Curl: [ curl-Bugs-1706732 ] Update ca-bundle.crt

From: SourceForge.net <noreply_at_sourceforge.net>
Date: Tue, 24 Apr 2007 13:21:34 -0700

Bugs item #1706732, was opened at 2007-04-24 18:19
Message generated for change (Comment added) made by bagder
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=1706732&group_id=976

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: https
Group: wrong content
>Status: Closed
>Resolution: Rejected
Priority: 5
Private: No
Submitted By: George Spanos (spookyshadow)
Assigned to: Daniel Stenberg (bagder)
Summary: Update ca-bundle.crt

Initial Comment:
Missing America Online Root Certification Authority 1 from ca-bundle.crt file. Below is the intermediate key which you can extract the information you need:

----------------------------------------------------------------------

>Comment By: Daniel Stenberg (bagder)
Date: 2007-04-24 22:21

Message:
Logged In: YES
user_id=1110
Originator: NO

Thanks, but no thanks.

I've been saying this in the past (but failed to find a mailing list
archive link):

The CA cert bundle in the curl package is very old and severly outdated,
but updating it is a major task and I'm not able to pull that through
(without at suitable team of volunteers). So, instead of randomly accept
new certs I just reject all updates and point out that you should rather
find your CA cert bundle elsewhere if you want a fine, complete and
up-to-date bundle.

I auto-convert and host the bundle from the Mozilla project:

http://curl.haxx.se/docs/caextract.html

----------------------------------------------------------------------

You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=1706732&group_id=976
Received on 2007-04-24

curl-tracker mailing list Archives

[ curl-Bugs-1706732 ] Update ca-bundle.crt