diff --git a/Mac/AntiChinaCerts.sh b/Mac/AntiChinaCerts.sh index a9ddb0173d99d57cc50de8755653ac34dca40cf9..d527c66dc5ada4a3c2fed3572c8478149d96f3ee 100755 --- a/Mac/AntiChinaCerts.sh +++ b/Mac/AntiChinaCerts.sh @@ -1,2 +1,2 @@ #!/usr/bin/env bash -security trust-settings-import -d trust-settings.plist +security trust-settings-import -d Trust_Settings.plist diff --git a/Mac/trust-settings.plist b/Mac/Trust_Settings.plist similarity index 100% rename from Mac/trust-settings.plist rename to Mac/Trust_Settings.plist diff --git a/README.md b/README.md index 19e46a4b78e82efad7b024f801e409253c697db5..f7a59705b63e990d55e4d3085032cf5ba73f8f41 100644 --- a/README.md +++ b/README.md @@ -3,42 +3,44 @@ Anti China Certifications. ### 更新日期 -**2014-09-21** +**2014-10-03** ### 方法 * Windows - * 直接选择è¿è¡Œåœ¨ Windows ç›®å½•é‡Œçš„æ‰¹å¤„ç† - * Base 版本直接è¿è¡Œ AntiChinaCerts_Base.bat 而 Extended 版本直接è¿è¡Œ AntiChinaCerts_Extended.bat - Extended 版本扩展了 Base 版本,具体扩展的列表å‚è§æ¶‰åŠçš„CAæ ¹è¯ä¹¦çš„ä»‹ç» - * æ“作完毕建议清空所有æµè§ˆå™¨æ•°æ®å’Œç³»ç»Ÿç¼“å˜ï¼Œå¹¶é‡å¯ç½‘络连接 + * 直接选择è¿è¡Œåœ¨ Windows 目录里的批处ç†ï¼Œå»ºè®® **使用 Extended 版本** + * Base 版本直接è¿è¡Œ AntiChinaCerts_Base.bat 而 Extended 版本直接è¿è¡Œ AntiChinaCerts_Extended.bat ä¹Ÿå³ Extended 版本扩展了 Base 版本,而 AntiChinaCerts_All.bat ä¹Ÿå³ All 版本则包å«äº†æ‰€æœ‰åˆ—表ä¸çš„è¯ä¹¦ã€‚å…·ä½“çš„æ ¹è¯ä¹¦åˆ—表å‚è§æ¶‰åŠçš„CAæ ¹è¯ä¹¦çš„ä»‹ç» + * æ“作完毕建议清空所有æµè§ˆå™¨æ•°æ®å’Œç³»ç»Ÿç¼“å˜ï¼Œå¹¶é‡å¯ç½‘络连接 * Linux * 以 Debian 系列为例å,其它 Linux å‘行版æ“作方法å‚è§å…¶å®˜æ–¹è¯´æ˜Ž - * 打开终端并执行 `sudo dpkg-reconfigure ca-certificates` - * 在列表ä¸æ‰¾åˆ°å¹¶é€‰æ‹©éœ€è¦ç¦ç”¨çš„è¯ä¹¦ï¼ŒæŒ‰ç©ºæ ¼é”®å–消对该è¯ä¹¦çš„ä¿¡ä»» - * 对所有需è¦ç¦ç”¨çš„è¯ä¹¦æ‰§è¡Œå®Œä¸Šæ¥æ“作åŽå›žè½¦ç¡®å®š - * æ“作完毕建议清空所有æµè§ˆå™¨æ•°æ®å’Œç³»ç»Ÿç¼“å˜ï¼Œå¹¶é‡å¯ç½‘络连接 + * 打开终端并执行 `sudo dpkg-reconfigure ca-certificates` + * 在列表ä¸æ‰¾åˆ°å¹¶é€‰æ‹©éœ€è¦ç¦ç”¨çš„è¯ä¹¦ï¼ŒæŒ‰ç©ºæ ¼é”®å–消对该è¯ä¹¦çš„ä¿¡ä»» + * 对所有需è¦ç¦ç”¨çš„è¯ä¹¦æ‰§è¡Œå®Œä¸Šæ¥æ“作åŽå›žè½¦ç¡®å®š + * æ“作完毕建议清空所有æµè§ˆå™¨æ•°æ®å’Œç³»ç»Ÿç¼“å˜ï¼Œå¹¶é‡å¯ç½‘络连接 * Mac - * `实用工具` - `钥匙串访问` - 在 `钥匙串` ä¸é€‰æ‹© `ç³»ç»Ÿæ ¹è¯ä¹¦` - * 点击进入需è¦ç¦ç”¨çš„è¯ä¹¦ï¼Œå±•å¼€ `ä¿¡ä»»` æ ‡ç¾å¹¶åœ¨ `使用æ¤è¯ä¹¦æ—¶` 下拉èœå•é€‰æ‹© `æ°¸ä¸ä¿¡ä»»` 并关é—å³å¯ - * æ“作完毕建议清空所有æµè§ˆå™¨æ•°æ®å’Œç³»ç»Ÿç¼“å˜ï¼Œå¹¶é‡å¯ç½‘络连接 + * 使用自动脚本 + * 直接选择è¿è¡Œåœ¨ Mac 目录里的è¿è¡Œ `AntiChinaCerts.sh` å³å¯ + * 手动æ“作 + * `实用工具` - `钥匙串访问` - 在 `钥匙串` ä¸é€‰æ‹© `ç³»ç»Ÿæ ¹è¯ä¹¦` + * 点击进入需è¦ç¦ç”¨çš„è¯ä¹¦ï¼Œå±•å¼€ `ä¿¡ä»»` æ ‡ç¾å¹¶åœ¨ `使用æ¤è¯ä¹¦æ—¶` 下拉èœå•é€‰æ‹© `æ°¸ä¸ä¿¡ä»»` 并关é—å³å¯ + * æ“作完毕建议清空所有æµè§ˆå™¨æ•°æ®å’Œç³»ç»Ÿç¼“å˜ï¼Œå¹¶é‡å¯ç½‘络连接 * Firefox * `工具` - `选项` - `高级` - `è¯ä¹¦` - `查看è¯ä¹¦` - * 点击进入需è¦ç¦ç”¨çš„è¯ä¹¦ï¼Œç›´æŽ¥ç‚¹å‡» `åˆ é™¤æˆ–ä¸ä¿¡ä»»` 按钮å³å¯ - * æ“作完毕建议清空所有æµè§ˆå™¨æ•°æ®å’Œç³»ç»Ÿç¼“å˜ï¼Œå¹¶é‡å¯ç½‘络连接 + * 点击进入需è¦ç¦ç”¨çš„è¯ä¹¦ï¼Œç›´æŽ¥ç‚¹å‡» `åˆ é™¤æˆ–ä¸ä¿¡ä»»` 按钮å³å¯ + * æ“作完毕建议清空所有æµè§ˆå™¨æ•°æ®å’Œç³»ç»Ÿç¼“å˜ï¼Œå¹¶é‡å¯ç½‘络连接 * Android * `设置` - `安全` - `å—信任的å‡æ®(显示å—信任的CAè¯ä¹¦)` - * 点击进入需è¦ç¦ç”¨çš„è¯ä¹¦å¹¶ä¸‹æ‹‰åˆ°æœ€ä¸‹é¢ï¼Œç‚¹å‡» `ç¦ç”¨` 按钮å³å¯ - * æ“作完毕建议清空所有æµè§ˆå™¨æ•°æ®å’Œç³»ç»Ÿç¼“å˜ï¼Œå¹¶é‡å¯ç½‘络连接 + * 点击进入需è¦ç¦ç”¨çš„è¯ä¹¦å¹¶ä¸‹æ‹‰åˆ°æœ€ä¸‹é¢ï¼Œç‚¹å‡» `ç¦ç”¨` 按钮å³å¯ + * æ“作完毕建议清空所有æµè§ˆå™¨æ•°æ®å’Œç³»ç»Ÿç¼“å˜ï¼Œå¹¶é‡å¯ç½‘络连接 * iOS * 安装 Apple 官方的 iPhone Configuration Utility/iPCU 软件,并在当å‰ç³»ç»Ÿä¸Šå¯¼å…¥è¯ä¹¦å¹¶å®‰è£… iPhone é…置实用工具 - * 左侧é¢æ¿ç‚¹å‡» `é…ç½®æ述文件` - `新建` 在 `通用` 里设置好åç§°å’Œæ ‡è¯†ç¬¦åˆ›å»ºæ述文件 - 在 `å‡è¯` 里点击 `é…ç½®` - 选择è¯ä¹¦å¹¶è®¾ç½®ä¸ºç¦ç”¨ + * 左侧é¢æ¿ç‚¹å‡» `é…ç½®æ述文件` - `新建` 在 `通用` 里设置好åç§°å’Œæ ‡è¯†ç¬¦åˆ›å»ºæ述文件 - 在 `å‡è¯` 里点击 `é…ç½®` - 选择è¯ä¹¦å¹¶è®¾ç½®ä¸ºç¦ç”¨ * 将设备连接到电脑 - 左侧é¢æ¿ç‚¹å‡» `设备` 下的对应设备 - 选择 `é…ç½®æ述文件` æ ‡ç¾é¡µ - 安装刚æ‰æ–°å»ºçš„æ述文件以安装æ述文件到设备 - * æ“作完毕建议清空所有æµè§ˆå™¨æ•°æ®å’Œç³»ç»Ÿç¼“å˜ï¼Œå¹¶é‡å¯ç½‘络连接 + * æ“作完毕建议清空所有æµè§ˆå™¨æ•°æ®å’Œç³»ç»Ÿç¼“å˜ï¼Œå¹¶é‡å¯ç½‘络连接 ### 说明 * Windows * 本工具作用是先将列表ä¸çš„CAæ ¹è¯ä¹¦åˆ 掉,然åŽå†å°†è¿™äº›è¯ä¹¦æ·»åŠ 到CRLè¯ä¹¦åŠé”€åˆ—表ä¸ï¼ŒCRLè¯ä¹¦åŠé”€åˆ—表ä¸çš„è¯ä¹¦æ‰ä¼šè¢«å½»åº•ç¦ç”¨ - * Extended 版本为 Base ç‰ˆæœ¬æ‰©å±•ï¼Œæ·»åŠ å¦å¤–å‡ ä¸ªCAæ ¹è¯ä¹¦ - * 大部分 Windows 的程åºå’Œæµè§ˆå™¨ Chrome ä»¥åŠ Opera 亦使用 Windows 系统 + * 大部分 Windows 的程åºå’Œæµè§ˆå™¨ Chrome ä»¥åŠ Opera 亦使用 Windows 系统 * Linux * ä¸åŒå‘行版系统本身的CAæ ¹è¯ä¹¦åˆ—表å¯èƒ½æœ‰æ‰€ä¸åŒï¼Œå…·ä½“需è¦æŒ‰å®žé™…情况æ“作 * Mac @@ -47,18 +49,17 @@ Anti China Certifications. * 32 版本自带有 CNNIC ROOT ä»¥åŠ China Internet Network Information Center EV Certificates Root * Android * 4.4.4 版本自带有 CNNIC ROOT ä»¥åŠ China Internet Network Information Center EV Certificates Root - * 4.4.4 版本之å‰çš„版本å¯èƒ½è‡ªå¸¦æœ‰ CNNIC ROOT + * 4.4.4 版本之å‰çš„版本å¯èƒ½è‡ªå¸¦æœ‰ CNNIC ROOT ### æ³¨æ„ * Windows * **å°†CAæ ¹è¯ä¹¦ç›´æŽ¥åˆ 除没有任何作用,下次访问使用该è¯ä¹¦çš„网站时系统åˆä¼šé‡æ–°è‡ªåŠ¨è”ç½‘æ·»åŠ ã€‚åŒæ—¶ç”±äºŽæ¯ä¸ªç”¨æˆ·ä½¿ç”¨ç‹¬ç«‹çš„è¯ä¹¦åˆ—表,所以需è¦æ‰€æœ‰ç”¨æˆ·éƒ½è¿è¡Œä¸€æ¬¡æœ¬å·¥å…·æ‰èƒ½å½»åº•ç¦ç”¨ï¼** * è¿è¡Œæ—¶å¦‚æžœé‡åˆ° `Error: Can not find a certificate matching the hash value` ä¸éœ€è¦åœ¨æ„,åªè¦åŽé¢åŠé”€è¯ä¹¦æ—¶ `CertMgr Succeeded` è¿è¡ŒæˆåŠŸå°±è¡Œ - * 如果è¯ä¹¦éªŒè¯å‡ºçŽ°é—®é¢˜ï¼Œå¯ä½¿ç”¨ Microsoft_Fixit_20135.diagcab(Win7以åŠä¹‹åŽ) 或者 Microsoft_Fixit_51014.msi(Vista以åŠä¹‹å‰) é‡ç½®è¯ä¹¦åˆ—表并é‡æ–°å®‰è£…è¯ä¹¦æ›´æ–°ï¼Œ**ä¸è¿‡å¤§å¤šæ•°æƒ…况下并ä¸éœ€è¦** * Linux * 在 /usr/share/ca-certificates 里也有一份å„程åºè‡ªå·±çš„CAæ ¹è¯ä¹¦åˆ—è¡¨ï¼Œå¤§å¤šæ•°æƒ…å†µä¸‹ç›´æŽ¥åˆ é™¤å¯èƒ½å¹¶ä¸èƒ½ç¦ç”¨è¯ä¹¦ * Linux å‘行版系统虽然æ供了CAæ ¹è¯ä¹¦è°ƒç”¨çš„统一接å£ï¼Œä½†ç¨‹åºå®žé™…使用的CAæ ¹è¯ä¹¦åˆ—表å¯èƒ½æ˜¯ç¨‹åºæœ¬èº«å¦å¤–ä¿å˜çš„一份,所以实际程åºä½¿ç”¨çš„CAæ ¹è¯ä¹¦åˆ—表å¯èƒ½ä¸Žç³»ç»Ÿç»Ÿä¸€æŽ¥å£ä¸ç›¸åŒï¼Œ**强烈建议在系统统一接å£ç¦ç”¨è¯ä¹¦åŽå†é€šè¿‡ç¨‹åºæœ¬èº«æ供的è¯ä¹¦ç®¡ç†å™¨è¿›è¡Œç¦ç”¨** * Firefox - * 在 Firefox é‡Œå¯¹è‡ªå¸¦æ ¹è¯ä¹¦æ‰§è¡Œ `åˆ é™¤æˆ–ä¸ä¿¡ä»»` æ“作就相当于是ç¦ç”¨å…¶æ‰€æœ‰ç›®çš„,并ä¸ä¼šå°†æ ¹è¯ä¹¦æœ¬èº«åˆ 除 + * 在 Firefox é‡Œå¯¹è‡ªå¸¦æ ¹è¯ä¹¦æ‰§è¡Œ `åˆ é™¤æˆ–ä¸ä¿¡ä»»` æ“作就相当于是ç¦ç”¨å…¶æ‰€æœ‰ç›®çš„,并ä¸ä¼šå°†æ ¹è¯ä¹¦æœ¬èº«åˆ 除 * Android * Android 上由于没有æ供比较方便的方法编辑CRL列表,故è¯ä¹¦å¹¶ä¸èƒ½è¢«å®Œå…¨ç¦ç”¨ï¼ŒApps å¯ä»¥é€šè¿‡å¿½ç•¥è¯ä¹¦é”™è¯¯ç»§ç»ä½¿ç”¨ * **Android 系统没有自带的CAæ ¹è¯ä¹¦é»˜è®¤ä¸ºä¸ä¿¡ä»»çŠ¶æ€ï¼Œä¸éœ€è¦æ‰‹åŠ¨æ·»åŠ 到系统ä¸** @@ -66,11 +67,11 @@ Anti China Certifications. ### 涉åŠçš„CAæ ¹è¯ä¹¦ * Base 版本 * Fake GitHub.Com(2013-01-25) - * SHA-1 指纹 ‎27A29C3A8B3261770E8B59448557DC9E9339E68C - * æ¤ä¼ªé€ è¯ä¹¦è¢«ç”¨äºŽ 2013-01-25 大规模ä¸é—´äººæ”»å‡» GitHub 网站 - * Fake Google.Com(2014-07-24) - * SHA-1 指纹 ‎F6BEADB9BC02E0A152D71C318739CDECFC1C085D - * æ¤ä¼ªé€ è¯ä¹¦è¢«ç”¨äºŽ 2014-09-01 大规模ä¸é—´äººæ”»å‡» Google 网站 + * SHA-1 指纹 ‎27A29C3A8B3261770E8B59448557DC9E9339E68C + * æ¤ä¼ªé€ è¯ä¹¦è¢«ç”¨äºŽ 2013-01-25 大规模ä¸é—´äººæ”»å‡» GitHub 网站 + * Fake Google.Com(2014-07-24) + * SHA-1 指纹 ‎F6BEADB9BC02E0A152D71C318739CDECFC1C085D + * æ¤ä¼ªé€ è¯ä¹¦è¢«ç”¨äºŽ 2014-09-01 大规模ä¸é—´äººæ”»å‡» Google 网站 * CNNIC ROOT * SHA-1 指纹 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F * 所属机构为 [China Internet Network Information Center/CNNIC/ä¸å›½äº’è”网络信æ¯ä¸å¿ƒ](http://www.cnnic.net.cn) @@ -79,11 +80,7 @@ Anti China Certifications. * SHA-1 指纹 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E * 所属机构为 [China Internet Network Information Center/CNNIC/ä¸å›½äº’è”网络信æ¯ä¸å¿ƒ](http://www.cnnic.net.cn) * [测试网å€](https://evdemo.cnnic.cn) -* Extended 版本扩展 - * ROOTCA - * SHA-1 指纹 ‎DBB84423C928ABE889D0E368FC3191D151DDB1AB - * 所属机构为 [Office of the State Commercial Cryptography Administration/OSCCA/国家商用密ç 管ç†åŠžå…¬å®¤](http://www.oscca.gov.cn) - * 测试:打开 Certs ç›®å½•ä¸ CFCA_CS_SM2_OCA11 è¯ä¹¦ï¼Œè¯¥è¯ä¹¦ç”± ROOTCA 交å‰ç¾ç½²è®¤è¯ +* Extended 版本 * CFCA GT CA * SHA-1 指纹 EABDA240440ABBD694930A01D09764C6C2D77966 * 所属机构为 [China Financial Certification Authority/CFCA/ä¸å›½é‡‘èžè®¤è¯ä¸å¿ƒ](http://www.cfca.com.cn) @@ -99,17 +96,21 @@ Anti China Certifications. * UCA Root * SHA-1 指纹 8250BED5A214433A66377CBC10EF83F669DA3A67 * 所属机构为 [Shanghai Electronic Certificate Authority Center/SHECA/上海市数å—è¯ä¹¦è®¤è¯ä¸å¿ƒ](http://www.sheca.com) - * [测试网å€](https://ibanks.bankofshanghai.com) + * [测试网å€](https://ibanks.bankofshanghai.com) * UCA EV Root * SHA-1 指纹 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E * 所属机构为 [Shanghai Electronic Certificate Authority Center/SHECA/上海市数å—è¯ä¹¦è®¤è¯ä¸å¿ƒ](http://www.sheca.com) -* 观察ä¸ï¼ˆ**未被ç¦ç”¨**) +* All 版本 + * ROOTCA + * SHA-1 指纹 ‎DBB84423C928ABE889D0E368FC3191D151DDB1AB + * 所属机构为 [Office of the State Commercial Cryptography Administration/OSCCA/国家商用密ç 管ç†åŠžå…¬å®¤](http://www.oscca.gov.cn) + * 测试:打开 Certs ç›®å½•ä¸ CFCA_CS_SM2_OCA11 è¯ä¹¦ï¼Œè¯¥è¯ä¹¦ç”± ROOTCA 交å‰ç¾ç½²è®¤è¯ * SRCA - * SHA-1 指纹 ‎AE3F2E66D48FC6BD1DF131E89D768D505DF14302 - * 本è¯ä¹¦ç”±å…¶è‡ªè¡Œé¢å‘,没有ç»è¿‡ä»»ä½•ç¬¦åˆå›½é™…æ ‡å‡†çš„å›½é™…äº‹åŠ¡æ‰€è¿›è¡Œå®¡è®¡ï¼Œå½¢è¿¹å¯ç–‘ + * SHA-1 指纹 ‎AE3F2E66D48FC6BD1DF131E89D768D505DF14302 * 所属机构为 [Sinorail Certification Authority/SRCA/ä¸é“æ•°å—è¯ä¹¦è®¤è¯ä¸å¿ƒ](http://www.12306.cn) * [测试网å€](https://kyfw.12306.cn) * Certification Authority of WoSign + * SHA-1 指纹 B94294BF91EA8FB64BE61097C7FB001359B676CB * 没有安装最新CAæ ¹è¯ä¹¦åˆ—表时则由 StartCom Certification Authority 或 UTN - DATACorp SGC 交å‰ç¾ç½²è®¤è¯ * 所属机构为 [沃通CA](http://www.wosign.com) * [测试网å€](https://www.wosign.com) @@ -117,6 +118,15 @@ Anti China Certifications. * SHA-1 指纹 1632478D89F9213A92008563F5A4A7D312408AD6 * 所属机构为 [沃通CA](http://www.wosign.com) * Class 1 Primary CA/WoSign 1999 - * 沃通CA收è´ç¾Žå›½ WoSign çš„æ—§è¯ä¹¦ï¼ŒäºŽ1999å¹´å‘布 * SHA-1 指纹 ‎6A174570A916FBE84453EED3D070A1D8DA442829 + * 沃通CA收è´ç¾Žå›½ WoSign çš„æ—§è¯ä¹¦ï¼ŒäºŽ1999å¹´å‘布 * 所属机构为 [沃通CA](http://www.wosign.com) + * China Trust Network(1) + * SHA-1 指纹 C2CAEB0DC296FD50596BCA0F53C5364521167039 + * 所属机构为 [iTrusChina/天å¨è¯šä¿¡æ•°å—认è¯ä¸å¿ƒ](http://www.itrus.com.cn) + * China Trust Network(2) + * SHA-1 指纹 B39B0B24B156D8B6123CAF7BA249DC81F27E39FA + * 所属机构为 [iTrusChina/天å¨è¯šä¿¡æ•°å—认è¯ä¸å¿ƒ](http://www.itrus.com.cn) + * China Trust Network(3) + * SHA-1 指纹 7C88AE178AE6AB8E69C30AF586D84EF29B6E6AE3 + * 所属机构为 [iTrusChina/天å¨è¯šä¿¡æ•°å—认è¯ä¸å¿ƒ](http://www.itrus.com.cn) diff --git a/Windows/AntiChinaCerts_All.bat b/Windows/AntiChinaCerts_All.bat new file mode 100644 index 0000000000000000000000000000000000000000..a4421eea4d8b4a4c31003623542124f7586725ae --- /dev/null +++ b/Windows/AntiChinaCerts_All.bat @@ -0,0 +1,192 @@ +:: AntiChinaCerts All batch +:: Anti China Certifications. +:: +:: Author: Chengr28 +:: + +@echo off + +cd /d %~dp0 +:: Update certifications +RootSUPD_201403_x86 + +::cls +cd /d %~dp0\Certs + +:: Architecture check +if "%PROCESSOR_ARCHITECTURE%%PROCESSOR_ARCHITEW6432%" == "x86" (goto X86) else goto X64 + +:X86 +:: Delete certifications(Base) +:: Fake GitHub.Com(2013-01-25) +CertMgr_x86 -del -c -sha1 27A29C3A8B3261770E8B59448557DC9E9339E68C -s -r localMachine Root +CertMgr_x86 -del -c -sha1 27A29C3A8B3261770E8B59448557DC9E9339E68C -s -r localMachine AuthRoot +:: Fake Google.Com(2014-07-24) +CertMgr_x86 -del -c -sha1 F6BEADB9BC02E0A152D71C318739CDECFC1C085D -s -r localMachine Root +CertMgr_x86 -del -c -sha1 F6BEADB9BC02E0A152D71C318739CDECFC1C085D -s -r localMachine AuthRoot +:: Fake Yahoo.Com(2014-09-30) +CertMgr_x86 -del -c -sha1 2290C311EA0F3F57E06DF45B698E18E828E59BC3 -s -r localMachine Root +CertMgr_x86 -del -c -sha1 2290C311EA0F3F57E06DF45B698E18E828E59BC3 -s -r localMachine AuthRoot +:: CNNIC ROOT +CertMgr_x86 -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine Root +CertMgr_x86 -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine AuthRoot +:: China Internet Network Information Center EV Certificates Root +CertMgr_x86 -del -c -sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E -s -r localMachine Root +CertMgr_x86 -del -c -sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E -s -r localMachine AuthRoot +:: Delete certifications(Extended) +:: CFCA GT CA +CertMgr_x86 -del -c -sha1 EABDA240440ABBD694930A01D09764C6C2D77966 -s -r localMachine Root +CertMgr_x86 -del -c -sha1 EABDA240440ABBD694930A01D09764C6C2D77966 -s -r localMachine AuthRoot +:: CFCA EV ROOT +CertMgr_x86 -del -c -sha1 E2B8294B5584AB6B58C290466CAC3FB8398F8483 -s -r localMachine Root +CertMgr_x86 -del -c -sha1 E2B8294B5584AB6B58C290466CAC3FB8398F8483 -s -r localMachine AuthRoot +:: UCA Global Root +CertMgr_x86 -del -c -sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF -s -r localMachine Root +CertMgr_x86 -del -c -sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF -s -r localMachine AuthRoot +:: UCA Root +CertMgr_x86 -del -c -sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 -s -r localMachine Root +CertMgr_x86 -del -c -sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 -s -r localMachine AuthRoot +:: UCA EV Root +CertMgr_x86 -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s -r localMachine Root +CertMgr_x86 -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s -r localMachine AuthRoot +:: Delete certifications(All) +:: ROOTCA +CertMgr_x86 -del -c -sha1 DBB84423C928ABE889D0E368FC3191D151DDB1AB -s -r localMachine Root +CertMgr_x86 -del -c -sha1 DBB84423C928ABE889D0E368FC3191D151DDB1AB -s -r localMachine AuthRoot +:: SRCA +CertMgr_x86 -del -c -sha1 AE3F2E66D48FC6BD1DF131E89D768D505DF14302 -s -r localMachine Root +CertMgr_x86 -del -c -sha1 AE3F2E66D48FC6BD1DF131E89D768D505DF14302 -s -r localMachine AuthRoot +:: Certification_Authority_Of_WoSign +CertMgr_x86 -del -c -sha1 B94294BF91EA8FB64BE61097C7FB001359B676CB -s -r localMachine Root +CertMgr_x86 -del -c -sha1 B94294BF91EA8FB64BE61097C7FB001359B676CB -s -r localMachine AuthRoot +:: Certification_Authority_Of_WoSign(Chinese) +CertMgr_x86 -del -c -sha1 1632478D89F9213A92008563F5A4A7D312408AD6 -s -r localMachine Root +CertMgr_x86 -del -c -sha1 1632478D89F9213A92008563F5A4A7D312408AD6 -s -r localMachine AuthRoot +:: Class_1_Primary_CA +CertMgr_x86 -del -c -sha1 6A174570A916FBE84453EED3D070A1D8DA442829 -s -r localMachine Root +CertMgr_x86 -del -c -sha1 6A174570A916FBE84453EED3D070A1D8DA442829 -s -r localMachine AuthRoot +:: China_Trust_Network_1 +CertMgr_x86 -del -c -sha1 C2CAEB0DC296FD50596BCA0F53C5364521167039 -s -r localMachine Root +CertMgr_x86 -del -c -sha1 C2CAEB0DC296FD50596BCA0F53C5364521167039 -s -r localMachine AuthRoot +:: China_Trust_Network_2 +CertMgr_x86 -del -c -sha1 B39B0B24B156D8B6123CAF7BA249DC81F27E39FA -s -r localMachine Root +CertMgr_x86 -del -c -sha1 B39B0B24B156D8B6123CAF7BA249DC81F27E39FA -s -r localMachine AuthRoot +:: China_Trust_Network_3 +CertMgr_x86 -del -c -sha1 7C88AE178AE6AB8E69C30AF586D84EF29B6E6AE3 -s -r localMachine Root +CertMgr_x86 -del -c -sha1 7C88AE178AE6AB8E69C30AF586D84EF29B6E6AE3 -s -r localMachine AuthRoot + +@echo. + +:: Add certifications to CRL(Base) +CertMgr_x86 -add -c FakeGitHubCom_201301.crt -s Disallowed +CertMgr_x86 -add -c FakeGoogleCom_201407.crt -s Disallowed +CertMgr_x86 -add -c FakeYahooCom_201409.crt -s Disallowed +CertMgr_x86 -add -c CNNIC_ROOT.crt -s Disallowed +CertMgr_x86 -add -c China_Internet_Network_Information_Center_EV_Certificates_Root.crt -s Disallowed +:: Add certifications to CRL(Extended) +CertMgr_x86 -add -c CFCA_GT_CA.crt -s Disallowed +CertMgr_x86 -add -c CFCA_EV_ROOT.crt -s Disallowed +CertMgr_x86 -add -c UCA_Global_Root.crt -s Disallowed +CertMgr_x86 -add -c UCA_Root.crt -s Disallowed +CertMgr_x86 -add -c UCA_EV_Root.crt -s Disallowed +:: Add certifications to CRL(All) +CertMgr_x86 -add -c ROOTCA.crt -s Disallowed +CertMgr_x86 -add -c SRCA.crt -s Disallowed +CertMgr_x86 -add -c Certification_Authority_Of_WoSign.crt -s Disallowed +CertMgr_x86 -add -c Certification_Authority_Of_WoSign(Chinese).crt -s Disallowed +CertMgr_x86 -add -c Class_1_Primary_CA -s Disallowed +CertMgr_x86 -add -c China_Trust_Network_1.crt +CertMgr_x86 -add -c China_Trust_Network_2.crt +CertMgr_x86 -add -c China_Trust_Network_3.crt + +goto Exit + +:X64 +:: Delete certifications(Base) +:: Fake GitHub.Com(2013-01-25) +CertMgr -del -c -sha1 27A29C3A8B3261770E8B59448557DC9E9339E68C -s -r localMachine Root +CertMgr -del -c -sha1 27A29C3A8B3261770E8B59448557DC9E9339E68C -s -r localMachine AuthRoot +:: Fake Google.Com(2014-07-24) +CertMgr -del -c -sha1 F6BEADB9BC02E0A152D71C318739CDECFC1C085D -s -r localMachine Root +CertMgr -del -c -sha1 F6BEADB9BC02E0A152D71C318739CDECFC1C085D -s -r localMachine AuthRoot +:: Fake Yahoo.Com(2014-09-30) +CertMgr -del -c -sha1 2290C311EA0F3F57E06DF45B698E18E828E59BC3 -s -r localMachine Root +CertMgr -del -c -sha1 2290C311EA0F3F57E06DF45B698E18E828E59BC3 -s -r localMachine AuthRoot +:: CNNIC ROOT +CertMgr -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine Root +CertMgr -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine AuthRoot +:: China Internet Network Information Center EV Certificates Root +CertMgr -del -c -sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E -s -r localMachine Root +CertMgr -del -c -sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E -s -r localMachine AuthRoot +:: Delete certifications(Extended) +:: CFCA GT CA +CertMgr -del -c -sha1 EABDA240440ABBD694930A01D09764C6C2D77966 -s -r localMachine Root +CertMgr -del -c -sha1 EABDA240440ABBD694930A01D09764C6C2D77966 -s -r localMachine AuthRoot +:: CFCA EV ROOT +CertMgr -del -c -sha1 E2B8294B5584AB6B58C290466CAC3FB8398F8483 -s -r localMachine Root +CertMgr -del -c -sha1 E2B8294B5584AB6B58C290466CAC3FB8398F8483 -s -r localMachine AuthRoot +:: UCA Global Root +CertMgr -del -c -sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF -s -r localMachine Root +CertMgr -del -c -sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF -s -r localMachine AuthRoot +:: UCA Root +CertMgr -del -c -sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 -s -r localMachine Root +CertMgr -del -c -sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 -s -r localMachine AuthRoot +:: UCA EV Root +CertMgr -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s -r localMachine Root +CertMgr -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s -r localMachine AuthRoot +:: Delete certifications(All) +:: ROOTCA +CertMgr -del -c -sha1 DBB84423C928ABE889D0E368FC3191D151DDB1AB -s -r localMachine Root +CertMgr -del -c -sha1 DBB84423C928ABE889D0E368FC3191D151DDB1AB -s -r localMachine AuthRoot +:: SRCA +CertMgr -del -c -sha1 AE3F2E66D48FC6BD1DF131E89D768D505DF14302 -s -r localMachine Root +CertMgr -del -c -sha1 AE3F2E66D48FC6BD1DF131E89D768D505DF14302 -s -r localMachine AuthRoot +:: Certification_Authority_Of_WoSign +CertMgr -del -c -sha1 B94294BF91EA8FB64BE61097C7FB001359B676CB -s -r localMachine Root +CertMgr -del -c -sha1 B94294BF91EA8FB64BE61097C7FB001359B676CB -s -r localMachine AuthRoot +:: Certification_Authority_Of_WoSign(Chinese) +CertMgr -del -c -sha1 1632478D89F9213A92008563F5A4A7D312408AD6 -s -r localMachine Root +CertMgr -del -c -sha1 1632478D89F9213A92008563F5A4A7D312408AD6 -s -r localMachine AuthRoot +:: Class_1_Primary_CA +CertMgr -del -c -sha1 6A174570A916FBE84453EED3D070A1D8DA442829 -s -r localMachine Root +CertMgr -del -c -sha1 6A174570A916FBE84453EED3D070A1D8DA442829 -s -r localMachine AuthRoot +:: China_Trust_Network_1 +CertMgr -del -c -sha1 C2CAEB0DC296FD50596BCA0F53C5364521167039 -s -r localMachine Root +CertMgr -del -c -sha1 C2CAEB0DC296FD50596BCA0F53C5364521167039 -s -r localMachine AuthRoot +:: China_Trust_Network_2 +CertMgr -del -c -sha1 B39B0B24B156D8B6123CAF7BA249DC81F27E39FA -s -r localMachine Root +CertMgr -del -c -sha1 B39B0B24B156D8B6123CAF7BA249DC81F27E39FA -s -r localMachine AuthRoot +:: China_Trust_Network_3 +CertMgr -del -c -sha1 7C88AE178AE6AB8E69C30AF586D84EF29B6E6AE3 -s -r localMachine Root +CertMgr -del -c -sha1 7C88AE178AE6AB8E69C30AF586D84EF29B6E6AE3 -s -r localMachine AuthRoot + +@echo. + +:: Add certifications to CRL(Base) +CertMgr -add -c FakeGitHubCom_201301.crt -s Disallowed +CertMgr -add -c FakeGoogleCom_201407.crt -s Disallowed +CertMgr -add -c FakeYahooCom_201409.crt -s Disallowed +CertMgr -add -c CNNIC_ROOT.crt -s Disallowed +CertMgr -add -c China_Internet_Network_Information_Center_EV_Certificates_Root.crt -s Disallowed +:: Add certifications to CRL(Extended) +CertMgr -add -c CFCA_GT_CA.crt -s Disallowed +CertMgr -add -c CFCA_EV_ROOT.crt -s Disallowed +CertMgr -add -c UCA_Global_Root.crt -s Disallowed +CertMgr -add -c UCA_Root.crt -s Disallowed +CertMgr -add -c UCA_EV_Root.crt -s Disallowed +:: Add certifications to CRL(All) +CertMgr -add -c ROOTCA.crt -s Disallowed +CertMgr -add -c SRCA.crt -s Disallowed +CertMgr -add -c Certification_Authority_Of_WoSign.crt -s Disallowed +CertMgr -add -c Certification_Authority_Of_WoSign(Chinese).crt -s Disallowed +CertMgr -add -c Class_1_Primary_CA -s Disallowed +CertMgr -add -c China_Trust_Network_1.crt +CertMgr -add -c China_Trust_Network_2.crt +CertMgr -add -c China_Trust_Network_3.crt + +:Exit +:: Print to screen. +@echo. +@echo Done. Please confirm the messages on screen. +@echo. +@pause diff --git a/Windows/AntiChinaCerts_Base.bat b/Windows/AntiChinaCerts_Base.bat index bbd7c132d5ac8e73f140131f458afcbbfcc10a8e..3bc8f97be21f6258800bb9de54cec4573ca1c40e 100644 --- a/Windows/AntiChinaCerts_Base.bat +++ b/Windows/AntiChinaCerts_Base.bat @@ -35,6 +35,9 @@ CertMgr_x86 -del -c -sha1 27A29C3A8B3261770E8B59448557DC9E9339E68C -s -r localMa :: Fake Google.Com(2014-07-24) CertMgr_x86 -del -c -sha1 F6BEADB9BC02E0A152D71C318739CDECFC1C085D -s -r localMachine Root CertMgr_x86 -del -c -sha1 F6BEADB9BC02E0A152D71C318739CDECFC1C085D -s -r localMachine AuthRoot +:: Fake Yahoo.Com(2014-09-30) +CertMgr_x86 -del -c -sha1 2290C311EA0F3F57E06DF45B698E18E828E59BC3 -s -r localMachine Root +CertMgr_x86 -del -c -sha1 2290C311EA0F3F57E06DF45B698E18E828E59BC3 -s -r localMachine AuthRoot :: CNNIC ROOT CertMgr_x86 -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine Root CertMgr_x86 -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine AuthRoot @@ -47,6 +50,7 @@ CertMgr_x86 -del -c -sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E -s -r localMa :: Add certifications to CRL(Base) CertMgr_x86 -add -c FakeGitHubCom_201301.crt -s Disallowed CertMgr_x86 -add -c FakeGoogleCom_201407.crt -s Disallowed +CertMgr_x86 -add -c FakeYahooCom_201409.crt -s Disallowed CertMgr_x86 -add -c CNNIC_ROOT.crt -s Disallowed CertMgr_x86 -add -c China_Internet_Network_Information_Center_EV_Certificates_Root.crt -s Disallowed goto Exit @@ -59,6 +63,9 @@ CertMgr -del -c -sha1 27A29C3A8B3261770E8B59448557DC9E9339E68C -s -r localMachin :: Fake Google.Com(2014-07-24) CertMgr -del -c -sha1 F6BEADB9BC02E0A152D71C318739CDECFC1C085D -s -r localMachine Root CertMgr -del -c -sha1 F6BEADB9BC02E0A152D71C318739CDECFC1C085D -s -r localMachine AuthRoot +:: Fake Yahoo.Com(2014-09-30) +CertMgr -del -c -sha1 2290C311EA0F3F57E06DF45B698E18E828E59BC3 -s -r localMachine Root +CertMgr -del -c -sha1 2290C311EA0F3F57E06DF45B698E18E828E59BC3 -s -r localMachine AuthRoot :: CNNIC ROOT CertMgr -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine Root CertMgr -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine AuthRoot @@ -69,8 +76,9 @@ CertMgr -del -c -sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E -s -r localMachin @echo. :: Add certifications to CRL(Base) -CertMgr -add -c FakeGitHubCom_2013_01.crt -s Disallowed -CertMgr -add -c FakeGoogleCom_2014_07.crt -s Disallowed +CertMgr -add -c FakeGitHubCom_201301.crt -s Disallowed +CertMgr -add -c FakeGoogleCom_201407.crt -s Disallowed +CertMgr -add -c FakeYahooCom_201409.crt -s Disallowed CertMgr -add -c CNNIC_ROOT.crt -s Disallowed CertMgr -add -c China_Internet_Network_Information_Center_EV_Certificates_Root.crt -s Disallowed diff --git a/Windows/AntiChinaCerts_Extended.bat b/Windows/AntiChinaCerts_Extended.bat index 909e7dfd3da8fd6126ecaec376015ae1e142fddd..15a08270db9ef216dccc7d2f97ea934a3517edef 100644 --- a/Windows/AntiChinaCerts_Extended.bat +++ b/Windows/AntiChinaCerts_Extended.bat @@ -21,7 +21,7 @@ cd /d %~dp0 :: Update certifications RootSUPD_201403_x86 -cls +::cls cd /d %~dp0\Certs :: Architecture check @@ -35,6 +35,9 @@ CertMgr_x86 -del -c -sha1 27A29C3A8B3261770E8B59448557DC9E9339E68C -s -r localMa :: Fake Google.Com(2014-07-24) CertMgr_x86 -del -c -sha1 F6BEADB9BC02E0A152D71C318739CDECFC1C085D -s -r localMachine Root CertMgr_x86 -del -c -sha1 F6BEADB9BC02E0A152D71C318739CDECFC1C085D -s -r localMachine AuthRoot +:: Fake Yahoo.Com(2014-09-30) +CertMgr_x86 -del -c -sha1 2290C311EA0F3F57E06DF45B698E18E828E59BC3 -s -r localMachine Root +CertMgr_x86 -del -c -sha1 2290C311EA0F3F57E06DF45B698E18E828E59BC3 -s -r localMachine AuthRoot :: CNNIC ROOT CertMgr_x86 -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine Root CertMgr_x86 -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine AuthRoot @@ -42,9 +45,11 @@ CertMgr_x86 -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMa CertMgr_x86 -del -c -sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E -s -r localMachine Root CertMgr_x86 -del -c -sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E -s -r localMachine AuthRoot :: Delete certifications(Extended) +:: Move to All version. :: ROOTCA -CertMgr_x86 -del -c -sha1 DBB84423C928ABE889D0E368FC3191D151DDB1AB -s -r localMachine Root -CertMgr_x86 -del -c -sha1 DBB84423C928ABE889D0E368FC3191D151DDB1AB -s -r localMachine AuthRoot +CertMgr_x86 -del -c -sha1 DBB84423C928ABE889D0E368FC3191D151DDB1AB -s Disallowed +:: CertMgr_x86 -del -c -sha1 DBB84423C928ABE889D0E368FC3191D151DDB1AB -s -r localMachine Root +:: CertMgr_x86 -del -c -sha1 DBB84423C928ABE889D0E368FC3191D151DDB1AB -s -r localMachine AuthRoot :: CFCA GT CA CertMgr_x86 -del -c -sha1 EABDA240440ABBD694930A01D09764C6C2D77966 -s -r localMachine Root CertMgr_x86 -del -c -sha1 EABDA240440ABBD694930A01D09764C6C2D77966 -s -r localMachine AuthRoot @@ -66,10 +71,12 @@ CertMgr_x86 -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s -r localMa :: Add certifications to CRL(Base) CertMgr_x86 -add -c FakeGitHubCom_201301.crt -s Disallowed CertMgr_x86 -add -c FakeGoogleCom_201407.crt -s Disallowed +CertMgr_x86 -add -c FakeYahooCom_201409.crt -s Disallowed CertMgr_x86 -add -c CNNIC_ROOT.crt -s Disallowed CertMgr_x86 -add -c China_Internet_Network_Information_Center_EV_Certificates_Root.crt -s Disallowed :: Add certifications to CRL(Extended) -CertMgr_x86 -add -c ROOTCA.crt -s Disallowed +:: Move to All version. +:: CertMgr_x86 -add -c ROOTCA.crt -s Disallowed CertMgr_x86 -add -c CFCA_GT_CA.crt -s Disallowed CertMgr_x86 -add -c CFCA_EV_ROOT.crt -s Disallowed CertMgr_x86 -add -c UCA_Global_Root.crt -s Disallowed @@ -85,6 +92,9 @@ CertMgr -del -c -sha1 27A29C3A8B3261770E8B59448557DC9E9339E68C -s -r localMachin :: Fake Google.Com(2014-07-24) CertMgr -del -c -sha1 F6BEADB9BC02E0A152D71C318739CDECFC1C085D -s -r localMachine Root CertMgr -del -c -sha1 F6BEADB9BC02E0A152D71C318739CDECFC1C085D -s -r localMachine AuthRoot +:: Fake Yahoo.Com(2014-09-30) +CertMgr -del -c -sha1 2290C311EA0F3F57E06DF45B698E18E828E59BC3 -s -r localMachine Root +CertMgr -del -c -sha1 2290C311EA0F3F57E06DF45B698E18E828E59BC3 -s -r localMachine AuthRoot :: CNNIC ROOT CertMgr -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine Root CertMgr -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine AuthRoot @@ -92,9 +102,11 @@ CertMgr -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachin CertMgr -del -c -sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E -s -r localMachine Root CertMgr -del -c -sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E -s -r localMachine AuthRoot :: Delete certifications(Extended) +:: Move to All version. :: ROOTCA -CertMgr -del -c -sha1 DBB84423C928ABE889D0E368FC3191D151DDB1AB -s -r localMachine Root -CertMgr -del -c -sha1 DBB84423C928ABE889D0E368FC3191D151DDB1AB -s -r localMachine AuthRoot +CertMgr -del -c -sha1 DBB84423C928ABE889D0E368FC3191D151DDB1AB -s Disallowed +:: CertMgr -del -c -sha1 DBB84423C928ABE889D0E368FC3191D151DDB1AB -s -r localMachine Root +:: CertMgr -del -c -sha1 DBB84423C928ABE889D0E368FC3191D151DDB1AB -s -r localMachine AuthRoot :: CFCA GT CA CertMgr -del -c -sha1 EABDA240440ABBD694930A01D09764C6C2D77966 -s -r localMachine Root CertMgr -del -c -sha1 EABDA240440ABBD694930A01D09764C6C2D77966 -s -r localMachine AuthRoot @@ -114,12 +126,14 @@ CertMgr -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s -r localMachin @echo. :: Add certifications to CRL(Base) -CertMgr -add -c FakeGitHubCom_2013_01.crt -s Disallowed -CertMgr -add -c FakeGoogleCom_2014_07.crt -s Disallowed +CertMgr -add -c FakeGitHubCom_201301.crt -s Disallowed +CertMgr -add -c FakeGoogleCom_201407.crt -s Disallowed +CertMgr -add -c FakeYahooCom_201409.crt -s Disallowed CertMgr -add -c CNNIC_ROOT.crt -s Disallowed CertMgr -add -c China_Internet_Network_Information_Center_EV_Certificates_Root.crt -s Disallowed :: Add certifications to CRL(Extended) -CertMgr -add -c ROOTCA.crt -s Disallowed +:: Move to All version. +:: CertMgr -add -c ROOTCA.crt -s Disallowed CertMgr -add -c CFCA_GT_CA.crt -s Disallowed CertMgr -add -c CFCA_EV_ROOT.crt -s Disallowed CertMgr -add -c UCA_Global_Root.crt -s Disallowed diff --git "a/Windows/Certs/CA_\346\262\203\351\200\232\346\240\271\350\257\201\344\271\246.crt" b/Windows/Certs/Certification_Authority_Of_WoSign(Chinese).crt similarity index 100% rename from "Windows/Certs/CA_\346\262\203\351\200\232\346\240\271\350\257\201\344\271\246.crt" rename to Windows/Certs/Certification_Authority_Of_WoSign(Chinese).crt diff --git a/Windows/Certs/China_Trust_Network_1.crt b/Windows/Certs/China_Trust_Network_1.crt new file mode 100644 index 0000000000000000000000000000000000000000..60a6f08f4dec3b9e18c28477799e1e8ac41bb463 --- /dev/null +++ b/Windows/Certs/China_Trust_Network_1.crt @@ -0,0 +1,25 @@ +-----BEGIN CERTIFICATE----- +MIIESjCCAzKgAwIBAgIRAPaWr4MXwBGPHjsW2JGJ58swDQYJKoZIhvcNAQEFBQAw +gdAxCzAJBgNVBAYTAkNOMR0wGwYDVQQKExRpVHJ1c2NoaW5hIENvLiwgTHRkLjFC +MEAGA1UECxM5aVRydXNjaGluYSBDbGFzcyAxIFB1YmxpYyBQcmltYXJ5IENlcnRp +ZmljYXRpb24gQXV0aG9yaXR5MUAwPgYDVQQLEzcoYykgMjAwNiBpVHJ1c2NoaW5h +IENvLiwgTHRkLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5MRwwGgYDVQQLExND +aGluYSBUcnVzdCBOZXR3b3JrMB4XDTA2MDgwODAwMDAwMFoXDTI2MDgwNzIzNTk1 +OVowgdAxCzAJBgNVBAYTAkNOMR0wGwYDVQQKExRpVHJ1c2NoaW5hIENvLiwgTHRk +LjFCMEAGA1UECxM5aVRydXNjaGluYSBDbGFzcyAxIFB1YmxpYyBQcmltYXJ5IENl +cnRpZmljYXRpb24gQXV0aG9yaXR5MUAwPgYDVQQLEzcoYykgMjAwNiBpVHJ1c2No +aW5hIENvLiwgTHRkLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5MRwwGgYDVQQL +ExNDaGluYSBUcnVzdCBOZXR3b3JrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB +CgKCAQEA2wlAvY5pBrKLnZhAFL+VnKQrrutz6duadnKE+dOX6B4GOewXKJ9OrxZY ++t0UnOwpJNmTdkOr2FHowBkqFhCb1b3TFkjqfx0TVIgZoycRZLAt7SoEwC0M66g/ +SQ/dofy/mwZgrddn/BFk2eZEG/GhjzLlIuNhoe71weoWqdQVTO2l8Z3WBtWbjAMb +8/s901KTCvAyBSCC/JePI14RjOyoXDRig+IVaXT/4Y1geyqxZ4glPE4hhTaHx8RI +hxq41uKKe7My65JGXLOsPJhFfaXHQjTRfjdCFUEdcUn4gXCIPByDTLv1E/HFM/HY +0C9yr3xo4c9eq9RVpeRdpA/DxXFK3QIDAQABox0wGzAMBgNVHRMEBTADAQH/MAsG +A1UdDwQEAwIBBjANBgkqhkiG9w0BAQUFAAOCAQEAZUII0t5GVOZyMNDNyYsiVxu3 +2sTtXgHiIQP3puu90KSNEq0lxK4g4twTLkIJikb6K7ei8fBPZD8GbpNOwRiQyAX6 +kbQnh5S8JpGvFTNmAfHmLTxWrp2AotcHXkxkuIkZPX9Q8P65yr0WShZ7NhYEAqYW +XlVlDALuTcc89Aehz3LhOOylSRuezU2vvzwwJIYqvhiFdKm7p61sucvZYu6WGDHl +ZMLmmbkL3Rccg6Mgt0lXKI+tF7Vm+7Nb0hjldQvSvupbMIWYEtnbEU2uoXN/SVyR +segVlCeOwhkNuJNbx8FTh5va8Q7X5wMQOqVIUApXx7qjHec471WY+nH31IP9xA== +-----END CERTIFICATE----- diff --git a/Windows/Certs/China_Trust_Network_2.crt b/Windows/Certs/China_Trust_Network_2.crt new file mode 100644 index 0000000000000000000000000000000000000000..cf360db11f453529b205dea5b7b520b478927a79 --- /dev/null +++ b/Windows/Certs/China_Trust_Network_2.crt @@ -0,0 +1,25 @@ +-----BEGIN CERTIFICATE----- +MIIESTCCAzGgAwIBAgIQB/kNOH3KKItszagsoFb69TANBgkqhkiG9w0BAQUFADCB +0DELMAkGA1UEBhMCQ04xHTAbBgNVBAoTFGlUcnVzY2hpbmEgQ28uLCBMdGQuMUIw +QAYDVQQLEzlpVHJ1c2NoaW5hIENsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlm +aWNhdGlvbiBBdXRob3JpdHkxQDA+BgNVBAsTNyhjKSAyMDA2IGlUcnVzY2hpbmEg +Q28uLCBMdGQuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxHDAaBgNVBAsTE0No +aW5hIFRydXN0IE5ldHdvcmswHhcNMDYwODA4MDAwMDAwWhcNMjYwODA3MjM1OTU5 +WjCB0DELMAkGA1UEBhMCQ04xHTAbBgNVBAoTFGlUcnVzY2hpbmEgQ28uLCBMdGQu +MUIwQAYDVQQLEzlpVHJ1c2NoaW5hIENsYXNzIDMgUHVibGljIFByaW1hcnkgQ2Vy +dGlmaWNhdGlvbiBBdXRob3JpdHkxQDA+BgNVBAsTNyhjKSAyMDA2IGlUcnVzY2hp +bmEgQ28uLCBMdGQuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxHDAaBgNVBAsT +E0NoaW5hIFRydXN0IE5ldHdvcmswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK +AoIBAQDBiagn0ZgsNWZnHTBe3IwRPBHHLtQ7pfjCTULy6+e8qsy4GZTl2vgV32SC +xUEzc91nptl5sFmGZDpcCdy3ogwzpFFMMl8cvGALY8zvltxKjhacYh4XIq2444IY +xYIbIM0wiC+i1ZKKQGb+z+GrlTtBqsZjTpEMjVWuH+4SQDzFeOd6Kc2jlt5rTSoR +QGAqCegs97vubppvKBd0EUjiNOwgU0HOvnwv0ZRUr4Zex1KpSo2aFbmRaL2inASR +JSKvMxkM6Jbgml9+JFvxv0qgfSB6hqgxVof252YJrHM5sdjq3m92bZbQVY7v4MPd +TOLg0MyJtrLYP0r8MEm5fAT7JvvBAgMBAAGjHTAbMAwGA1UdEwQFMAMBAf8wCwYD +VR0PBAQDAgEGMA0GCSqGSIb3DQEBBQUAA4IBAQAuQMM6oRQKnunRd9ctIAF4tepi +RB7/FPK5impvAPS+JTkBpHp/QBrO6QdWJPzhzz7MGRC85gV1oF+lJljz7M84v/D9 +YaF1FchgNFnMFaQIp3JtHGhF1M1xx4++kyKZCGLouymfdPqKEptiVwAQhD4Ay+cj +A/b3iZgVhkvKEy5sEw/OsvRB6bNyh4nRHpk2kxSzbKZfBMfMPdRRCiLgflDu5APN +/Aj0dJ9tTbaPD/9bggJvsPqYE4y+ooVjdebfdTtX9o43jzNJzuIGJcRsZnpZTL1Q +h6cdQ+JgszqFR2Oq82RedMLHD6j+pLooAUaNymE+/NiVIF4MCghkTboheth3 +-----END CERTIFICATE----- diff --git a/Windows/Certs/China_Trust_Network_3.crt b/Windows/Certs/China_Trust_Network_3.crt new file mode 100644 index 0000000000000000000000000000000000000000..19e513fcf6b821f64ddca9626d244e15fa9c5164 --- /dev/null +++ b/Windows/Certs/China_Trust_Network_3.crt @@ -0,0 +1,25 @@ +-----BEGIN CERTIFICATE----- +MIIESTCCAzGgAwIBAgIQcxqnoaCdQwujKuz5LUkRQjANBgkqhkiG9w0BAQUFADCB +0DELMAkGA1UEBhMCQ04xHTAbBgNVBAoTFGlUcnVzY2hpbmEgQ28uLCBMdGQuMUIw +QAYDVQQLEzlpVHJ1c2NoaW5hIENsYXNzIDIgUHVibGljIFByaW1hcnkgQ2VydGlm +aWNhdGlvbiBBdXRob3JpdHkxQDA+BgNVBAsTNyhjKSAyMDA2IGlUcnVzY2hpbmEg +Q28uLCBMdGQuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxHDAaBgNVBAsTE0No +aW5hIFRydXN0IE5ldHdvcmswHhcNMDYwODA4MDAwMDAwWhcNMjYwODA3MjM1OTU5 +WjCB0DELMAkGA1UEBhMCQ04xHTAbBgNVBAoTFGlUcnVzY2hpbmEgQ28uLCBMdGQu +MUIwQAYDVQQLEzlpVHJ1c2NoaW5hIENsYXNzIDIgUHVibGljIFByaW1hcnkgQ2Vy +dGlmaWNhdGlvbiBBdXRob3JpdHkxQDA+BgNVBAsTNyhjKSAyMDA2IGlUcnVzY2hp +bmEgQ28uLCBMdGQuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxHDAaBgNVBAsT +E0NoaW5hIFRydXN0IE5ldHdvcmswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK +AoIBAQDQ5aIuFGCfX7OPuoG3NdeAQru6GVyLjHjjpW7gBpinkaT74mviKig8RUPA +1KBhEB2t9s+SuFHrzfJWqJFoz5AMwFU1T6we02ET92jGhuJXDZYOmWRn7MVSZrfr +x6hCjsyc5Dg367QkOVsopKlfLvZQ7ZCohIgnWIV/F6WwbrJvc013Tshmn/O6wRM6 +lnrn5SyZIyIsd8yg1RyYbJK4o36Y1YYoMC594TOv13rd3z+CxrKaRH7SsqWC2rfp +6QHAEVpRPDQkLBoro8p9OCnu0VbJSnVvumYAIi5FINSbcSSlAcAesVEdgkK+5AlT +LWVlXAh297zrE+niK2pgDnqoocwFAgMBAAGjHTAbMAwGA1UdEwQFMAMBAf8wCwYD +VR0PBAQDAgEGMA0GCSqGSIb3DQEBBQUAA4IBAQBvXKYUatSNXMy/8N8+Qd8oE6dU +e0vdzPmpd9RhbfTvXOAXmhJrNacsXbxdL2uCcYHX8HsjwoO0v6b8l+Wgiv6mWYmZ +Vifi23sviDxvN+kUImRM6AyU7s8duLOobRKHhzoRXt1N4a3KklAThHYp1DHASlqw +MY2GbpWrWnquBQx0wZ3bWxoMZYxacYs6VvYN2KqR/XX6+9p29ejK+FgmReCPDGtK +25gSN+nbSQBhAzunyZ7e+0ZQHL8ZuwVcSEObX5QNdl3Slb7QNFi9jLtMMADy9skq +AHz9x40sHiryqPlNLmQyPYQZ65iwN2dFHsIje5xqSCF2xSOb9bGqfNzcNWah +-----END CERTIFICATE----- diff --git a/Windows/Certs/FakeYahooCom_201409.crt b/Windows/Certs/FakeYahooCom_201409.crt new file mode 100644 index 0000000000000000000000000000000000000000..386916fbacbe32221abe6703d9eb0fcd7152286e --- /dev/null +++ b/Windows/Certs/FakeYahooCom_201409.crt @@ -0,0 +1,15 @@ +-----BEGIN CERTIFICATE----- +MIICXDCCAcWgAwIBAgIBJzANBgkqhkiG9w0BAQQFADA1MQswCQYDVQQGEwJjbjES +MBAGA1UEChMJeWFob28uY29tMRIwEAYDVQQDEwl5YWhvby5jb20wHhcNMTQwOTIz +MTEzMDE3WhcNMTUwOTIzMTEzMDE3WjA1MQswCQYDVQQGEwJjbjESMBAGA1UEChMJ +eWFob28uY29tMRIwEAYDVQQDEwl5YWhvby5jb20wgZ8wDQYJKoZIhvcNAQEBBQAD +gY0AMIGJAoGBAL3OvVN2YMqRckHPxoWcrvzz5idsPwybCIoQFnrZz1IZpSN5Utyn +AM6jR2Yy6eNO3xDk76F99GHhuuiCdOStEyI5Yzee6bTO6hSTxEXZWuXL5Vnie6He +IMILLewBrktW3VEMwPj5GWOVMclPTeaSnfPCy6WuKNeYZNPRRLGgIoG1AgMBAAGj +fDB6MAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgQwMB0GA1UdDgQWBBQtefGr +GeRCTxctj8D2vpdWc/ygJzARBglghkgBhvhCAQEEBAMCBeAwKAYJYIZIAYb4QgEN +BBsWGWV4YW1wbGUgY29tbWVudCBleHRlbnNpb24wDQYJKoZIhvcNAQEEBQADgYEA +Y+n1H+Io1sgIlEfWSEKZ5WLrbaV7fEu5XV1tLtZija07K99aDaXuFDAlHMJpXAzY +RfClPwdBXA70Cv8rztHFLkah2TCmazLLRkaZ2mFKkuE9XAd3qVfFcfG14Zj0H27I +NHAmtdi+uoTqDmgOTnRivFkDM7uB9kH4Av44Ol2p3SU= +-----END CERTIFICATE-----