Page MenuHomePhabricator

Update the extracted cURL SSL CA bundle
ClosedPublic

Authored by epriestley on Dec 2 2021, 10:55 PM.
Tags
None
Referenced Files
Unknown Object (File)
Fri, Mar 1, 8:29 PM
Unknown Object (File)
Feb 4 2024, 1:28 AM
Unknown Object (File)
Jan 24 2024, 8:07 AM
Unknown Object (File)
Jan 15 2024, 9:28 PM
Unknown Object (File)
Jan 7 2024, 5:41 AM
Unknown Object (File)
Jan 7 2024, 5:41 AM
Unknown Object (File)
Jan 1 2024, 1:27 AM
Unknown Object (File)
Dec 26 2023, 3:19 PM
Subscribers
None

Details

Summary

This default CA bundle file hasn't been updated since 2016. Update it to the current cURL extraction.

I believe this is notably impactful because of a new "Let's Encrypt" certificate, but didn't hunt down the particulars.

Test Plan

Confirmed the hash matches the published hash:

$ openssl dgst -sha256 resources/ssl/default.pem 
SHA256(resources/ssl/default.pem)= ae31ecb3c6e9ff3154cb7a55f017090448f88482f0e94ac927c0c67a1f33b9cf

This assurance is fairly meaningless since both the hash and file are published on curl.se. It didn't get corrupted by stellar radiation before it made it into Git, at least?

Diff Detail

Repository
rARC Arcanist
Branch
ca1
Lint
Lint Errors
SeverityLocationCodeMessage
Errorresources/ssl/default.pem:649TXT5Bad Charset
Unit
No Test Coverage
Build Status
Buildable 25596
Build 35405: Run Core Tests
Build 35404: arc lint + arc unit

Event Timeline

This revision was not accepted when it landed; it landed in state Needs Review.Dec 2 2021, 10:56 PM
This revision was landed with ongoing or failed builds.
epriestley requested review of this revision.
This revision was automatically updated to reflect the committed changes.