Commit Graph

5 Commits

Author SHA1 Message Date
klzgrad
72b146cf70 net/cert: Fix iwyu 2024-10-07 17:43:47 +08:00
klzgrad
a82b5feb4c net/cert: Handle AIA response in PKCS#7 format 2024-10-07 17:43:47 +08:00
klzgrad
9ae0ede106 net/cert: Use builtin verifier on Android and Linux 2024-10-07 17:43:47 +08:00
klzgrad
91de5ec9c0 net/cert: Add SystemTrustStoreStaticUnix
It reads CA certificates from:

* The file in environment variable SSL_CERT_FILE
* The first available file of

/etc/ssl/certs/ca-certificates.crt (Debian/Ubuntu/Gentoo etc.)
/etc/pki/tls/certs/ca-bundle.crt (Fedora/RHEL 6)
/etc/ssl/ca-bundle.pem (OpenSUSE)
/etc/pki/tls/cacert.pem (OpenELEC)
/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem (CentOS/RHEL 7)
/etc/ssl/cert.pem (Alpine Linux)

* Files in the directory of environment variable SSL_CERT_DIR
* Files in the first available directory of

/etc/ssl/certs (SLES10/SLES11, https://golang.org/issue/12139)
/etc/pki/tls/certs (Fedora/RHEL)
/system/etc/security/cacerts (Android)
2024-10-07 17:43:47 +08:00
importer
009ee28363 Import chromium-129.0.6668.81 2024-10-06 12:16:12 +08:00