Skip to content

certdata: switch to upstream nss releases

Kevin Daudt requested to merge certdata-use-upstream-nss-release into master

certdata.txt is currently obtained from mozilla-central, the monorepo that mozilla uses. The file is part of a seperate project (NSS) that regularly gets imported in that repo.

Instead of obtaining it through the monorepo, we can directly obtain it from NSS releases. The advantage of that is that it is clearer what version of certdata.txt we are actually using.

An additional benefit is that we can use automation to make sure it is updated whenever a new release is made.

Merge request reports