From dfc2cbb07dbf70683680b1a9e10b60c0fbf6f8cf5cd391df4aa7c266bec4b2f4 Mon Sep 17 00:00:00 2001 From: Marcus Meissner Date: Tue, 4 Feb 2025 10:28:18 +0000 Subject: [PATCH] - remove extensive signature printing in comments of the cert bundle - Define two macros to break a build cycle with p11-kit. OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates-mozilla?expand=0&rev=157 --- ca-certificates-mozilla.changes | 8 +++++++- certdata2pem.py | 2 +- 2 files changed, 8 insertions(+), 2 deletions(-) diff --git a/ca-certificates-mozilla.changes b/ca-certificates-mozilla.changes index d5d6b9f..6b6c41b 100644 --- a/ca-certificates-mozilla.changes +++ b/ca-certificates-mozilla.changes @@ -1,7 +1,13 @@ +------------------------------------------------------------------- +Tue Feb 4 09:55:01 UTC 2025 - Dirk Müller + +- remove extensive signature printing in comments of the cert + bundle + ------------------------------------------------------------------- Thu Jan 23 08:23:15 UTC 2025 - Steve Kowalik -- Define two macros to break a build cycle with p11-kit. +- Define two macros to break a build cycle with p11-kit. ------------------------------------------------------------------- Sun Dec 15 21:07:58 UTC 2024 - Dirk Müller diff --git a/certdata2pem.py b/certdata2pem.py index e0aa79b..e0ee4f7 100644 --- a/certdata2pem.py +++ b/certdata2pem.py @@ -280,7 +280,7 @@ for tobj in objects: # obtain certificate information suitable as a comment comment_fname = "comment-" + fname fcout = open(comment_fname, "w") - comment_command = ["openssl", "x509", "-in", cert_fname, "-noout", "-text"] + comment_command = ["openssl", "x509", "-in", cert_fname, "-noout", "-text", "-certopt", "no_pubkey,no_sigdump"] subprocess.call(comment_command, stdout=fcout) fcout.close() sed_command = ["sed", "--in-place", "s/^/#/", comment_fname]