Skip to content
This repository was archived by the owner on Nov 6, 2023. It is now read-only.

Update CAcert.xml #10733

Closed
ghost wants to merge 1 commit into from
Closed

Update CAcert.xml #10733

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
50 changes: 12 additions & 38 deletions src/chrome/content/rules/CAcert.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,43 +1,17 @@

<!--
Disabled by https-everywhere-checker because:
Fetch error: http://cacert.org/ => https://cacert.org/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
Fetch error: http://blog.cacert.org/ => https://blog.cacert.org/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
Fetch error: http://bugs.cacert.org/ => https://bugs.cacert.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
Fetch error: http://l10n.cacert.org/ => https://l10n.cacert.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
Fetch error: http://translations.cacert.org/ => https://translations.cacert.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
Fetch error: http://wiki.cacert.org/ => https://wiki.cacert.org/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
Fetch error: http://www.cacert.org/ => https://www.cacert.org/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
Fetch error: http://cacert.net/ => https://cacert.net/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
Fetch error: http://www.cacert.net/ => https://www.cacert.net/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
Fetch error: http://cacert.com/ => https://cacert.com/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
Fetch error: http://www.cacert.com/ => https://www.cacert.com/: (60, 'SSL certificate problem: self signed certificate in certificate chain')

-->
<ruleset name="CACert.org (CAcert)" platform="cacert" default_off='failed ruleset test'>
<target host= "cacert.org" />
<target host= "blog.cacert.org" />
<target host= "bugs.cacert.org" />
<target host= "l10n.cacert.org" />
<ruleset name="CACert.org (CAcert)" platform="cacert" default_off="cacert">
<target host="cacert.org" />
<target host="blog.cacert.org" />
<target host="bugs.cacert.org" />
<target host="l10n.cacert.org" />
<target host="translations.cacert.org" />
<target host= "wiki.cacert.org" />
<target host= "www.cacert.org" />
<target host= "cacert.net" />
<target host= "www.cacert.net" />
<target host= "cacert.com" />
<target host= "www.cacert.com" />

<securecookie host="^\w+\.cacert\.org$" name=".+" />
<target host="wiki.cacert.org" />
<target host="www.cacert.org" />
<target host="cacert.net" />
<target host="www.cacert.net" />
<target host="cacert.com" />
<target host="www.cacert.com" />

<!-- this currently errs on the side of not breaking things over security -->
<exclusion pattern="\.crt" />
<test url="http://www.cacert.org/certs/root.crt" />
<exclusion pattern="\.crl" />
<test url="http://crl.cacert.org/revoke.crl" />
<!-- client certificate required, but ruleset checker doesn't have any -->
<!-- cats.cacert.org -->
<!-- ocsp.cacert.org -->
<!-- secure.cacert.org -->
<securecookie host=".+" name=".+" />

<rule from="^http:"
to="https:" />
Expand Down