Skip to content

Commit 42a43db

Browse files
Update mk-ca-bundle.pl script
1 parent a6b0716 commit 42a43db

File tree

1 file changed

+8
-9
lines changed

1 file changed

+8
-9
lines changed

maint/mk-ca-bundle.pl

Lines changed: 8 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -51,8 +51,8 @@
5151

5252
my %urls = (
5353
'autoland' => 'https://raw.githubusercontent.com/mozilla-firefox/firefox/refs/heads/autoland/security/nss/lib/ckfw/builtins/certdata.txt',
54-
'beta' => 'https://raw.githubusercontent.com/mozilla-firefox/firefox/refs/heads/beta/security/nss/lib/ckfw/builtins/certdata.txt',
55-
'release' => 'https://raw.githubusercontent.com/mozilla-firefox/firefox/refs/heads/release/security/nss/lib/ckfw/builtins/certdata.txt',
54+
'beta' => 'https://raw.githubusercontent.com/mozilla-firefox/firefox/refs/heads/beta/security/nss/lib/ckfw/builtins/certdata.txt',
55+
'release' => 'https://raw.githubusercontent.com/mozilla-firefox/firefox/refs/heads/release/security/nss/lib/ckfw/builtins/certdata.txt',
5656
);
5757

5858
$opt_d = 'release';
@@ -150,12 +150,12 @@ ()
150150
if($opt_d =~ m/^risk$/i) { # Long Form Warning and Exit
151151
print "Warning: Use of this script may pose some risk:\n";
152152
print "\n";
153-
print " 1) If you use HTTP URLs they are subject to a man in the middle attack\n";
154-
print " 2) Default to 'release', but more recent updates may be found in other trees\n";
155-
print " 3) certdata.txt file format may change, lag time to update this script\n";
156-
print " 4) Generally unwise to blindly trust CAs without manual review & verification\n";
157-
print " 5) Mozilla apps use additional security checks are not represented in certdata\n";
158-
print " 6) Use of this script will make a security engineer grind his teeth and\n";
153+
print " 1. If you use HTTP URLs they are subject to a man in the middle attack\n";
154+
print " 2. Default to 'release', but more recent updates may be found in other trees\n";
155+
print " 3. certdata.txt file format may change, lag time to update this script\n";
156+
print " 4. Generally unwise to blindly trust CAs without manual review & verification\n";
157+
print " 5. Mozilla apps use additional security checks are not represented in certdata\n";
158+
print " 6. Use of this script will make a security engineer grind his teeth and\n";
159159
print " swear at you. ;)\n";
160160
exit;
161161
} else { # Short Form Warning
@@ -255,7 +255,6 @@ sub sha256 {
255255
return $result;
256256
}
257257

258-
259258
sub oldhash {
260259
my $hash = "";
261260
open(C, "<$_[0]") || return 0;

0 commit comments

Comments
 (0)