Hi Kathleen,

The new reports contain very useful information that was not easily available 
previously. However, it appears that the method in which the report 
information is downloaded is different from the other reports. For example, 
the report containing the PEM text of all Mozilla-trust serverAuth roots [1] 
is directly available as a CSV. However, one of the new reports, such as the 
PEM texts of all certificates in CCADB, must first be accessed via a browser 
and JavaScript be executed to download the report. This download process 
hinders automation for tooling that consume these reports, as now the report 
must periodically be downloaded by someone manually or the tooling must 
execute the JavaScript to download the actual report CSV. Would it be possible 
to modify the new reports so that they are readily available as CSV files?



Thanks,

Corey



[1] 
https://ccadb.my.salesforce-sites.com/mozilla/IncludedRootsDistrustTLSSSLPEMCSV?TrustBitsInclude=Websites



From: [email protected] <[email protected]> On Behalf Of Kathleen Wilson
Sent: Monday, May 15, 2023 6:13 PM
To: CCADB Public <[email protected]>
Subject: Re: Broken CRL URLs in CCADB



www.ccadb.org/resources <http://www.ccadb.org/resources>  is updated with the 
links as previously stated:

*  All Certificate Information (root and intermediate) in CCADB 
<https://ccadb.my.salesforce-sites.com/ccadb/AllCertificateRecordsCSVFormat> 
(CSV)

*  All Certificate PEMs (root and intermediate) in CCADB 
<https://ccadb.my.salesforce-sites.com/ccadb/AllCertificatePEMsCSVFormat> 
(CSV)

*  All Included Root Certificate Trust Bit Settings 
<https://ccadb.my.salesforce-sites.com/ccadb/AllIncludedRootCertsCSV>  (CSV)









>> We've also created another report:

>> https://ccadb.my.salesforce-sites.com/ccadb/AllCertificatePEMsCSVFormat

>> It has two columns: SHA-256 Fingerprint, X.509 Certificate (PEM)



> I can download this new CSV report if I access this URL in a browser, but 
> with wget I'm getting an HTML page instead.





Our Salesforce admin had to implement this AllCertificatePEMsCSVFormat report 
differently because otherwise we run into an error about the file being larger 
than 15MB. They have not been able to find a solution other than what they 
have currently implemented -- they had to create a lightning web component and 
then call it from the VisualForce page.



We're open to ideas about how to work around this 15MB limitation.



Cheers,

Kathleen





-- 
You received this message because you are subscribed to the Google Groups 
"CCADB Public" group.
To unsubscribe from this group and stop receiving emails from it, send an 
email to [email protected] <mailto:[email protected]> .
To view this discussion on the web visit 
https://groups.google.com/a/ccadb.org/d/msgid/public/97347114-1da1-47f6-9966-036faf352b8an%40ccadb.org
 
<https://groups.google.com/a/ccadb.org/d/msgid/public/97347114-1da1-47f6-9966-036faf352b8an%40ccadb.org?utm_medium=email&utm_source=footer>
 
.

-- 
You received this message because you are subscribed to the Google Groups 
"CCADB Public" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/ccadb.org/d/msgid/public/DM6PR14MB2186188F73E34F52EE12E88692799%40DM6PR14MB2186.namprd14.prod.outlook.com.

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to