|
51 | 51 |
|
52 | 52 | my %urls = ( |
53 | 53 | 'autoland' => 'https://raw.githubusercontent.com/mozilla-firefox/firefox/refs/heads/autoland/security/nss/lib/ckfw/builtins/certdata.txt', |
54 | | - 'beta' => 'https://raw.githubusercontent.com/mozilla-firefox/firefox/refs/heads/beta/security/nss/lib/ckfw/builtins/certdata.txt', |
55 | | - 'release' => 'https://raw.githubusercontent.com/mozilla-firefox/firefox/refs/heads/release/security/nss/lib/ckfw/builtins/certdata.txt', |
| 54 | + 'beta' => 'https://raw.githubusercontent.com/mozilla-firefox/firefox/refs/heads/beta/security/nss/lib/ckfw/builtins/certdata.txt', |
| 55 | + 'release' => 'https://raw.githubusercontent.com/mozilla-firefox/firefox/refs/heads/release/security/nss/lib/ckfw/builtins/certdata.txt', |
56 | 56 | ); |
57 | 57 |
|
58 | 58 | $opt_d = 'release'; |
|
150 | 150 | if($opt_d =~ m/^risk$/i) { # Long Form Warning and Exit |
151 | 151 | print "Warning: Use of this script may pose some risk:\n"; |
152 | 152 | print "\n"; |
153 | | - print " 1) If you use HTTP URLs they are subject to a man in the middle attack\n"; |
154 | | - print " 2) Default to 'release', but more recent updates may be found in other trees\n"; |
155 | | - print " 3) certdata.txt file format may change, lag time to update this script\n"; |
156 | | - print " 4) Generally unwise to blindly trust CAs without manual review & verification\n"; |
157 | | - print " 5) Mozilla apps use additional security checks are not represented in certdata\n"; |
158 | | - print " 6) Use of this script will make a security engineer grind his teeth and\n"; |
| 153 | + print " 1. If you use HTTP URLs they are subject to a man in the middle attack\n"; |
| 154 | + print " 2. Default to 'release', but more recent updates may be found in other trees\n"; |
| 155 | + print " 3. certdata.txt file format may change, lag time to update this script\n"; |
| 156 | + print " 4. Generally unwise to blindly trust CAs without manual review & verification\n"; |
| 157 | + print " 5. Mozilla apps use additional security checks are not represented in certdata\n"; |
| 158 | + print " 6. Use of this script will make a security engineer grind his teeth and\n"; |
159 | 159 | print " swear at you. ;)\n"; |
160 | 160 | exit; |
161 | 161 | } else { # Short Form Warning |
@@ -255,7 +255,6 @@ sub sha256 { |
255 | 255 | return $result; |
256 | 256 | } |
257 | 257 |
|
258 | | - |
259 | 258 | sub oldhash { |
260 | 259 | my $hash = ""; |
261 | 260 | open(C, "<$_[0]") || return 0; |
|
0 commit comments