bundling mozilla root CA store for when there are no default certs

not all machines have system certs such as in busybox containers and so by bundling certs from Mozilla we can fallback to them when system certs are missing
crashappsec · Feb 9, 2024 · b23fbbd · b23fbbd
1 parent b4d6e30
commit b23fbbd
Show file tree

Hide file tree

Showing 5 changed files with 3,776 additions and 61 deletions.
diff --git a/Makefile b/Makefile
@@ -0,0 +1,5 @@
+.PHONY: files/mozilla-root-cas.pem
+files/mozilla-root-cas.pem:
+	curl -s --fail https://ccadb.my.salesforce-sites.com/mozilla/IncludedRootsPEMTxt?TrustBitsInclude=Websites \
+		| sed -E 's/\s*$$//g' \
+		> $@