Jakob, I had a little trouble following your mail, despite being quite familiar with PEM, so hopefully you'll indulge me in making sure I've got your criticisms/complaints correct.
Your objection to the text report is that RFC 7468 requires generators to wrap lines (except the last line) at exactly 64 characters, right? That is, the textual report includes the base-64 data with no embedded newlines, and this causes your PEM decoder trouble, despite being able to easily inject them programmatically after you download the file. I'm not sure I fully understand the CSV objection, despite having inspected the file, so perhaps you can clarify a bit more. Perhaps the simplest approach would be that you could attach versions that look how you'd want. However, it might also be reasonable that if these concerns aren't easily addressable, perhaps not offering the feed is another option, since it seems a lot of work for something that should be and is naturally discouraged. On Tue, Oct 13, 2020 at 3:26 AM Jakob Bohm via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote: > On 2020-10-12 20:50, Kathleen Wilson wrote: > > On 10/7/20 1:09 PM, Jakob Bohm wrote: > >> Please note that at least the first CSV download is not really a CSV > >> file, as there are line feeds within each "PEM" value, and only one > >> column. It would probably be more useful as a simple concatenated PEM > >> file, as used by various software packages as a root store input format. > >> > > > > > > Here's updated reports... > > > > Text: > > > > > https://ccadb-public.secure.force.com/mozilla/IncludedRootsPEMTxt?TrustBitsInclude=Websites > > > > > > > https://ccadb-public.secure.force.com/mozilla/IncludedRootsPEMTxt?TrustBitsInclude=Email > > > These two are bad multi-pem files, as each certificate likes the > required line wrapping. > > The useful multi-pem format would keep the line wrapping from the > old report, but not insert stray quotes and commas. > > > > > CSV: > > > https://ccadb-public.secure.force.com/mozilla/IncludedRootsPEMCSV?TrustBitsInclude=Websites > > > > > > > https://ccadb-public.secure.force.com/mozilla/IncludedRootsPEMCSV?TrustBitsInclude=Email > > > > These two are like the old bad multi-pem reports, with the stray > internal line feeds after/before the ----- marker lines, but without the > internal linefeeds in the Base64 data. > > Useful actual-csv reports like IncludedCACertificateWithPEMReport.csv > would have to omit the marker lines and their linefeeds as well as the > internal linefeeds in the Base64 data in order to keep each CSV record > entirely on one line. > > > > > > > > > If the Text reports look good, I'll add them to the wiki page, > > https://wiki.mozilla.org/CA/Included_Certificates > > > > > > Thanks, > > Kathleen > > > > > Enjoy > > Jakob > -- > Jakob Bohm, CIO, Partner, WiseMo A/S. https://www.wisemo.com > Transformervej 29, 2860 Søborg, Denmark. Direct +45 31 13 16 10 > This public discussion message is non-binding and may contain errors. > WiseMo - Remote Service Management for PCs, Phones and Embedded > _______________________________________________ > dev-security-policy mailing list > dev-security-policy@lists.mozilla.org > https://lists.mozilla.org/listinfo/dev-security-policy > _______________________________________________ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy
