mollyim/webrtc
1
0
Fork 0
mirror of https://github.com/mollyim/webrtc.git synced 2025-05-13 22:00:47 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions
webrtc/tools_webrtc/sslroots
History
Raman Budny 9790e546fc Adapt generate_sslroots.py to work with different openssl versions 
Command [1] on openssl 1.1.1m and newer generates output
containing "unsigned char the_(subject_name|public_key|certificate)"
records, making it incompatible with current version of the script
that relies on "unsigned char XXX_".

This patch handles both cases by using regular expression so as
to match strings and provide an adequate replacement.

[1] - openssl x509 -in <path-to-cacert.pem> -noout -C

Bug: webrtc:11710
Change-Id: I46b87d2980ec2dd26660b93fcf9019254950ce12
Reviewed-on: https://webrtc-review.googlesource.com/c/src/+/257420
Reviewed-by: Harald Alvestrand <hta@webrtc.org>
Reviewed-by: Taylor Brandstetter <deadbeef@webrtc.org>
Reviewed-by: Christoffer Jansson <jansson@webrtc.org>
Commit-Queue: Christoffer Jansson <jansson@webrtc.org>
Cr-Commit-Position: refs/heads/main@{#38173}
2022-09-22 15:15:20 +00:00
..
generate_sslroots.py Adapt generate_sslroots.py to work with different openssl versions 2022-09-22 15:15:20 +00:00
README.md Add script to generate ssl_roots.h from Mozilla's CA bundle 2022-03-04 13:50:58 +00:00

README.md

Generate rtc_base/ssl_roots.h

This directory contains a script to generate the content of rtc_base/ssl_roots.h, to update the SSL roots shipped by WebRTC follow this instructions:

  1. Download roots.pem from pki.goog or [curl.se][mozilla-cacert]

  2. Launch the script:

$ vpython3 tools_webrtc/sslroots/generate_sslroots.py <the pem file>

  1. Step 2 should have generated an ssl_roots.h file right next to the pem file.

  2. Overwrite rtc_base/ssl_roots.h with the newly generated one.