I'm looking at

lib/mk-ca-bundle.pl

This script is used to generate the CA bundle which contains the
certificates of trusted CAs. This is done by downloading a source file
from the mozilla source tree and converting it into a format that can be
read by OpenSSL.

The Perl script uses the following URL

http://mxr.mozilla.org/seamonkey/source/security/nss/lib/ckfw/builtins/certdata.txt?raw=1

I believe that a newer version of certdata.txt can be found at

http://mxr.mozilla.org/mozilla/source/security/nss/lib/ckfw/builtins/certdata.txt?raw=1

This is also the version which is referenced by

http://www.mozilla.org/projects/security/certs/

I recommend changing this in the source tree.

-Daniel
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2011-02-02