Forum Discussion
CirrusPull all trusted root and intermediate certificate to single bundle
Hi All,
I want to create a single certificate bundle that contains all trusted root and intermediate certificates and also need to update it automatically. Currently, I'm doing it manually (download and update bundle) Is there any easy way to do it?
3 Replies
- whisperer
MVP
Maybe you can automate using Ansible Tower and quite a bit of Python magic. Otherwise, manual process as far as I know.
- yadgayan
I can use 2 workers (bash scripts) to update a single CA file based on trusted CA parties that IRD provided. (I never tried but just an idea). I can use the below list to pull the certificates
All intermediate list
https://ccadb.my.salesforce-sites.com/mozilla/PublicAllIntermediateCerts
All Root list
https://curl.se/docs/caextract.html
But I'm seeking any other easy way to do it?
- whisperer
Interesting, there is a certificate bundle management:
Check out this excerpt;
"In the Include URLs field, type the URL where remote CA bundles reside, and click Add to include that for generating the new CA bundle.
Only HTTPS URLs are allowed in the Include URLsfields"
