Saúl Ibarra Corretgé fabc3a5aa7 Add script to generate ssl_roots.h from Mozilla's CA bundle
Bug: webrtc:11710
Change-Id: I6eac35a111f89f3c74ce8c2ffc0ab607ad881be2
Reviewed-on: https://webrtc-review.googlesource.com/c/src/+/253220
Reviewed-by: Christoffer Jansson <jansson@google.com>
Reviewed-by: Harald Alvestrand <hta@webrtc.org>
Commit-Queue: Harald Alvestrand <hta@webrtc.org>
Cr-Commit-Position: refs/heads/main@{#36131}
2022-03-04 13:50:58 +00:00

22 lines
747 B
Markdown

# Generate rtc_base/ssl_roots.h
This directory contains a script to generate the content of
[rtc_base/ssl_roots.h][ssl-roots-header], to update the SSL roots shipped
by WebRTC follow this instructions:
1. Download roots.pem from [pki.goog][pki-goog] or [curl.se][mozilla-cacert]
2. Launch the script:
```
$ vpython3 tools_webrtc/sslroots/generate_sslroots.py <the pem file>
```
3. Step 2 should have generated an ssl_roots.h file right next to the pem file.
4. Overwrite rtc_base/ssl_roots.h with the newly generated one.
[ssl-roots-header]: https://cs.chromium.org/chromium/src/third_party/webrtc/rtc_base/ssl_roots.h
[pki-goog]: https://www.google.com/url?q=https://pki.google.com/roots.pem
[mozila-cacert]: https://curl.se/ca/cacert.pem