ca-certificate-mini with signeture stripped?

[Seo Suchan]

write a patch about ca-certificates' mozilla/certdata2pem.py but using 
that adds some new depenency to buildsystem: python3-pyasn1 and 
python3-pyasn1-modules. but preprocessing it then download root 
certificates in some random places makes even less sense. not sure where 
to go

25. 7. 22. 19:29에 Rui Salvaterra 이(가) 쓴 글:
> Hi, Seo,
>
>
> On Tue, 22 Jul 2025 at 05:49, Seo Suchan <tjtncks at gmail.com> wrote:
>> both mbedtls and openssl doesn't actually check self-signness of turst
>> anchor, so one can remove signeture from root certificates and reduce
>> file size while keep compatablity. in current version this would save
>> about 60kB (223kb current, 158kb without signture) but not sure if this
>> is something worth making new package for
> It does make sense, at least for TINY targets. Feel free to send a
> patch or a pull request on GitHub.
>
>
> Cheers,
>
> Rui