This repository creates and fills `test/rules/platform_certs/default/`.

Download `certdata.txt` and `mk-ca-bundle.pl` and put them in this directory.

You can find the download locations in `SHA256SUMS`.

You can repopulate the certificates with `create_platform_certs.sh`. The

certificates should be bit-for-bit identical if you use the same `certdata.txt`

and `mk-ca-bundle.pl`.

You can update the certificates by using a new `certdata.txt` and

`mk-ca-bundle.pl`. Be sure to also update `SHA256SUMS`.

# https://hg.mozilla.org/releases/mozilla-release/raw-file/849c090094db/security/nss/lib/ckfw/builtins/certdata.txt

# Tag "FIREFOX_58_0_2_RELEASE"

a3ac15b98179dd2f3c5de076d10b1d53048754372f7207c2f327510cdd78fbd8 certdata.txt

# https://raw.githubusercontent.com/curl/curl/curl-7_58_0/lib/mk-ca-bundle.pl

a285d9f5475e04c006f1f092e7e93ec97899bee4a5f35a143da1d0829a0ff551 mk-ca-bundle.pl

set -e

GIT_REPO_TOP_LEVEL="$(git rev-parse --show-toplevel)"

cd "${GIT_REPO_TOP_LEVEL}"/utils/create-platform-certs

COMBINED_CERT_FILE=./ca-bundle.crt

HASH_FILE=./SHA256SUMS

MK_CA_BUNDLE_PL_EXEC=./mk-ca-bundle.pl

SPLIT_CERT_DIR="${GIT_REPO_TOP_LEVEL}"/test/rules/platform_certs/default/

SPLIT_COMBINED_CERT_FILE_EXEC=./split_combined_cert_file.py

sha256sum -c "${HASH_FILE}"

git rm -r -f -q "${SPLIT_CERT_DIR}"

mkdir -p "${SPLIT_CERT_DIR}"

perl "${MK_CA_BUNDLE_PL_EXEC}" -n "${COMBINED_CERT_FILE}"

python "${SPLIT_COMBINED_CERT_FILE_EXEC}" "${COMBINED_CERT_FILE}" "${SPLIT_CERT_DIR}"

rm "${COMBINED_CERT_FILE}"

c_rehash "${SPLIT_CERT_DIR}"

git add "${SPLIT_CERT_DIR}"

import argparse

import codecs

import os

import re

if __name__ == '__main__':

parser = argparse.ArgumentParser()

parser.add_argument(

'input_filename',

help='combined crt/pem file to split',

)

parser.add_argument(

'output_dir',

help='output directory for split files',

)

args = parser.parse_args()

with codecs.open(args.input_filename, 'r', encoding='utf-8') as input_file:

bundle = input_file.read()

certs = re.compile('\n{2,}').split(bundle)

# First element of certs is a comment

certs = certs[1:]

cert_filename_num_width = len(str(len(certs)))

for index, cert in enumerate(certs):

cert_name, cert_content = re.compile("\n=+\n").split(cert)

cert_filename = os.path.join(

args.output_dir,

"cert%s.pem" % str(index+1).zfill(cert_filename_num_width),

)

with codecs.open(

cert_filename, 'w', encoding='utf-8') as cert_file:

cert_file.write("%s\n" % cert_name)

cert_file.write(cert_content)

cert_file.write('\n')