[Bug 448497] Review Request: ca-certificates - Mozilla CA root bundle package

[bugzilla at redhat.com]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: Review Request: ca-certificates - Mozilla CA root bundle package


https://bugzilla.redhat.com/show_bug.cgi?id=448497





------- Additional Comments From tmraz at redhat.com  2008-05-27 08:11 EST -------
(In reply to comment #3)
> > How do you create the ca-bundle.crt file? Could/should it be created from the
> > original Mozilla source file in the %build?
> 
> It's created in the same way as before; an off-line run of the mkcabundle.pl
> which extracts the data from the certdata.txt in Mozilla CVS.  Not sure what the
> advantage of putting the certdata.txt directly into CVS would be.

Does the mkcabundle.pl pull the file directly from the CVS?
IMO all the automated steps leading from the original source to the final
ca-bundle.crt should be included in the %build so anyone can reproduce the
process and see where the certificates originate from. If the mkcabundle just
pulls the source from CVS it should at least be included in the src.rpm so
anyone can reuse it to generate a fresh bundle.


-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.