Bug#558283: nss: please add a certificate package

[Philipp Kern]

Package: nss
Version: 3.12.4-1
Severity: wishlist

Hi Mike,

attached is a proposal for a ca-certificates-nss package.  I had initially
thought to name it ca-certificates-mozilla, but considering that we add some
certificates through patches it looked a bit like a lie to do it like this.

Currently I fetch certdata.txt myself into the ca-certificates package and
then explode it into many files.  I feel that it should instead be done in
the data source directly.  Thus I copied the script to debian/.

I implemented a blacklist because the way we organize certificates in the
file system does not support negative trust values, thus the one currently
in certdata.txt is blocked from the export.

I would revamp ca-certificates in a similar way with subpackages putting
certificates into /usr/share/ca-certificates/<suffix> and I then intend to
recommend ca-certificates-nss, which should provide us with the basic set
almost everyone needs.

Any input on this would be cool.  :-)

Kind regards,
Philipp Kern