History

Taylor Brandstetter bee5983b8f Update set of known root certificates.

Removes:
AddTrust_External_Root_certificate
GlobalSign_Root_CA___R8_certificate

This has been automatically generated by running [1]. It also updates
[1] to produce the full ssl_roots.h file without requiring any manual
modifications.

See https://codereview.webrtc.org/1503473002 for some background about
the generator script.

[1] - https://cs.chromium.org/chromium/src/third_party/webrtc/tools_webrtc/sslroots/generate_sslroots.py

No-Presubmit: True
Bug: webrtc:12105
Change-Id: I0ee979bd8ab4e5f4ff4d55ad6f2fd21bf122a7ca
Reviewed-on: https://webrtc-review.googlesource.com/c/src/+/190761
Commit-Queue: Mirko Bonadei <mbonadei@webrtc.org>
Reviewed-by: Harald Alvestrand <hta@webrtc.org>
Reviewed-by: Mirko Bonadei <mbonadei@webrtc.org>
Cr-Commit-Position: refs/heads/master@{#32523}

2020-10-29 21:08:10 +00:00

generate_sslroots.py

Update set of known root certificates.

2020-10-29 21:08:10 +00:00

README.md

Fix the name of the file generated by generate_sslroots.py.

2020-04-25 13:37:30 +00:00

README.md

Generate rtc_base/ssl_roots.h

This directory contains a script to generate the content of rtc_base/ssl_roots.h, to update the SSL roots shipped by WebRTC follow this instructions:

Download roots.pem from pki.goog.
Launch the script:

$ python tools_webrtc/sslroots/generate_sslroots.py roots.pem

Step 2 should have generated an ssl_roots.h file right next to roots.pem.
Open rtc_base/ssl_roots.h, manually remove the old certificates and paste the ones from the ssl_roots.h file.
Delete the generated ssl_roots.h and roots.pem before creating the CL.