# HG changeset patch
# User Paul Aurich <paul@darkrain42.org>
# Date 1302384960 0
# Node ID 13b8f684ea8a6174281298e9ceb0864cb0e96571
# Parent  60c0790a1f97c531eeab5c06fae69b5c0630fcbb
Add the DigiCert High Assurance CA-3 intermediate CA.

This is needed for Facebook's XMPP interface, where they just turned
on StartTLS, but only return the entity cert. :(

diff -r 60c0790a1f97 -r 13b8f684ea8a ChangeLog
--- a/ChangeLog	Fri Apr 08 01:22:46 2011 +0000
+++ b/ChangeLog	Sat Apr 09 21:36:00 2011 +0000
@@ -4,6 +4,8 @@
 	General:
 	* Implement simple silence suppression for voice calls, preventing wasted
 	  bandwidth for silent periods during a call. (Jakub Adam) (half of #13180)
+	* Added the DigiCert High Assurance CA-3 intermediate CA, needed for
+	  validation of the Facebook XMPP interface's certificate.
 
 	Pidgin:
 	* Duplicate code cleanup.  (Gabriel Schulhof) (#10599)
diff -r 60c0790a1f97 -r 13b8f684ea8a pidgin/win32/nsis/pidgin-installer.nsi
--- a/pidgin/win32/nsis/pidgin-installer.nsi	Fri Apr 08 01:22:46 2011 +0000
+++ b/pidgin/win32/nsis/pidgin-installer.nsi	Sat Apr 09 21:36:00 2011 +0000
@@ -536,6 +536,7 @@
     Delete "$INSTDIR\ca-certs\CAcert_Class3.pem"
     Delete "$INSTDIR\ca-certs\CAcert_Root.pem"
     Delete "$INSTDIR\ca-certs\Deutsche_Telekom_Root_CA_2.pem"
+    Delete "$INSTDIR\ca-certs\DigiCertHighAssuranceCA-3.pem"
     Delete "$INSTDIR\ca-certs\Entrust.net_Secure_Server_CA.pem"
     Delete "$INSTDIR\ca-certs\Equifax_Secure_CA.pem"
     Delete "$INSTDIR\ca-certs\Equifax_Secure_Global_eBusiness_CA-1.pem"
diff -r 60c0790a1f97 -r 13b8f684ea8a share/ca-certs/Makefile.am
--- a/share/ca-certs/Makefile.am	Fri Apr 08 01:22:46 2011 +0000
+++ b/share/ca-certs/Makefile.am	Sat Apr 09 21:36:00 2011 +0000
@@ -22,6 +22,7 @@
 
 EXTRA_CERTS = \
 		AOL_Member_CA.pem \
+		DigiCertHighAssuranceCA-3.pem \
 		Microsoft_Internet_Authority.pem \
 		Microsoft_Internet_Authority_2010.pem \
 		Microsoft_Secure_Server_Authority.pem \