search

curl / curl-www

The curl.se website
https://curl.se/
MIT License
101 stars 89 forks source link

cacert.pem may be outdated #409

Open jay opened 9 hours ago

jay commented 9 hours ago

@g-andrade reported that https://curl.se/docs/caextract.html does not contain the latest cacert.pem. I ran mk-ca-bundle from curl master and the generated bundle is slightly different from the September output. It now contains a certificate for GLOBALTRUST 2020. That might be due to curl/curl@448df98d which changed the script to ignore CKA_NSS_SERVER_DISTRUST_AFTER.

The issue might be the cron job is broken, the cron job is not using the latest version of the script, the script is not using the latest certdata.txt, or certdata.txt hasn't changed but the script has etc

bagder commented 2 hours ago

I poked it manually and it should update in a few minutes. The problem is that due to this update only being because of a change in the script and not remotely, the automated update did not work correctly. As I am away from my dev machine for the moment I'll work on a "real" fix later.