c12838c984
Root certificates from certificate authorities included in the Mozilla NSS library and thus in Firefox and Thunderbird.
39 lines
1.2 KiB
Perl
39 lines
1.2 KiB
Perl
|
|
$FreeBSD$
|
|
|
|
--- ca-bundle.pl.orig
|
|
+++ ca-bundle.pl
|
|
@@ -3,30 +3,18 @@
|
|
##
|
|
|
|
# configuration
|
|
-my $cvsroot = ':pserver:anonymous@cvs-mirror.mozilla.org:/cvsroot';
|
|
-my $certdata = 'mozilla/security/nss/lib/ckfw/builtins/certdata.txt';
|
|
-
|
|
-my $date = `date`;
|
|
-$date =~ s/\n$//s;
|
|
print <<EOH;
|
|
##
|
|
## ca-bundle.crt -- Bundle of CA Root Certificates
|
|
##
|
|
## This is a bundle of X.509 certificates of public Certificate
|
|
## Authorities (CA). These were automatically extracted from Mozilla's
|
|
-## root CA list (the file `certdata.txt'). It contains the certificates
|
|
-## in both plain text and PEM format and therefore can be directly used
|
|
-## with an Apache/mod_ssl webserver for SSL client authentication. Just
|
|
-## configure this file as the SSLCACertificateFile.
|
|
-##
|
|
-## (SKIPME)
|
|
+## root CA list (the file `certdata.txt').
|
|
##
|
|
-## Last Modified: $date
|
|
+## Extracted from nss-%%VERSION_NSS%%
|
|
EOH
|
|
-open(IN, "cvs -d $cvsroot co -p $certdata|")
|
|
- || die "could not check out certdata.txt";
|
|
my $incert = 0;
|
|
-while (<IN>) {
|
|
+while (<STDIN>) {
|
|
if (/^CKA_VALUE MULTILINE_OCTAL/) {
|
|
$incert = 1;
|
|
open(OUT, "|openssl x509 -text -inform DER -fingerprint")
|