Skip to content
This repository has been archived by the owner on Apr 22, 2023. It is now read-only.

crypto: update CA bundle to latest from Mozilla #8709

Closed
wants to merge 1 commit into from

Conversation

indutny
Copy link
Member

@indutny indutny commented Nov 11, 2014

NOTE:

To reproduce/update this - run:

  1. perl tools/mk-ca-bundle.perl
  2. node tools/rebuild-root-certs.js ca-bundle.crt > src/node_root_certs.h
  3. rm ca-bundle.crt certdata.txt

fix #8679

cc @bnoordhuis @tjfontaine

NOTE:

To reproduce/update this - run:

1. `perl tools/mk-ca-bundle.perl`
2. `node tools/rebuild-root-certs.js ca-bundle.crt > src/node_root_certs.h`
3. `rm ca-bundle.crt certdata.txt`

fix nodejs#8679
@bnoordhuis
Copy link
Member

Why don't you use the existing tools/mk-ca-bundle.pl script? That's already customized for what we need.

@indutny
Copy link
Member Author

indutny commented Nov 12, 2014

@bnoordhuis I may be blind, but I don't see it in the tree: https://github.com/joyent/node/tree/v0.10/tools

@bnoordhuis
Copy link
Member

You're not blind, just looking at the wrong tree. :-) See commits 5ab863d, e159073, d4c09f2 and a12870c.

@indutny
Copy link
Member Author

indutny commented Nov 14, 2014

@bnoordhuis mind submitting a PR that will update CAs? ;)

bnoordhuis added a commit to bnoordhuis/node that referenced this pull request Nov 14, 2014
Update tools/certdata.txt to [0] (last updated on 2014-11-14) and
rebuild src/node_root_certs.h.

Refs nodejs#8679 and nodejs#8709.

[0] https://hg.mozilla.org/mozilla-central/raw-file/64206634959a/security/nss/lib/ckfw/builtins/certdata.txt
@bnoordhuis
Copy link
Member

Done, see #8727.

@indutny indutny closed this Dec 4, 2014
indutny pushed a commit that referenced this pull request Dec 4, 2014
Update tools/certdata.txt to [0] (last updated on 2014-11-14) and
rebuild src/node_root_certs.h.

Refs #8679 and #8709.

[0] https://hg.mozilla.org/mozilla-central/raw-file/64206634959a/security/nss/lib/ckfw/builtins/certdata.txt
@indutny indutny deleted the fix/gh-8679 branch December 4, 2014 14:01
@indutny
Copy link
Member Author

indutny commented Dec 4, 2014

Landed in #8727

mscdex pushed a commit to mscdex/node that referenced this pull request Dec 25, 2014
Update tools/certdata.txt to [0] (last updated on 2014-11-14) and
rebuild src/node_root_certs.h.

Refs nodejs#8679 and nodejs#8709.

[0] https://hg.mozilla.org/mozilla-central/raw-file/64206634959a/security/nss/lib/ckfw/builtins/certdata.txt
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants