Skip to content

Master refactor #10

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 5 commits into
base: master
Choose a base branch
from
Open

Master refactor #10

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
813b2af
Spliting the parsing functions out, so they can be used as a library.
Jul 7, 2014
67ed07e
Updated the fingerprint and hex decoding functions. Added simple test…
Jul 7, 2014
bd4271e
The inital removal of the getLine code, and replace with bufio.Scanner
Jul 8, 2014
0ce1905
Cleaned up the code, correct function names and with extra tests and …
Jul 8, 2014
4c498af
Updated the README.md to show how to use as a library
Jul 8, 2014
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 12 additions & 2 deletions README.markdown
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,9 +7,19 @@ When people need a list of root certificates, they often turn to Mozilla's. Howe

Several people have written quick scripts to try and convert this into PEM format, but they often miss something critical: some certificates are explicitly _distrusted_. These include the DigiNotar certificates and the misissued COMODO certificates. If you don't parse the trust records from the NSS data file, then you end up trusting these!

So this is a tool that I wrote for converting the NSS file to PEM format which is also aware of the trust records. It can be built with Go1. See http://golang.org/doc/install.html, but don't pass "-u release" when fetching the repository.
So this is a tool that was written for converting the NSS file to PEM format which is also aware of the trust records. It can be built with Go 1.3. See http://golang.org/doc/install.html, but don't pass "-u release" when fetching the repository.

Once you have Go installed please do the following:

% curl https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/builtins/certdata.txt -o certdata.txt
% go run convert_mozilla_certdata.go > certdata.new
% go run main.go > certdata.new

To use as a library import it like the following:

import "github.com/njones/nss/nss"

Then use:

output := nss.ParseInput(file)

This will give you a slice of nss.Blocks that contain the x509 cert along with a UTF-8 encode label. This can then be added to things like a TrustPool http://golang.org/pkg/crypto/x509/#CertPool
Loading