\157\164\040\103\101\060\036\027\015\061 -\063\061\060\062\061\060\071\061\067\061\070\132\027\015\063\063 -\061\060\062\061\060\071\061\067\061\070\132\060\132\061\013\060 -\011\006\003\125\004\006\023\002\106\122\061\023\060\021\006\003 -\125\004\012\023\012\103\145\162\164\151\156\157\155\151\163\061 -\027\060\025\006\003\125\004\013\023\016\060\060\060\062\040\064 -\063\063\071\071\070\071\060\063\061\035\060\033\006\003\125\004 -\003\023\024\103\145\162\164\151\156\157\155\151\163\040\055\040 -\122\157\157\164\040\103\101\060\202\002\042\060\015\006\011\052 -\206\110\206\367\015\001\001\001\005\000\003\202\002\017\000\060 -\202\002\012\002\202\002\001\000\324\314\011\012\054\077\222\366 -\177\024\236\013\234\232\152\035\100\060\144\375\252\337\016\036 -\006\133\237\120\205\352\315\215\253\103\147\336\260\372\176\200 -\226\236\204\170\222\110\326\343\071\356\316\344\131\130\227\345 -\056\047\230\352\223\250\167\233\112\360\357\164\200\055\353\060 -\037\265\331\307\200\234\142\047\221\210\360\112\211\335\334\210 -\346\024\371\325\003\057\377\225\333\275\237\354\054\372\024\025 -\131\225\012\306\107\174\151\030\271\247\003\371\312\166\251\317 -\307\157\264\136\005\376\356\301\122\262\165\062\207\354\355\051 -\146\073\363\112\026\202\366\326\232\333\162\230\351\336\360\305 -\114\245\253\265\352\001\342\214\056\144\177\144\157\375\243\045 -\223\213\310\242\016\111\215\064\360\037\354\130\105\056\064\252 -\204\120\275\347\262\112\023\270\260\017\256\070\135\260\251\033 -\346\163\311\132\241\331\146\100\252\251\115\246\064\002\255\204 -\176\262\043\301\373\052\306\147\364\064\266\260\225\152\063\117 -\161\104\265\255\300\171\063\210\340\277\355\243\240\024\264\234 -\011\260\012\343\140\276\370\370\146\210\315\133\361\167\005\340 -\265\163\156\301\175\106\056\216\113\047\246\315\065\012\375\345 -\115\175\252\052\243\051\307\132\150\004\350\345\326\223\244\142 -\302\305\346\364\117\306\371\237\032\215\202\111\031\212\312\131 -\103\072\350\015\062\301\364\114\023\003\157\156\246\077\221\163 -\313\312\163\157\022\040\213\356\300\202\170\336\113\056\302\111 -\303\035\355\026\366\044\364\047\033\134\127\061\334\125\356\250 -\036\157\154\254\342\105\314\127\127\212\165\127\031\340\265\130 -\231\111\066\061\074\063\001\155\026\112\315\270\052\203\204\206 -\233\371\140\322\037\155\221\003\323\140\246\325\075\232\335\167 -\220\075\065\244\237\017\136\365\122\104\151\271\300\272\334\317 -\175\337\174\331\304\254\206\042\062\274\173\153\221\357\172\370 -\027\150\260\342\123\125\140\055\257\076\302\203\330\331\011\053 -\360\300\144\333\207\213\221\314\221\353\004\375\166\264\225\232 -\346\024\006\033\325\064\035\276\330\377\164\034\123\205\231\340 -\131\122\112\141\355\210\236\153\111\211\106\176\040\132\331\347 -\112\345\152\356\322\145\021\103\002\003\001\000\001\243\143\060 -\141\060\016\006\003\125\035\017\001\001\377\004\004\003\002\001 -\006\060\017\006\003\125\035\023\001\001\377\004\005\060\003\001 -\001\377\060\035\006\003\125\035\016\004\026\004\024\357\221\114 -\365\245\303\060\350\057\010\352\323\161\042\244\222\150\170\164 -\331\060\037\006\003\125\035\043\004\030\060\026\200\024\357\221 -\114\365\245\303\060\350\057\010\352\323\161\042\244\222\150\170 -\164\331\060\015\006\011\052\206\110\206\367\015\001\001\013\005 -\000\003\202\002\001\000\176\075\124\332\042\135\032\130\076\073 -\124\047\272\272\314\310\343\032\152\352\076\371\022\353\126\137 -\075\120\316\340\352\110\046\046\317\171\126\176\221\034\231\077 -\320\241\221\034\054\017\117\230\225\131\123\275\320\042\330\210 -\135\234\067\374\373\144\301\170\214\213\232\140\011\352\325\372 -\041\137\320\164\145\347\120\305\277\056\271\013\013\255\265\260 -\027\246\022\214\324\142\170\352\126\152\354\012\322\100\303\074 -\005\060\076\115\224\267\237\112\003\323\175\047\113\266\376\104 -\316\372\031\063\032\155\244\102\321\335\314\310\310\327\026\122 -\203\117\065\224\263\022\125\175\345\342\102\353\344\234\223\011 -\300\114\133\007\253\307\155\021\240\120\027\224\043\250\265\012 -\222\017\262\172\301\140\054\070\314\032\246\133\377\362\014\343 -\252\037\034\334\270\240\223\047\336\143\343\177\041\237\072\345 -\236\372\340\023\152\165\353\226\134\142\221\224\216\147\123\266 -\211\370\022\011\313\157\122\133\003\162\206\120\225\010\324\215 -\207\206\025\037\225\044\330\244\157\232\316\244\235\233\155\322 -\262\166\006\206\306\126\010\305\353\011\332\066\302\033\133\101 -\276\141\052\343\160\346\270\246\370\266\132\304\275\041\367\377 -\252\137\241\154\166\071\146\326\352\114\125\341\000\063\233\023 -\230\143\311\157\320\001\040\011\067\122\347\014\117\076\315\274 -\365\137\226\047\247\040\002\225\340\056\350\007\101\005\037\025 -\156\326\260\344\031\340\017\002\223\000\047\162\305\213\321\124 -\037\135\112\303\100\227\176\125\246\174\301\063\004\024\001\035 -\111\040\151\013\031\223\235\156\130\042\367\100\014\106\014\043 -\143\363\071\322\177\166\121\247\364\310\241\361\014\166\042\043 -\106\122\051\055\342\243\101\007\126\151\230\322\005\011\274\151 -\307\132\141\315\217\201\140\025\115\200\335\220\342\175\304\120 -\362\214\073\156\112\307\306\346\200\053\074\201\274\021\200\026 -\020\047\327\360\315\077\171\314\163\052\303\176\123\221\326\156 -\370\365\363\307\320\121\115\216\113\245\133\346\031\027\073\326 -\201\011\334\042\334\356\216\271\304\217\123\341\147\273\063\270 -\210\025\106\317\355\151\065\377\165\015\106\363\316\161\341\305 -\153\206\102\006\271\101 -END -CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE - -# Trust for "Certinomis - Root CA" -# Issuer: CN=Certinomis - Root CA,OU=0002 433998903,O=Certinomis,C=FR -# Serial Number: 1 (0x1) -# Subject: CN=Certinomis - Root CA,OU=0002 433998903,O=Certinomis,C=FR -# Not Valid Before: Mon Oct 21 09:17:18 2013 -# Not Valid After : Fri Oct 21 09:17:18 2033 -# Fingerprint (SHA-256): 2A:99:F5:BC:11:74:B7:3C:BB:1D:62:08:84:E0:1C:34:E5:1C:CB:39:78:DA:12:5F:0E:33:26:88:83:BF:41:58 -# Fingerprint (SHA1): 9D:70:BB:01:A5:A4:A0:18:11:2E:F7:1C:01:B9:32:C5:34:E7:88:A8 -CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "Certinomis - Root CA" -CKA_CERT_SHA1_HASH MULTILINE_OCTAL -\235\160\273\001\245\244\240\030\021\056\367\034\001\271\062\305 -\064\347\210\250 -END -CKA_CERT_MD5_HASH MULTILINE_OCTAL -\024\012\375\215\250\050\265\070\151\333\126\176\141\042\003\077 -END -CKA_ISSUER MULTILINE_OCTAL -\060\132\061\013\060\011\006\003\125\004\006\023\002\106\122\061 -\023\060\021\006\003\125\004\012\023\012\103\145\162\164\151\156 -\157\155\151\163\061\027\060\025\006\003\125\004\013\023\016\060 -\060\060\062\040\064\063\063\071\071\070\071\060\063\061\035\060 -\033\006\003\125\004\003\023\024\103\145\162\164\151\156\157\155 -\151\163\040\055\040\122\157\157\164\040\103\101 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\001\001 -END -CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST -CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE - # # Certificate "OISTE WISeKey Global Root GB CA" # @@ -18013,6 +17450,8 @@ CKA_VALUE MULTILINE_OCTAL \065\255\201\307\116\161\272\210\023 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "OISTE WISeKey Global Root GB CA" # Issuer: CN=OISTE WISeKey Global Root GB CA,OU=OISTE Foundation Endorsed,O=WISeKey,C=CH @@ -18148,6 +17587,8 @@ CKA_VALUE MULTILINE_OCTAL \326\040\036\343\163\267 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "SZAFIR ROOT CA2" # Issuer: CN=SZAFIR ROOT CA2,O=Krajowa Izba Rozliczeniowa S.A.,C=PL @@ -18326,6 +17767,8 @@ CKA_VALUE MULTILINE_OCTAL \016\265\271\276\044\217 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "Certum Trusted Network CA 2" # Issuer: CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL @@ -18513,6 +17956,8 @@ CKA_VALUE MULTILINE_OCTAL \276\157\152\247\365\054\102\355\062\255\266\041\236\276\274 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "Hellenic Academic and Research Institutions RootCA 2015" # Issuer: CN=Hellenic Academic and Research Institutions RootCA 2015,O=Hellenic Academic and Research Institutions Cert. Authority,L=Athens,C=GR @@ -18649,6 +18094,8 @@ CKA_VALUE MULTILINE_OCTAL \342\174\352\002\130\042\221 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "Hellenic Academic and Research Institutions ECC RootCA 2015" # Issuer: CN=Hellenic Academic and Research Institutions ECC RootCA 2015,O=Hellenic Academic and Research Institutions Cert. Authority,L=Athens,C=GR @@ -18818,6 +18265,8 @@ CKA_VALUE MULTILINE_OCTAL \376\216\036\127\242\315\100\235\176\142\042\332\336\030\047 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "ISRG Root X1" # Issuer: CN=ISRG Root X1,O=Internet Security Research Group,C=US @@ -18981,6 +18430,8 @@ CKA_VALUE MULTILINE_OCTAL \072\117\110\366\213\266\263 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "AC RAIZ FNMT-RCM" # Issuer: OU=AC RAIZ FNMT-RCM,O=FNMT-RCM,C=ES @@ -19106,6 +18557,8 @@ CKA_VALUE MULTILINE_OCTAL \304\220\276\361\271 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "Amazon Root CA 1" # Issuer: CN=Amazon Root CA 1,O=Amazon,C=US @@ -19263,6 +18716,8 @@ CKA_VALUE MULTILINE_OCTAL \340\373\011\140\154 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "Amazon Root CA 2" # Issuer: CN=Amazon Root CA 2,O=Amazon,C=US @@ -19363,6 +18818,8 @@ CKA_VALUE MULTILINE_OCTAL \143\044\110\034\337\060\175\325\150\073 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "Amazon Root CA 3" # Issuer: CN=Amazon Root CA 3,O=Amazon,C=US @@ -19467,6 +18924,8 @@ CKA_VALUE MULTILINE_OCTAL \012\166\324\245\274\020 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "Amazon Root CA 4" # Issuer: CN=Amazon Root CA 4,O=Amazon,C=US @@ -19634,6 +19093,8 @@ CKA_VALUE MULTILINE_OCTAL \045\307\043\200\203\012\353 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "LuxTrust Global Root 2" # Issuer: CN=LuxTrust Global Root 2,O=LuxTrust S.A.,C=LU @@ -19783,6 +19244,8 @@ CKA_VALUE MULTILINE_OCTAL \322\063\340\377\275\321\124\071\051\017 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "Symantec Class 1 Public Primary Certification Authority - G6" # Issuer: CN=Symantec Class 1 Public Primary Certification Authority - G6,OU=Symantec Trust Network,O=Symantec Corporation,C=US @@ -19937,6 +19400,8 @@ CKA_VALUE MULTILINE_OCTAL \157\374\132\344\202\125\131\257\061\251 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "Symantec Class 2 Public Primary Certification Authority - G6" # Issuer: CN=Symantec Class 2 Public Primary Certification Authority - G6,OU=Symantec Trust Network,O=Symantec Corporation,C=US @@ -20070,6 +19535,8 @@ CKA_VALUE MULTILINE_OCTAL \362\014\105\111\071\277\231\004\034\323\020\240 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "Symantec Class 1 Public Primary Certification Authority - G4" # Issuer: CN=Symantec Class 1 Public Primary Certification Authority - G4,OU=Symantec Trust Network,O=Symantec Corporation,C=US @@ -20203,6 +19670,8 @@ CKA_VALUE MULTILINE_OCTAL \051\246\330\107\331\240\226\030\333\362\105\263 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "Symantec Class 2 Public Primary Certification Authority - G4" # Issuer: CN=Symantec Class 2 Public Primary Certification Authority - G4,OU=Symantec Trust Network,O=Symantec Corporation,C=US @@ -20348,6 +19817,8 @@ CKA_VALUE MULTILINE_OCTAL \137\134 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "D-TRUST Root CA 3 2013" # Issuer: CN=D-TRUST Root CA 3 2013,O=D-Trust GmbH,C=DE @@ -20510,6 +19981,8 @@ CKA_VALUE MULTILINE_OCTAL \237\042\136\242\017\241\343 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1" # Issuer: CN=TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1,OU=Kamu Sertifikasyon Merkezi - Kamu SM,O=Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK,L=Gebze - Kocaeli,C=TR @@ -20685,6 +20158,8 @@ CKA_VALUE MULTILINE_OCTAL \250\267\101\154\007\335\275\074\206\227\057\322 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "GDCA TrustAUTH R5 ROOT" # Issuer: CN=GDCA TrustAUTH R5 ROOT,O="GUANG DONG CERTIFICATE AUTHORITY CO.,LTD.",C=CN @@ -20840,6 +20315,8 @@ CKA_VALUE MULTILINE_OCTAL \132\171\054\031 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "TrustCor RootCert CA-1" # Issuer: CN=TrustCor RootCert CA-1,OU=TrustCor Certificate Authority,O=TrustCor Systems S. de R.L.,L=Panama City,ST=Panama,C=PA @@ -21031,6 +20508,8 @@ CKA_VALUE MULTILINE_OCTAL \326\354\011 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "TrustCor RootCert CA-2" # Issuer: CN=TrustCor RootCert CA-2,OU=TrustCor Certificate Authority,O=TrustCor Systems S. de R.L.,L=Panama City,ST=Panama,C=PA @@ -21187,6 +20666,8 @@ CKA_VALUE MULTILINE_OCTAL \264\237\327\346 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "TrustCor ECA-1" # Issuer: CN=TrustCor ECA-1,OU=TrustCor Certificate Authority,O=TrustCor Systems S. de R.L.,L=Panama City,ST=Panama,C=PA @@ -21366,6 +20847,8 @@ CKA_VALUE MULTILINE_OCTAL \271 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "SSL.com Root Certification Authority RSA" # Issuer: CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US @@ -21490,6 +20973,8 @@ CKA_VALUE MULTILINE_OCTAL \145 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "SSL.com Root Certification Authority ECC" # Issuer: CN=SSL.com Root Certification Authority ECC,O=SSL Corporation,L=Houston,ST=Texas,C=US @@ -21669,6 +21154,8 @@ CKA_VALUE MULTILINE_OCTAL \040\022\215\264\254\127\261\105\143\241\254\166\251\302\373 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "SSL.com EV Root Certification Authority RSA R2" # Issuer: CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US @@ -21796,6 +21283,8 @@ CKA_VALUE MULTILINE_OCTAL \371\007\340\142\232\214\134\112 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "SSL.com EV Root Certification Authority ECC" # Issuer: CN=SSL.com EV Root Certification Authority ECC,O=SSL Corporation,L=Houston,ST=Texas,C=US @@ -21962,6 +21451,8 @@ CKA_VALUE MULTILINE_OCTAL \147\203\005\132\311\244\020 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "GlobalSign Root CA - R6" # Issuer: CN=GlobalSign,O=GlobalSign,OU=GlobalSign Root CA - R6 @@ -22079,6 +21570,8 @@ CKA_VALUE MULTILINE_OCTAL \242\355\357\173\260\200\117\130\017\113\123\071\275 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "OISTE WISeKey Global Root GC CA" # Issuer: CN=OISTE WISeKey Global Root GC CA,OU=OISTE Foundation Endorsed,O=WISeKey,C=CH @@ -22242,6 +21735,8 @@ CKA_VALUE MULTILINE_OCTAL \361\306\143\107\125\034\272\245\010\121\165\246\110\045 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "GTS Root R1" # Issuer: CN=GTS Root R1,O=Google Trust Services LLC,C=US @@ -22403,6 +21898,8 @@ CKA_VALUE MULTILINE_OCTAL \267\375\054\010\122\117\202\335\243\360\324\206\011\002 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "GTS Root R2" # Issuer: CN=GTS Root R2,O=Google Trust Services LLC,C=US @@ -22511,6 +22008,8 @@ CKA_VALUE MULTILINE_OCTAL \232\051\252\226\323\203\043\311\244\173\141\263\314\002\350\135 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "GTS Root R3" # Issuer: CN=GTS Root R3,O=Google Trust Services LLC,C=US @@ -22619,6 +22118,8 @@ CKA_VALUE MULTILINE_OCTAL \161\314\362\260\115\326\376\231\310\224\251\165\242\343 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "GTS Root R4" # Issuer: CN=GTS Root R4,O=Google Trust Services LLC,C=US @@ -22777,6 +22278,8 @@ CKA_VALUE MULTILINE_OCTAL \120\037\212\373\006\365\302\031\360\320 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "UCA Global G2 Root" # Issuer: CN=UCA Global G2 Root,O=UniTrust,C=CN @@ -22937,6 +22440,8 @@ CKA_VALUE MULTILINE_OCTAL \177\275\145\040\262\311\301\053\166\030\166\237\126\261 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "UCA Extended Validation Root" # Issuer: CN=UCA Extended Validation Root,O=UniTrust,C=CN @@ -23116,6 +22621,8 @@ CKA_VALUE MULTILINE_OCTAL \045\124\377\242\332\117\212\141\071\136\256\075\112\214\275 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "Certigna Root CA" # Issuer: CN=Certigna Root CA,OU=0002 48146308100036,O=Dhimyotis,C=FR @@ -23253,6 +22760,8 @@ CKA_VALUE MULTILINE_OCTAL \210\336\272\314\037\200\176\112 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "emSign Root CA - G1" # Issuer: CN=emSign Root CA - G1,O=eMudhra Technologies Limited,OU=emSign PKI,C=IN @@ -23370,6 +22879,8 @@ CKA_VALUE MULTILINE_OCTAL \054\243 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "emSign ECC Root CA - G3" # Issuer: CN=emSign ECC Root CA - G3,O=eMudhra Technologies Limited,OU=emSign PKI,C=IN @@ -23503,6 +23014,8 @@ CKA_VALUE MULTILINE_OCTAL \361\337\312\276\203\015\102 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "emSign Root CA - C1" # Issuer: CN=emSign Root CA - C1,O=eMudhra Inc,OU=emSign PKI,C=US @@ -23614,6 +23127,8 @@ CKA_VALUE MULTILINE_OCTAL \276\201\007\125\060\120\040\024\365\127\070\012\250\061\121 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "emSign ECC Root CA - C3" # Issuer: CN=emSign ECC Root CA - C3,O=eMudhra Inc,OU=emSign PKI,C=US @@ -23789,6 +23304,8 @@ CKA_VALUE MULTILINE_OCTAL \232\233\364 END CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE # Trust for "Hongkong Post Root CA 3" # Issuer: CN=Hongkong Post Root CA 3,O=Hongkong Post,L=Hong Kong,ST=Hong Kong,C=HK @@ -23828,3 +23345,203 @@ CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE + +# +# Certificate "Entrust Root Certification Authority - G4" +# +# Issuer: CN=Entrust Root Certification Authority - G4,OU="(c) 2015 Entrust, Inc. - for authorized use only",OU=See www.entrust.net/legal-terms,O="Entrust, Inc.",C=US +# Serial Number:00:d9:b5:43:7f:af:a9:39:0f:00:00:00:00:55:65:ad:58 +# Subject: CN=Entrust Root Certification Authority - G4,OU="(c) 2015 Entrust, Inc. - for authorized use only",OU=See www.entrust.net/legal-terms,O="Entrust, Inc.",C=US +# Not Valid Before: Wed May 27 11:11:16 2015 +# Not Valid After : Sun Dec 27 11:41:16 2037 +# Fingerprint (SHA-256): DB:35:17:D1:F6:73:2A:2D:5A:B9:7C:53:3E:C7:07:79:EE:32:70:A6:2F:B4:AC:42:38:37:24:60:E6:F0:1E:88 +# Fingerprint (SHA1): 14:88:4E:86:26:37:B0:26:AF:59:62:5C:40:77:EC:35:29:BA:96:01 +CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE +CKA_TOKEN CK_BBOOL CK_TRUE +CKA_PRIVATE CK_BBOOL CK_FALSE +CKA_MODIFIABLE CK_BBOOL CK_FALSE +CKA_LABEL UTF8 "Entrust Root Certification Authority - G4" +CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 +CKA_SUBJECT MULTILINE_OCTAL +\060\201\276\061\013\060\011\006\003\125\004\006\023\002\125\123 +\061\026\060\024\006\003\125\004\012\023\015\105\156\164\162\165 +\163\164\054\040\111\156\143\056\061\050\060\046\006\003\125\004 +\013\023\037\123\145\145\040\167\167\167\056\145\156\164\162\165 +\163\164\056\156\145\164\057\154\145\147\141\154\055\164\145\162 +\155\163\061\071\060\067\006\003\125\004\013\023\060\050\143\051 +\040\062\060\061\065\040\105\156\164\162\165\163\164\054\040\111 +\156\143\056\040\055\040\146\157\162\040\141\165\164\150\157\162 +\151\172\145\144\040\165\163\145\040\157\156\154\171\061\062\060 +\060\006\003\125\004\003\023\051\105\156\164\162\165\163\164\040 +\122\157\157\164\040\103\145\162\164\151\146\151\143\141\164\151 +\157\156\040\101\165\164\150\157\162\151\164\171\040\055\040\107 +\064 +END +CKA_ID UTF8 "0" +CKA_ISSUER MULTILINE_OCTAL +\060\201\276\061\013\060\011\006\003\125\004\006\023\002\125\123 +\061\026\060\024\006\003\125\004\012\023\015\105\156\164\162\165 +\163\164\054\040\111\156\143\056\061\050\060\046\006\003\125\004 +\013\023\037\123\145\145\040\167\167\167\056\145\156\164\162\165 +\163\164\056\156\145\164\057\154\145\147\141\154\055\164\145\162 +\155\163\061\071\060\067\006\003\125\004\013\023\060\050\143\051 +\040\062\060\061\065\040\105\156\164\162\165\163\164\054\040\111 +\156\143\056\040\055\040\146\157\162\040\141\165\164\150\157\162 +\151\172\145\144\040\165\163\145\040\157\156\154\171\061\062\060 +\060\006\003\125\004\003\023\051\105\156\164\162\165\163\164\040 +\122\157\157\164\040\103\145\162\164\151\146\151\143\141\164\151 +\157\156\040\101\165\164\150\157\162\151\164\171\040\055\040\107 +\064 +END +CKA_SERIAL_NUMBER MULTILINE_OCTAL +\002\021\000\331\265\103\177\257\251\071\017\000\000\000\000\125 +\145\255\130 +END +CKA_VALUE MULTILINE_OCTAL +\060\202\006\113\060\202\004\063\240\003\002\001\002\002\021\000 +\331\265\103\177\257\251\071\017\000\000\000\000\125\145\255\130 +\060\015\006\011\052\206\110\206\367\015\001\001\013\005\000\060 +\201\276\061\013\060\011\006\003\125\004\006\023\002\125\123\061 +\026\060\024\006\003\125\004\012\023\015\105\156\164\162\165\163 +\164\054\040\111\156\143\056\061\050\060\046\006\003\125\004\013 +\023\037\123\145\145\040\167\167\167\056\145\156\164\162\165\163 +\164\056\156\145\164\057\154\145\147\141\154\055\164\145\162\155 +\163\061\071\060\067\006\003\125\004\013\023\060\050\143\051\040 +\062\060\061\065\040\105\156\164\162\165\163\164\054\040\111\156 +\143\056\040\055\040\146\157\162\040\141\165\164\150\157\162\151 +\172\145\144\040\165\163\145\040\157\156\154\171\061\062\060\060 +\006\003\125\004\003\023\051\105\156\164\162\165\163\164\040\122 +\157\157\164\040\103\145\162\164\151\146\151\143\141\164\151\157 +\156\040\101\165\164\150\157\162\151\164\171\040\055\040\107\064 +\060\036\027\015\061\065\060\065\062\067\061\061\061\061\061\066 +\132\027\015\063\067\061\062\062\067\061\061\064\061\061\066\132 +\060\201\276\061\013\060\011\006\003\125\004\006\023\002\125\123 +\061\026\060\024\006\003\125\004\012\023\015\105\156\164\162\165 +\163\164\054\040\111\156\143\056\061\050\060\046\006\003\125\004 +\013\023\037\123\145\145\040\167\167\167\056\145\156\164\162\165 +\163\164\056\156\145\164\057\154\145\147\141\154\055\164\145\162 +\155\163\061\071\060\067\006\003\125\004\013\023\060\050\143\051 +\040\062\060\061\065\040\105\156\164\162\165\163\164\054\040\111 +\156\143\056\040\055\040\146\157\162\040\141\165\164\150\157\162 +\151\172\145\144\040\165\163\145\040\157\156\154\171\061\062\060 +\060\006\003\125\004\003\023\051\105\156\164\162\165\163\164\040 +\122\157\157\164\040\103\145\162\164\151\146\151\143\141\164\151 +\157\156\040\101\165\164\150\157\162\151\164\171\040\055\040\107 +\064\060\202\002\042\060\015\006\011\052\206\110\206\367\015\001 +\001\001\005\000\003\202\002\017\000\060\202\002\012\002\202\002 +\001\000\261\354\054\102\356\342\321\060\377\245\222\107\342\055 +\303\272\144\227\155\312\367\015\265\131\301\263\313\250\150\031 +\330\257\204\155\060\160\135\176\363\056\322\123\231\341\376\037 +\136\331\110\257\135\023\215\333\377\143\063\115\323\000\002\274 +\304\370\321\006\010\224\171\130\212\025\336\051\263\375\375\304 +\117\350\252\342\240\073\171\315\277\153\103\062\335\331\164\020 +\271\367\364\150\324\273\320\207\325\252\113\212\052\157\052\004 +\265\262\246\307\240\172\346\110\253\322\321\131\314\326\176\043 +\346\227\154\360\102\345\334\121\113\025\101\355\111\112\311\336 +\020\227\326\166\301\357\245\265\066\024\227\065\330\170\042\065 +\122\357\103\275\333\047\333\141\126\202\064\334\313\210\140\014 +\013\132\345\054\001\306\124\257\327\252\301\020\173\322\005\132 +\270\100\236\206\247\303\220\206\002\126\122\011\172\234\322\047 +\202\123\112\145\122\152\365\074\347\250\362\234\257\213\275\323 +\016\324\324\136\156\207\236\152\075\105\035\321\135\033\364\351 +\012\254\140\231\373\211\264\377\230\054\317\174\035\351\002\252 +\004\232\036\270\334\210\156\045\263\154\146\367\074\220\363\127 +\301\263\057\365\155\362\373\312\241\370\051\235\106\213\263\152 +\366\346\147\007\276\054\147\012\052\037\132\262\076\127\304\323 +\041\041\143\145\122\221\033\261\231\216\171\176\346\353\215\000 +\331\132\252\352\163\350\244\202\002\107\226\376\133\216\124\141 +\243\353\057\113\060\260\213\043\165\162\174\041\074\310\366\361 +\164\324\034\173\243\005\125\356\273\115\073\062\276\232\167\146 +\236\254\151\220\042\007\037\141\072\226\276\345\232\117\314\005 +\074\050\131\323\301\014\124\250\131\141\275\310\162\114\350\334 +\237\207\177\275\234\110\066\136\225\243\016\271\070\044\125\374 +\165\146\353\002\343\010\064\051\112\306\343\053\057\063\240\332 +\243\206\245\022\227\375\200\053\332\024\102\343\222\275\076\362 +\135\136\147\164\056\034\210\107\051\064\137\342\062\250\234\045 +\067\214\272\230\000\227\213\111\226\036\375\045\212\254\334\332 +\330\135\164\156\146\260\377\104\337\241\030\306\276\110\057\067 +\224\170\370\225\112\077\177\023\136\135\131\375\164\206\103\143 +\163\111\002\003\001\000\001\243\102\060\100\060\017\006\003\125 +\035\023\001\001\377\004\005\060\003\001\001\377\060\016\006\003 +\125\035\017\001\001\377\004\004\003\002\001\006\060\035\006\003 +\125\035\016\004\026\004\024\237\070\304\126\043\303\071\350\240 +\161\154\350\124\114\344\350\072\261\277\147\060\015\006\011\052 +\206\110\206\367\015\001\001\013\005\000\003\202\002\001\000\022 +\345\102\246\173\213\017\014\344\106\245\266\140\100\207\214\045 +\176\255\270\150\056\133\306\100\166\074\003\370\311\131\364\363 +\253\142\316\020\215\264\132\144\214\150\300\260\162\103\064\322 +\033\013\366\054\123\322\312\220\113\206\146\374\252\203\042\364 +\213\032\157\046\110\254\166\167\010\277\305\230\134\364\046\211 +\236\173\303\271\144\062\001\177\323\303\335\130\155\354\261\253 +\204\125\164\167\204\004\047\122\153\206\114\316\335\271\145\377 +\326\306\136\237\232\020\231\113\165\152\376\152\351\227\040\344 +\344\166\172\306\320\044\252\220\315\040\220\272\107\144\373\177 +\007\263\123\170\265\012\142\362\163\103\316\101\053\201\152\056 +\205\026\224\123\324\153\137\162\042\253\121\055\102\325\000\234 +\231\277\336\273\224\073\127\375\232\365\206\313\126\073\133\210 +\001\345\174\050\113\003\371\111\203\174\262\177\174\343\355\216 +\241\177\140\123\216\125\235\120\064\022\017\267\227\173\154\207 +\112\104\347\365\155\354\200\067\360\130\031\156\112\150\166\360 +\037\222\344\352\265\222\323\141\121\020\013\255\247\331\137\307 +\137\334\037\243\134\214\241\176\233\267\236\323\126\157\146\136 +\007\226\040\355\013\164\373\146\116\213\021\025\351\201\111\176 +\157\260\324\120\177\042\327\137\145\002\015\246\364\205\036\330 +\256\006\113\112\247\322\061\146\302\370\316\345\010\246\244\002 +\226\104\150\127\304\325\063\317\031\057\024\304\224\034\173\244 +\331\360\237\016\261\200\342\321\236\021\144\251\210\021\072\166 +\202\345\142\302\200\330\244\203\355\223\357\174\057\220\260\062 +\114\226\025\150\110\122\324\231\010\300\044\350\034\343\263\245 +\041\016\222\300\220\037\317\040\137\312\073\070\307\267\155\072 +\363\346\104\270\016\061\153\210\216\160\353\234\027\122\250\101 +\224\056\207\266\347\246\022\305\165\337\133\300\012\156\173\244 +\344\136\206\371\066\224\337\167\303\351\015\300\071\361\171\273 +\106\216\253\103\131\047\267\040\273\043\351\126\100\041\354\061 +\075\145\252\103\362\075\337\160\104\341\272\115\046\020\073\230 +\237\363\310\216\033\070\126\041\152\121\223\323\221\312\106\332 +\211\267\075\123\203\054\010\037\213\217\123\335\377\254\037 +END +CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE + +# Trust for "Entrust Root Certification Authority - G4" +# Issuer: CN=Entrust Root Certification Authority - G4,OU="(c) 2015 Entrust, Inc. - for authorized use only",OU=See www.entrust.net/legal-terms,O="Entrust, Inc.",C=US +# Serial Number:00:d9:b5:43:7f:af:a9:39:0f:00:00:00:00:55:65:ad:58 +# Subject: CN=Entrust Root Certification Authority - G4,OU="(c) 2015 Entrust, Inc. - for authorized use only",OU=See www.entrust.net/legal-terms,O="Entrust, Inc.",C=US +# Not Valid Before: Wed May 27 11:11:16 2015 +# Not Valid After : Sun Dec 27 11:41:16 2037 +# Fingerprint (SHA-256): DB:35:17:D1:F6:73:2A:2D:5A:B9:7C:53:3E:C7:07:79:EE:32:70:A6:2F:B4:AC:42:38:37:24:60:E6:F0:1E:88 +# Fingerprint (SHA1): 14:88:4E:86:26:37:B0:26:AF:59:62:5C:40:77:EC:35:29:BA:96:01 +CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST +CKA_TOKEN CK_BBOOL CK_TRUE +CKA_PRIVATE CK_BBOOL CK_FALSE +CKA_MODIFIABLE CK_BBOOL CK_FALSE +CKA_LABEL UTF8 "Entrust Root Certification Authority - G4" +CKA_CERT_SHA1_HASH MULTILINE_OCTAL +\024\210\116\206\046\067\260\046\257\131\142\134\100\167\354\065 +\051\272\226\001 +END +CKA_CERT_MD5_HASH MULTILINE_OCTAL +\211\123\361\203\043\267\174\216\005\361\214\161\070\116\037\210 +END +CKA_ISSUER MULTILINE_OCTAL +\060\201\276\061\013\060\011\006\003\125\004\006\023\002\125\123 +\061\026\060\024\006\003\125\004\012\023\015\105\156\164\162\165 +\163\164\054\040\111\156\143\056\061\050\060\046\006\003\125\004 +\013\023\037\123\145\145\040\167\167\167\056\145\156\164\162\165 +\163\164\056\156\145\164\057\154\145\147\141\154\055\164\145\162 +\155\163\061\071\060\067\006\003\125\004\013\023\060\050\143\051 +\040\062\060\061\065\040\105\156\164\162\165\163\164\054\040\111 +\156\143\056\040\055\040\146\157\162\040\141\165\164\150\157\162 +\151\172\145\144\040\165\163\145\040\157\156\154\171\061\062\060 +\060\006\003\125\004\003\023\051\105\156\164\162\165\163\164\040 +\122\157\157\164\040\103\145\162\164\151\146\151\143\141\164\151 +\157\156\040\101\165\164\150\157\162\151\164\171\040\055\040\107 +\064 +END +CKA_SERIAL_NUMBER MULTILINE_OCTAL +\002\021\000\331\265\103\177\257\251\071\017\000\000\000\000\125 +\145\255\130 +END +CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST +CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE -- 2.16.4

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development November 2019