Version in base suite: 2.10.65+deb10u4

Base version: debian-edu-config_2.10.65+deb10u4
Target version: debian-edu-config_2.10.65+deb10u5
Base file: /srv/ftp-master.debian.org/ftp/pool/main/d/debian-edu-config/debian-edu-config_2.10.65+deb10u4.dsc
Target file: /srv/ftp-master.debian.org/policy/pool/main/d/debian-edu-config/debian-edu-config_2.10.65+deb10u5.dsc

 Makefile                                     |    3 +++
 debian/changelog                             |   13 +++++++++++++
 lib/thunderbird/distribution/policies.json   |   11 +++++++++++
 share/firefox-esr/distribution/policies.json |   12 ++++++++++++
 4 files changed, 39 insertions(+)

diff -Nru debian-edu-config-2.10.65+deb10u4/Makefile debian-edu-config-2.10.65+deb10u5/Makefile
--- debian-edu-config-2.10.65+deb10u4/Makefile	2020-01-30 15:34:52.000000000 +0000
+++ debian-edu-config-2.10.65+deb10u5/Makefile	2020-04-16 00:34:30.000000000 +0000
@@ -161,6 +161,7 @@
 	nbd-server/conf.d/debian-edu.conf
 
 LIBFILES = \
+	thunderbird/distribution/policies.json \
 	mime/packages/debian-edu-mailcap
 
 SYSCONFSCRIPTS = \
@@ -246,6 +247,7 @@
 	install -d $(DESTDIR)$(ldapdir)
 	install -d $(DESTDIR)$(dhcpdir)
 	install -d $(DESTDIR)$(mailcapdir)
+	install -d $(DESTDIR)$(libdir)
 
 # program's manpages are autodetected. 
 	set -e ; for prog in $(PROGS); do \
@@ -399,6 +401,7 @@
 		share/debian-edu-config/pam-config-mkhomedir \
 		share/debian-edu-config/pam-config-nopwdchange \
 		share/debian-edu-config/pam-nopwdchange.py \
+		share/firefox-esr/distribution/policies.json \
 	; do \
 		$(INSTALL_DATA) $$f $(DESTDIR)/usr/$$f ; \
 	done
diff -Nru debian-edu-config-2.10.65+deb10u4/debian/changelog debian-edu-config-2.10.65+deb10u5/debian/changelog
--- debian-edu-config-2.10.65+deb10u4/debian/changelog	2020-01-30 16:23:38.000000000 +0000
+++ debian-edu-config-2.10.65+deb10u5/debian/changelog	2020-04-16 00:34:38.000000000 +0000
@@ -1,3 +1,16 @@
+debian-edu-config (2.10.65+deb10u5) buster; urgency=medium
+
+  [ Wolfgang Schweer ]
+  * Add policies files for Firefox-ESR and Thunderbird to fix the TLS/SSL setup.
+    This makes sure that the Debian-Edu_rootCA.crt file gets installed as
+    trusted certificate for Firefox-ESR and Thunderbird. (Already fixed in
+    Bullseye.)
+    - Add share/firefox-esr/distribution/policies.json (Closes: #944450).
+    - Add lib/thunderbird/distribution/policies.json (Closes: #955978).
+    - Adjust Makefile accordingly.
+
+ -- Holger Levsen <holger@debian.org>  Thu, 16 Apr 2020 02:34:38 +0200
+
 debian-edu-config (2.10.65+deb10u4) buster; urgency=medium
 
   [ Dominik George ]
diff -Nru debian-edu-config-2.10.65+deb10u4/lib/thunderbird/distribution/policies.json debian-edu-config-2.10.65+deb10u5/lib/thunderbird/distribution/policies.json
--- debian-edu-config-2.10.65+deb10u4/lib/thunderbird/distribution/policies.json	1970-01-01 00:00:00.000000000 +0000
+++ debian-edu-config-2.10.65+deb10u5/lib/thunderbird/distribution/policies.json	2020-04-16 00:34:30.000000000 +0000
@@ -0,0 +1,11 @@
+{
+  "policies": {
+    "Certificates": {
+      "ImportEnterpriseRoots": true,
+      "Install": [
+        "/etc/ssl/certs/Debian-Edu_rootCA.crt"
+      ]
+    }
+  }
+}
+
diff -Nru debian-edu-config-2.10.65+deb10u4/share/firefox-esr/distribution/policies.json debian-edu-config-2.10.65+deb10u5/share/firefox-esr/distribution/policies.json
--- debian-edu-config-2.10.65+deb10u4/share/firefox-esr/distribution/policies.json	1970-01-01 00:00:00.000000000 +0000
+++ debian-edu-config-2.10.65+deb10u5/share/firefox-esr/distribution/policies.json	2020-04-16 00:34:30.000000000 +0000
@@ -0,0 +1,12 @@
+{
+  "policies": {
+    "Certificates": {
+      "ImportEnterpriseRoots": true,
+      "Install": [
+        "/etc/ssl/certs/Debian-Edu_rootCA.crt"
+      ]
+    },
+    "NewTabPage": false,
+    "OverrideFirstRunPage": ""
+  }
+}
\ No newline at end of file