"Nelson B Bolyard" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > Wan-Teh Chang wrote, On 2008-08-19 10:24: >> On Tue, Aug 19, 2008 at 9:23 AM, Dennis Darch <[EMAIL PROTECTED]> wrote: >>> In the next update of our software product we are using NSS 3.11.9 to >>> upgrade our LDAP client to support LDAP/SSL. I would like to include in >>> our >>> documentation a list of the public certificate authorities that would be >>> trusted without having to be added to the client's cert8.db. Where >>> would I >>> look in the source code to find that list? >> >> You can find the list as follows. >> >> 1. Check out the NSS 3.11.9 source tree from CVS. >> >> cvs -d :pserver:[EMAIL PROTECTED]:/cvsroot co -r >> NSS_3_11_9_RTM NSS >> >> Or download the source tar file from >> >> >> https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_11_9_RTM/src/nss-3.11.9.tar.gz >> >> 2. The list is in the source file >> >> mozilla/security/nss/lib/ckfw/builtins/certdata.txt > > which can be seen at > <http://mxr.mozilla.org/security/source/security/nss/lib/ckfw/builtins/certdata.txt> > > But I don't think that source file is suitable for use in documentation. >
The source file appears to provide the information I want, although it is a small part of the total file. I will use the copy from the source tar file that I compiled. Here is the list of authorities, as I am extracting it from this file. I have dropped indications of particular products from the various vendors, so there are many fewer authorities in my list than there are certificates in the file. Do you see any problems with my list? ABAecom (sub., Am. Bankers Assn.) AddTrust America Online AOL Time Warner Baltimore CyberTrust beTRUSTed Camerfirma Certplus Certum Comodo DigiCert Digital Signature Trust Co. DST Entrust.net Equifax Firmaprofesional GeoTrust GlobalSign Go Daddy GTE CyberTrust IPS NetLock QuoVadis RSA Security Communication Sonera Staat der Nederlanden StartCom Starfield Swisscom SwissSign Taiwan GRCA TC TrustCenter, Germany TDC Thawte TURKTRUST UTN DATACorp SGC UTN USERFirst UTN-USER First-Network Applications ValiCert Verisign Verisign/RSA Visa eCommerce Visa International Wells Fargo XRamp _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
