---
** [bugs:#1409] mk-ca-bundle: certdata.txt pulled from soon to be EOL URL**
**Status:** open-confirmed
**Created:** Mon Aug 11, 2014 12:33 PM UTC by Daniel Stenberg
**Last Updated:** Mon Aug 11, 2014 12:33 PM UTC
**Owner:** Daniel Stenberg
Ed Morley filed this bug http://curl.haxx.se/mail/lib-2014-07/0092.html
Excerpt:
I noticed that mk-ca-bundle.pl fetches certdata.txt from mxr.mozilla.org rather than the actual Mercurial VCS locations.
MXR is just a code indexer for Mozilla's repositories, that
holds cached versions of files from their canonical VCSs. Using
certdata.txt from MXR is not ideal since:
* the indexer sometimes fails, resulting in stuck stale files
* MXR is due to be retired soon (replaced by DXR)
* MXR is known to have pretty poor security (part of the reason for
  retirement), so I would trust the cached copy of files there much
  less than from from their canonical location on hg.mozilla.org
---
Sent from sourceforge.net because curl-tracker@cool.haxx.se is subscribed to https://sourceforge.net/p/curl/bugs/
To unsubscribe from further messages, a project admin can change settings at https://sourceforge.net/p/curl/admin/bugs/options.  Or, if this is a mailing list, you can unsubscribe from the mailing list.