Skip to content

feat: embed Mozilla root CA bundle for TLS validation#217

Merged
ryanbreen merged 1 commit intomainfrom
feat/mozilla-ca-bundle
Feb 14, 2026
Merged

feat: embed Mozilla root CA bundle for TLS validation#217
ryanbreen merged 1 commit intomainfrom
feat/mozilla-ca-bundle

Conversation

@ryanbreen
Copy link
Owner

Summary

  • Embeds the full Mozilla root CA bundle (144 certificates) as concatenated DER blobs with an index table
  • Replaces the previous empty CA store, enabling burl and other TLS clients to validate server certificates out of the box

Test plan

  • x86-64 boot test passes
  • burl https://... successfully validates TLS certificates

🤖 Generated with Claude Code

Add the full Mozilla root CA bundle as concatenated DER blobs with an
index table, replacing the previous empty CA store. This enables burl
and other TLS clients to validate server certificates against trusted
root CAs without requiring an external certificate file.

Co-Authored-By: Ryan Breen <ryanbreen@gmail.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@ryanbreen ryanbreen merged commit d8f6afd into main Feb 14, 2026
2 of 4 checks passed
@ryanbreen ryanbreen deleted the feat/mozilla-ca-bundle branch February 14, 2026 23:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant