node_extra_ca_certs_mozilla_bundle icon indicating copy to clipboard operation
node_extra_ca_certs_mozilla_bundle copied to clipboard

Thank you

Open nake89 opened this issue 2 years ago • 1 comments

I just wanted to thank you for creating this. Saved me a lot of headache!

I hope other people find this.

A lot of stackoverflow answers suggest: https://www.npmjs.com/package/ssl-root-cas

But that no longer works so this project is the only good alternative I have found. I tried to convert Mozillas raw certdata.txt myself but that was too much for me.

I was slightly concerned first because this project uses the following urls: https://ccadb-public.secure.force.com/mozilla/PublicAllIntermediateCertsWithPEMCSV https://ccadb-public.secure.force.com/mozilla/IncludedCACertificateReportPEMCSV

And they looked slightly shady. I have not heard of this force.com before. But after some research I noticed that these are official from Mozilla: https://wiki.mozilla.org/CA/Intermediate_Certificates If anyone is skeptical just check the Intermediate CA Certificates (CSV with PEM of raw certificate data) line. It is the same link.

So I want to thank you again for creating what seems the only alternative to ssl-root-cas. Have a great day! :)

nake89 avatar Apr 01 '22 18:04 nake89

Perhaps an amendment such as:


This module is designed to make all SSL sites that work with Mozilla Browser compatible with your nodejs script.

It creates a PEM file with resources from https://www.ccadb.org/resources (Common CA Database) which is run by Mozilla

The certificate reports used are hosted by Salesforce

  • https://ccadb-public.secure.force.com/mozilla/PublicAllIntermediateCertsWithPEMCSV
  • https://ccadb-public.secure.force.com/mozilla/IncludedCACertificateReportPEMCSV

And referenced in the Mozilla wiki:

  • https://wiki.mozilla.org/CA/Included_Certificates
  • https://wiki.mozilla.org/CA/Intermediate_Certificates

It generates three different bundles that can be used based on your needs:

  • Intermediate certificates only bundle ca_intermediate_bundle.pem
  • Root only certificates bundle ca_root_bundle.pem
  • Intermediate and Root certificates bundle ca_intermediate_root_bundle.pem

PeterTrotter avatar Feb 17 '23 12:02 PeterTrotter