c7ff8969创建于 2023年5月10日历史提交
文件最后提交记录最后更新时间
Add script to generate ssl_roots.h from Mozilla's CA bundle Bug: webrtc:11710 Change-Id: I6eac35a111f89f3c74ce8c2ffc0ab607ad881be2 Reviewed-on: https://webrtc-review.googlesource.com/c/src/+/253220 Reviewed-by: Christoffer Jansson <jansson@google.com> Reviewed-by: Harald Alvestrand <hta@webrtc.org> Commit-Queue: Harald Alvestrand <hta@webrtc.org> Cr-Commit-Position: refs/heads/main@{#36131} 4 年前
Rewrite 'generate_sslroots' w/o OpenSSL. OpenSSL removed ability to generate C code: https://github.com/openssl/openssl/commit/a18cf8fc634a8834e505e60ebb7f947d4c0c2552 CL rewrites generation script to use pure Python asn1crypto library. The changes in generated code leading to huge diff in generated file: - Certificate array names are based on certificate fingerprints instead of semi-human readable names, which were not referenced externally; - Order of arrays in generated file matches the order of certificates as they are appeared in source pem file. Previously re-ordering happen due to writing temporary files on disk; Bug: webrtc:11710 Change-Id: Ie7a97b3658f6ccb397f0fd0c21d341934a2cc12e Reviewed-on: https://webrtc-review.googlesource.com/c/src/+/304642 Commit-Queue: Yury Yarashevich <yura.yaroshevich@gmail.com> Reviewed-by: Mirko Bonadei <mbonadei@webrtc.org> Reviewed-by: Harald Alvestrand <hta@webrtc.org> Cr-Commit-Position: refs/heads/main@{#40039} 2 年前
README.md

Generate rtc_base/ssl_roots.h

This directory contains a script to generate the content of rtc_base/ssl_roots.h, to update the SSL roots shipped by WebRTC follow this instructions:

  1. Download roots.pem from pki.goog or [curl.se][mozilla-cacert]

  2. Launch the script:

$ vpython3 tools_webrtc/sslroots/generate_sslroots.py <the pem file>
  1. Step 2 should have generated an ssl_roots.h file right next to the pem file.

  2. Overwrite rtc_base/ssl_roots.h with the newly generated one.