Skip to content

Commit 70ec990

Browse files
aentingeraentinger
committed
Add new certificate list and instructions on how to build it.
1 parent 9b4c435 commit 70ec990

File tree

3 files changed

+863
-860
lines changed

3 files changed

+863
-860
lines changed

‎README.md

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,15 @@ If updating **Arduino UNO WiFi Rev. 2** NINA firmware via [SerialNINAPassthrough
1919
+ --baud 115200 --before no_reset
2020
```
2121

22+
## Build a new certificate list (based on the Google Android root CA list)
23+
```bash
24+
git clone https://android.googlesource.com/platform/system/ca-certificates
25+
cp nina-fw/data/nina-fw-create-roots.sh ca-certificates/files
26+
cd ca-certificates/files
27+
./nina-fw-create-roots.sh
28+
cp roots.pem ../../nina-fw/data/roots.pem
29+
```
30+
2231
## License
2332

2433
Copyright (c) 2018-2019 Arduino SA. All rights reserved.

‎data/nina-fw-create-roots.sh

Lines changed: 108 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,108 @@
1+
#!/bin/bash
2+
#touch roots.pem
3+
echo '' > roots.pem
4+
5+
for filename in *.0
6+
do
7+
8+
# is_amazon=$(openssl x509 -in $filename -text -nocert | grep "O = Amazon")
9+
is_google=$(openssl x509 -in $filename -text -nocert | grep "O = Google Trust Services LLC")
10+
is_comodo=$(openssl x509 -in $filename -text -nocert | grep "O = Comodo CA Limited")
11+
is_digicert=$(openssl x509 -in $filename -text -nocert | grep "O = DigiCert")
12+
is_isrg=$(openssl x509 -in $filename -text -nocert | grep "O = Internet Security Research Group")
13+
is_verisign=$(openssl x509 -in $filename -text -nocert | grep "O = \"VeriSign, Inc.\"")
14+
is_baltimore=$(openssl x509 -in $filename -text -nocert | grep "O = Baltimore")
15+
is_globalsign=$(openssl x509 -in $filename -text -nocert | grep "O = GlobalSign")
16+
is_starfield=$(openssl x509 -in $filename -text -nocert | grep "O = \"Starfield Technologies, Inc.\"")
17+
is_dst=$(openssl x509 -in $filename -text -nocert | grep "O = Digital Signature Trust Co.")
18+
is_entrust=$(openssl x509 -in $filename -text -nocert | grep "O = \"Entrust, Inc.\"")
19+
is_geotrust=$(openssl x509 -in $filename -text -nocert | grep "O = GeoTrust Inc.")
20+
is_godaddy=$(openssl x509 -in $filename -text -nocert | grep "O = \"GoDaddy.com, Inc.\"")
21+
is_cybertrust=$(openssl x509 -in $filename -text -nocert | grep "O = \"Cybertrust, Inc\"")
22+
23+
# if [ ! -z "$is_amazon" ]
24+
# then
25+
# echo $is_amazon
26+
# openssl x509 -in $filename -text -certopt no_header,no_pubkey,no_subject,no_issuer,no_signame,no_version,no_serial,no_validity,no_extensions,no_sigdump,no_aux,no_extensions >> roots.pem
27+
# fi
28+
29+
if [ ! -z "$is_google" ]
30+
then
31+
echo $is_google
32+
openssl x509 -in $filename -text -certopt no_header,no_pubkey,no_subject,no_issuer,no_signame,no_version,no_serial,no_validity,no_extensions,no_sigdump,no_aux,no_extensions >> roots.pem
33+
fi
34+
35+
if [ ! -z "$is_comodo" ]
36+
then
37+
echo $is_comodo
38+
openssl x509 -in $filename -text -certopt no_header,no_pubkey,no_subject,no_issuer,no_signame,no_version,no_serial,no_validity,no_extensions,no_sigdump,no_aux,no_extensions >> roots.pem
39+
fi
40+
41+
if [ ! -z "$is_digicert" ]
42+
then
43+
echo $is_digicert
44+
openssl x509 -in $filename -text -certopt no_header,no_pubkey,no_subject,no_issuer,no_signame,no_version,no_serial,no_validity,no_extensions,no_sigdump,no_aux,no_extensions >> roots.pem
45+
fi
46+
47+
if [ ! -z "$is_isrg" ]
48+
then
49+
echo $is_isrg
50+
openssl x509 -in $filename -text -certopt no_header,no_pubkey,no_subject,no_issuer,no_signame,no_version,no_serial,no_validity,no_extensions,no_sigdump,no_aux,no_extensions >> roots.pem
51+
fi
52+
53+
if [ ! -z "$is_verisign" ]
54+
then
55+
echo $is_verisign
56+
openssl x509 -in $filename -text -certopt no_header,no_pubkey,no_subject,no_issuer,no_signame,no_version,no_serial,no_validity,no_extensions,no_sigdump,no_aux,no_extensions >> roots.pem
57+
fi
58+
59+
if [ ! -z "$is_baltimore" ]
60+
then
61+
echo $is_baltimore
62+
openssl x509 -in $filename -text -certopt no_header,no_pubkey,no_subject,no_issuer,no_signame,no_version,no_serial,no_validity,no_extensions,no_sigdump,no_aux,no_extensions >> roots.pem
63+
fi
64+
65+
if [ ! -z "$is_globalsign" ]
66+
then
67+
echo $is_globalsign
68+
openssl x509 -in $filename -text -certopt no_header,no_pubkey,no_subject,no_issuer,no_signame,no_version,no_serial,no_validity,no_extensions,no_sigdump,no_aux,no_extensions >> roots.pem
69+
fi
70+
71+
if [ ! -z "$is_starfield" ]
72+
then
73+
echo $is_starfield
74+
openssl x509 -in $filename -text -certopt no_header,no_pubkey,no_subject,no_issuer,no_signame,no_version,no_serial,no_validity,no_extensions,no_sigdump,no_aux,no_extensions >> roots.pem
75+
fi
76+
77+
if [ ! -z "$is_dst" ]
78+
then
79+
echo $is_dst
80+
openssl x509 -in $filename -text -certopt no_header,no_pubkey,no_subject,no_issuer,no_signame,no_version,no_serial,no_validity,no_extensions,no_sigdump,no_aux,no_extensions >> roots.pem
81+
fi
82+
83+
if [ ! -z "$is_entrust" ]
84+
then
85+
echo $is_entrust
86+
openssl x509 -in $filename -text -certopt no_header,no_pubkey,no_subject,no_issuer,no_signame,no_version,no_serial,no_validity,no_extensions,no_sigdump,no_aux,no_extensions >> roots.pem
87+
fi
88+
89+
if [ ! -z "$is_geotrust" ]
90+
then
91+
echo $is_geotrust
92+
openssl x509 -in $filename -text -certopt no_header,no_pubkey,no_subject,no_issuer,no_signame,no_version,no_serial,no_validity,no_extensions,no_sigdump,no_aux,no_extensions >> roots.pem
93+
fi
94+
95+
if [ ! -z "$is_godaddy" ]
96+
then
97+
echo $is_godaddy
98+
openssl x509 -in $filename -text -certopt no_header,no_pubkey,no_subject,no_issuer,no_signame,no_version,no_serial,no_validity,no_extensions,no_sigdump,no_aux,no_extensions >> roots.pem
99+
fi
100+
101+
if [ ! -z "$is_cybertrust" ]
102+
then
103+
echo $is_cybertrust
104+
openssl x509 -in $filename -text -certopt no_header,no_pubkey,no_subject,no_issuer,no_signame,no_version,no_serial,no_validity,no_extensions,no_sigdump,no_aux,no_extensions >> roots.pem
105+
fi
106+
107+
done
108+

0 commit comments

Comments
 (0)