Re: [Bug-gnuzilla] Icecat without built-in CAs

[Emmanuel Revah]

On 2012/11/14 16:10, Loic J. Duros wrote:

> The certificates are located in
> security/nss/lib/ckfw/builtins/certdata.txt  -- edit this file to
> remove what you need.
>
> I wasn't about this part up until now:
> Run gmake generate in the directory to regenerate certdata.c that's
> located in that directory


Thanks, I removed everything after: CKA_LABEL UTF8 "Mozilla Builtin 
Roots"

So far Icecat doesn't recognise any other Root CA other than my own 
which is what I want. However I think I should probably remove a few 
more lines. Currently the default CAs are in the list though they don't 
seem to apply.

I ran "make generate" instead of gmake btw, which seems to work the 
same.


I will retry with other edits of certdata.txt and see what works best. 
Thanks again.


--
Emmanuel Revah
http://manurevah.com