moodle/lib/cacert.txt

CA Certificates for cURL library
================================

The file cacert.pem can be downloaded from http://curl.haxx.se/docs/caextract.html
or created directly from http://mxr.mozilla.org/mozilla/source/security/nss/lib/ckfw/builtins/certdata.txt
using mk-ca-bundle conversion tool.

The file is licensed under the same licenses as the Mozilla source file:
MPL 1.1, GPL v2.0 or LGPL 2.1

This file is by default used in all Windows installations that do not have
any "curl.cainfo =" specified in php.ini

It is also possible to force using of arbitrary CA bundle by putting it
into $CFG->dataroot/moodleorgca.crt, this may be useful especially on
non-windows servers with outdated system certificates.

More information at http://docs.moodle.org/en/SSL_certificate_for_moodle.org

Petr Skoda (skodak)
MDL-39356 add ca certificate bundles for cURL This is necessary because PHP in Windows does not have any certificates and some nix systems have outdated or missing ca bundles too. The order is: 1/ dataroot/moodleorgca.crt always wins - needs to be added manually by admin 2/ php.ini setting "curl.cainfo" is next 3/ on Windows libdir/cacert.pem is used because it does not have any default cert bundles 4/ system default is the last - the previous value, ok for properly configured nix systems 2013-04-28 17:42:06 +02:00			`CA Certificates for cURL library`
			`================================`

			`The file cacert.pem can be downloaded from http://curl.haxx.se/docs/caextract.html`
			`or created directly from http://mxr.mozilla.org/mozilla/source/security/nss/lib/ckfw/builtins/certdata.txt`
			`using mk-ca-bundle conversion tool.`

			`The file is licensed under the same licenses as the Mozilla source file:`
			`MPL 1.1, GPL v2.0 or LGPL 2.1`

			`This file is by default used in all Windows installations that do not have`
			`any "curl.cainfo =" specified in php.ini`

			`It is also possible to force using of arbitrary CA bundle by putting it`
			`into $CFG->dataroot/moodleorgca.crt, this may be useful especially on`
			`non-windows servers with outdated system certificates.`

			`More information at http://docs.moodle.org/en/SSL_certificate_for_moodle.org`

			`Petr Skoda (skodak)`