Re: extract root CA certs from Mozilla?

From: James Ralston (qralston+ml.redhat-fedora_at_andrew.cmu.edu)
Date: 04/18/04

  • Next message: John Dean: "virus scanning for squid" 
    Date: Sun, 18 Apr 2004 05:30:29 -0400
To: fedora-list@redhat.com

    On 2004-04-09 at 11:55:41+01 Joe Orton <jorton@redhat.com> wrote:

    > On Fri, Apr 09, 2004 at 06:09:58AM -0400, James Ralston wrote:
    >
    > > Has anyone figured out a way to extract the root CA certs from
    > > Mozilla into individually PEM-encoded certs?
    >
    > We were looking into this a while back, to see whether we could
    > include the Mozilla root CA bundle in the OpenSSL package... it
    > wasn't clear whether we could because of the
    > licensing. (certdata.txt is licensed under the MPL)

    Ah.

    > Debian have a "ca-certificates" package, the source of which
    > includes a Ruby script which converts Mozilla's certdata.txt into a
    > set of PEM files (attached).

    That's exactly what I needed. Thanks much for the pointer!

    James 

    -- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
  • Next message: John Dean: "virus scanning for squid"

    Relevant Pages

    • Newbie wants to learn about PKI Server 2003......
      ... I have read stuff on Technet, bought Brian Komar's excellent "Windows Server ... We will implement a 2 tier heirarchy, with the Root CA being offline. ... We will publish our CRLs & Certs ... and relying only on AD for the internal users. ...
      (microsoft.public.windows.server.security)
    • Newbie wants to learn about PKI Server 2003.....
      ... I have read stuff on Technet, bought Brian Komar's excellent "Windows Server ... We will implement a 2 tier heirarchy, with the Root CA being offline. ... We will publish our CRLs & Certs ... and relying only on AD for the internal users. ...
      (microsoft.public.windows.server.security)
    • Re: How to extend validity period of Sub CA
      ... > I have an offline root CA ... > Any certs they issue to computers in AD expire in 2006 ... You have to start at the root CA computer and extend the validity period ... Then you have to set the validity periods for certificates issued by the ...
      (microsoft.public.win2000.security)
    • Re: SBS 2003 Premium and Cert Services
      ... Do you care if your certs are "trusted" by your remote computers? ... purchase a root CA cert from a trusted Root CA? ... > I know that SBS creates it's own but it isn't just certs for SBS, ...
      (microsoft.public.windows.server.sbs)
    • Re: SBS 2003 Premium and Cert Services
      ... It doesn't cost - but if you don't purchase a root CA cert, ... everyone in addition to any certs you create. ...
      (microsoft.public.windows.server.sbs)