From 59babe3fe646b2a7b2427cdf5fe30fb006966191 Mon Sep 17 00:00:00 2001
From: Bob Copeland <copeland@lastpass.com>
Date: Wed, 27 Jan 2016 16:20:56 -0500
Subject: [PATCH] pins: add future root / leaf keys to pin list

LastPass will soon be updating some of its certificates and
keys.  In order to maintain continuity before and after the
changes, add pins for the not-yet-in-place certificates.

As I do not yet know exactly what the chain will look like,
I've included all of the pubkeys from the probable root,
as well as the leaf certs just in case another provider is
used.  When the final chain is in place, we'll reduce this
list to a smaller set.

Backported from master

Signed-off-by: Bob Copeland <copeland@lastpass.com>
---
 pins.h | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/pins.h b/pins.h
index 721d1976..74555743 100644
--- a/pins.h
+++ b/pins.h
@@ -5,5 +5,19 @@ const char *PK_PINS[] = {
 	"HXXQgxueCIU5TTLHob/bPbwcKOKw6DkfsTWYHbxbqTY=",
 	/* current lastpass.eu primary (AddTrust) */
 	"lCppFqbkrlJ3EcVFAkeip0+44VaoJUymbnOaEUk7tEU=",
+	/* future lastpass root CA (GlobalSign R1) */
+	"K87oWBWM9UZfyddvDfoxL+8lpNyoUB2ptGtn0fv6G2Q=",
+	/* future lastpass root CA (GlobalSign R2) */
+	"iie1VXtL7HzAMF+/PVPR9xzT80kQxdZeJ+zduCB3uj0=",
+	/* future lastpass root CA (GlobalSign R3) */
+	"cGuxAXyFXFkWm61cF4HPWX8S0srS9j0aSqN0k4AP+4A=",
+	/* future lastpass.com primary (leaf) */
+	"0hkr5YW/WE6Nq5hNTcApxpuaiwlwy5HUFiOt3Qd9VBc=",
+	/* future lastpass.com backup (leaf) */
+	"8CzY4qWQKZjFDwHXTOIpsVfWkiVnrhQOJEM4Q2b2Ar4=",
+	/* future lastpass.eu primary (leaf) */
+	"SQAWwwYXoceSd8VNbiyxspGXEjFndkklEO2XzLMts10=",
+	/* future lastpass.eu backup (leaf) */
+	"qr2VCNpUi0PK80PfRyF7lFBIEU1Gzz931k03hrD+xGQ=",
 };
 #endif