--- /dev/null
+'***************************************************************************\r
+'* _ _ ____ _\r
+'* Project ___| | | | _ \| |\r
+'* / __| | | | |_) | |\r
+'* | (__| |_| | _ <| |___\r
+'* \___|\___/|_| \_\_____|\r
+'*\r
+'* Copyright (C) 1998 - 2010, Daniel Stenberg, <daniel@haxx.se>, et al.\r
+'*\r
+'* This software is licensed as described in the file COPYING, which\r
+'* you should have received as part of this distribution. The terms\r
+'* are also available at http://curl.haxx.se/docs/copyright.html.\r
+'*\r
+'* You may opt to use, copy, modify, merge, publish, distribute and/or sell\r
+'* copies of the Software, and permit persons to whom the Software is\r
+'* furnished to do so, under the terms of the COPYING file.\r
+'*\r
+'* This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY\r
+'* KIND, either express or implied.\r
+'*\r
+'***************************************************************************\r
+'* Script to fetch certdata.txt from Mozilla.org site and create a\r
+'* ca-bundle.crt for use with OpenSSL / libcurl / libcurl bindings\r
+'* Requires WinHttp.WinHttpRequest.5.1 and ADODB.Stream which are part of\r
+'* W2000 SP3 or later, WXP SP1 or later, W2003 Server SP1 or later.\r
+'* Hacked by Guenter Knauf\r
+'***************************************************************************\r
+Option Explicit\r
+Const myVersion = "0.3.5"\r
+\r
+Const myUrl = "http://mxr.mozilla.org/firefox/source/security/nss/lib/ckfw/builtins/certdata.txt?raw=1"\r
+\r
+Const myOpenssl = "openssl.exe"\r
+\r
+Const myCdSavF = FALSE ' Flag: save downloaded data to file certdata.txt\r
+Const myCaBakF = TRUE ' Flag: backup existing ca-bundle certificate\r
+Const myAskLiF = TRUE ' Flag: display certdata.txt license agreement\r
+Const myAskTiF = TRUE ' Flag: ask to include certificate text info\r
+\r
+'******************* Nothing to configure below! *******************\r
+Dim objShell, objNetwork, objFSO, objHttp\r
+Dim myBase, mySelf, myFh, myTmpFh, myCdData, myCdFile, myCaFile, myTmpName, myBakNum, myOptTxt, i\r
+Set objNetwork = WScript.CreateObject("WScript.Network")\r
+Set objShell = WScript.CreateObject("WScript.Shell")\r
+Set objFSO = WScript.CreateObject("Scripting.FileSystemObject")\r
+Set objHttp = WScript.CreateObject("WinHttp.WinHttpRequest.5.1")\r
+If objHttp Is Nothing Then Set objHttp = WScript.CreateObject("WinHttp.WinHttpRequest")\r
+myBase = Left(WScript.ScriptFullName, InstrRev(WScript.ScriptFullName, "\"))\r
+mySelf = Left(WScript.ScriptName, InstrRev(WScript.ScriptName, ".") - 1) & " " & myVersion\r
+myCdFile = Mid(myUrl, InstrRev(myUrl, "/") + 1, InstrRev(myUrl, "?") - InstrRev(myUrl, "/") - 1)\r
+myCaFile = "ca-bundle.crt"\r
+myTmpName = InputBox("Enter output filename:", mySelf, myCaFile)\r
+If Not (myTmpName = "") Then\r
+ myCaFile = myTmpName\r
+End If\r
+' Lets ignore SSL invalid cert errors\r
+objHttp.Option(4) = 256 + 512 + 4096 + 8192\r
+objHttp.SetTimeouts 0, 5000, 10000, 10000\r
+objHttp.Open "GET", myUrl, FALSE\r
+objHttp.setRequestHeader "User-Agent", WScript.ScriptName & "/" & myVersion\r
+objHttp.Send ""\r
+If Not (objHttp.statusText = "OK") Then\r
+ MsgBox("Failed to download '" & myCdFile & "': " & objHttp.statusText), vbCritical, mySelf\r
+ WScript.Quit 1\r
+End If\r
+' Convert data from ResponseBody instead of using ResponseText because of UTF-8\r
+myCdData = ConvertBinaryData(objHttp.ResponseBody)\r
+Set objHttp = Nothing\r
+' Write received data to file if enabled\r
+If (myCdSavF = TRUE) Then\r
+ Set myFh = objFSO.OpenTextFile(myCdFile, 2, TRUE)\r
+ myFh.Write myCdData\r
+ myFh.Close\r
+End If\r
+' Backup exitsing ca-bundle certificate file\r
+If (myCaBakF = TRUE) Then\r
+ If objFSO.FileExists(myCaFile) Then\r
+ Dim myBakFile, b\r
+ b = 1\r
+ myBakFile = myCaFile & ".~" & b & "~"\r
+ While objFSO.FileExists(myBakFile)\r
+ b = b + 1\r
+ myBakFile = myCaFile & ".~" & b & "~"\r
+ Wend\r
+ Set myTmpFh = objFSO.GetFile(myCaFile)\r
+ myTmpFh.Move myBakFile\r
+ End If\r
+End If\r
+If (myAskTiF = TRUE) Then\r
+ If (6 = objShell.PopUp("Do you want to include text information about each certificate?" & vbLf & _\r
+ "(requires OpenSSL commandline in current directory or in search path)",, _\r
+ mySelf, vbQuestion + vbYesNo + vbDefaultButton2)) Then\r
+ myOptTxt = TRUE\r
+ Else\r
+ myOptTxt = FALSE\r
+ End If\r
+End If\r
+' Process the received data\r
+Dim myLines, myPattern, myInsideCert, myInsideLicense, myLicenseText, myNumCerts\r
+Dim myLabel, myOctets, myData, myPem, myRev, j\r
+myData = ""\r
+myLines = Split(myCdData, vbLf, -1)\r
+Set myFh = objFSO.OpenTextFile(myCaFile, 2, TRUE)\r
+myFh.Write "##" & vbLf\r
+myFh.Write "## " & myCaFile & " -- Bundle of CA Root Certificates" & vbLf\r
+myFh.Write "##" & vbLf\r
+myFh.Write "## Converted at: " & Now & vbLf\r
+myFh.Write "##" & vbLf\r
+myFh.Write "## This is a bundle of X.509 certificates of public Certificate Authorities" & vbLf\r
+myFh.Write "## (CA). These were automatically extracted from Mozilla's root certificates" & vbLf\r
+myFh.Write "## file (certdata.txt). This file can be found in the mozilla source tree:" & vbLf\r
+myFh.Write "## '/mozilla/security/nss/lib/ckfw/builtins/certdata.txt'" & vbLf\r
+myFh.Write "##" & vbLf\r
+myFh.Write "## It contains the certificates in PEM format and therefore" & vbLf\r
+myFh.Write "## can be directly used with curl / libcurl / php_curl, or with" & vbLf\r
+myFh.Write "## an Apache+mod_ssl webserver for SSL client authentication." & vbLf\r
+myFh.Write "## Just configure this file as the SSLCACertificateFile." & vbLf\r
+myFh.Write "##" & vbLf\r
+myFh.Write vbLf\r
+For i = 0 To UBound(myLines)\r
+ If InstrRev(myLines(i), "CKA_LABEL ") Then\r
+ myPattern = "^CKA_LABEL\s+[A-Z0-9]+\s+""(.+?)"""\r
+ myLabel = RegExprFirst(myPattern, myLines(i))\r
+ End If\r
+ If (myInsideCert = TRUE) Then\r
+ If InstrRev(myLines(i), "END") Then\r
+ myInsideCert = FALSE\r
+ myFh.Write myLabel & vbLf\r
+ myFh.Write String(Len(myLabel), "=") & vbLf\r
+ myPem = "-----BEGIN CERTIFICATE-----" & vbLf & _\r
+ Base64Encode(myData) & vbLf & _\r
+ "-----END CERTIFICATE-----" & vbLf\r
+ If (myOptTxt = FALSE) Then\r
+ myFh.Write myPem & vbLf\r
+ Else\r
+ Dim myCmd, myRval, myTmpIn, myTmpOut\r
+ myTmpIn = objFSO.GetSpecialFolder(2).Path & "\" & objFSO.GetTempName\r
+ myTmpOut = objFSO.GetSpecialFolder(2).Path & "\" & objFSO.GetTempName\r
+ Set myTmpFh = objFSO.OpenTextFile(myTmpIn, 2, TRUE)\r
+ myTmpFh.Write myPem\r
+ myTmpFh.Close\r
+ myCmd = myOpenssl & " x509 -md5 -fingerprint -text -inform PEM" & _\r
+ " -in " & myTmpIn & " -out " & myTmpOut\r
+ myRval = objShell.Run (myCmd, 0, TRUE)\r
+ objFSO.DeleteFile myTmpIn, TRUE\r
+ If Not (myRval = 0) Then\r
+ MsgBox("Failed to process PEM cert with OpenSSL commandline!"), vbCritical, mySelf\r
+ objFSO.DeleteFile myTmpOut, TRUE\r
+ WScript.Quit 3\r
+ End If\r
+ Set myTmpFh = objFSO.OpenTextFile(myTmpOut, 1)\r
+ myFh.Write myTmpFh.ReadAll & vbLf\r
+ myTmpFh.Close\r
+ objFSO.DeleteFile myTmpOut, TRUE\r
+ End If\r
+ myData = ""\r
+ myNumCerts = myNumCerts + 1\r
+ Else\r
+ myOctets = Split(myLines(i), "\")\r
+ For j = 1 To UBound(myOctets)\r
+ myData = myData & Chr(CByte("&o" & myOctets(j)))\r
+ Next\r
+ End If\r
+ End If\r
+ If InstrRev(myLines(i), "CVS_ID ") Then\r
+ myPattern = "^CVS_ID\s+""(.+?)"""\r
+ myRev = RegExprFirst(myPattern, myLines(i))\r
+ myFh.Write "# " & myRev & vbLf & vbLf\r
+ End If\r
+ If InstrRev(myLines(i), "CKA_VALUE MULTILINE_OCTAL") Then\r
+ myInsideCert = TRUE\r
+ End If\r
+ If InstrRev(myLines(i), "***** BEGIN LICENSE BLOCK *****") Then\r
+ myInsideLicense = TRUE\r
+ End If\r
+ If (myInsideLicense = TRUE) Then\r
+ myFh.Write myLines(i) & vbLf\r
+ myLicenseText = myLicenseText & Mid(myLines(i), 2) & vbLf\r
+ End If\r
+ If InstrRev(myLines(i), "***** END LICENSE BLOCK *****") Then\r
+ myInsideLicense = FALSE\r
+ If (myAskLiF = TRUE) Then\r
+ If Not (6 = objShell.PopUp(myLicenseText & vbLf & _\r
+ "Do you agree to the license shown above (required to proceed) ?",, _\r
+ mySelf, vbQuestion + vbYesNo + vbDefaultButton1)) Then\r
+ myFh.Close\r
+ objFSO.DeleteFile myCaFile, TRUE\r
+ WScript.Quit 2\r
+ End If\r
+ End If\r
+ End If\r
+Next\r
+myFh.Close\r
+objShell.PopUp "Done (" & myNumCerts & " CA certs processed).", 20, mySelf, vbInformation\r
+WScript.Quit 0\r
+\r
+Function ConvertBinaryData(arrBytes)\r
+ Dim objStream\r
+ Set objStream = CreateObject("ADODB.Stream")\r
+ objStream.Open\r
+ objStream.Type = 1\r
+ objStream.Write arrBytes\r
+ objStream.Position = 0\r
+ objStream.Type = 2\r
+ objStream.Charset = "ascii"\r
+ ConvertBinaryData = objStream.ReadText\r
+ Set objStream = Nothing\r
+End Function\r
+\r
+Function RegExprFirst(SearchPattern, TheString)\r
+ Dim objRegExp, Matches ' create variables.\r
+ Set objRegExp = New RegExp ' create a regular expression.\r
+ objRegExp.Pattern = SearchPattern ' sets the search pattern.\r
+ objRegExp.IgnoreCase = TRUE ' set to ignores case.\r
+ objRegExp.Global = TRUE ' set to gloabal search.\r
+ Set Matches = objRegExp.Execute(TheString) ' do the search.\r
+ If (Matches.Count) Then\r
+ RegExprFirst = Matches(0).SubMatches(0) ' return first match.\r
+ Else\r
+ RegExprFirst = ""\r
+ End If\r
+ Set objRegExp = Nothing\r
+End Function\r
+\r
+Function Base64Encode(inData)\r
+ Const Base64 = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"\r
+ Dim cOut, sOut, I\r
+\r
+ 'For each group of 3 bytes\r
+ For I = 1 To Len(inData) Step 3\r
+ Dim nGroup, pOut, sGroup\r
+\r
+ 'Create one long from this 3 bytes.\r
+ nGroup = &H10000 * Asc(Mid(inData, I, 1)) + _\r
+ &H100 * MyASC(Mid(inData, I + 1, 1)) + _\r
+ MyASC(Mid(inData, I + 2, 1))\r
+\r
+ 'Oct splits the long To 8 groups with 3 bits\r
+ nGroup = Oct(nGroup)\r
+\r
+ 'Add leading zeros\r
+ nGroup = String(8 - Len(nGroup), "0") & nGroup\r
+\r
+ 'Convert To base64\r
+ pOut = Mid(Base64, CLng("&o" & Mid(nGroup, 1, 2)) + 1, 1) & _\r
+ Mid(Base64, CLng("&o" & Mid(nGroup, 3, 2)) + 1, 1) & _\r
+ Mid(Base64, CLng("&o" & Mid(nGroup, 5, 2)) + 1, 1) & _\r
+ Mid(Base64, CLng("&o" & Mid(nGroup, 7, 2)) + 1, 1)\r
+\r
+ 'Add the part To OutPut string\r
+ sOut = sOut + pOut\r
+\r
+ 'Add a new line For Each 76 chars In dest (76*3/4 = 57)\r
+ If (I < Len(inData) - 2) Then\r
+ If (I + 2) Mod 57 = 0 Then sOut = sOut & vbLf\r
+ End If\r
+ Next\r
+ Select Case Len(inData) Mod 3\r
+ Case 1: '8 bit final\r
+ sOut = Left(sOut, Len(sOut) - 2) & "=="\r
+ Case 2: '16 bit final\r
+ sOut = Left(sOut, Len(sOut) - 1) & "="\r
+ End Select\r
+ Base64Encode = sOut\r
+End Function\r
+\r
+Function MyASC(OneChar)\r
+ If OneChar = "" Then MyASC = 0 Else MyASC = Asc(OneChar)\r
+End Function\r
+\r
+\r
projects / curl / commitdiff