README.md

Russian Certificate Authorities list XML-file converter

What is it?

Toolset converts "Gosuslugi" Russian Certificate Authorities list XML-file to standard PEM format. This should not be used in real life. Use the prepared data: https://github.com/schors/gost-russian-ca

In fact, this is the task of the Minsvyaz. It must do this, but it can't. I don't know why. I don't have to do this. But I can.

Features

• Version test
• git integration
• Very simple fast-maded code without strict error handling
• Powered by Usher II
• Rostelecom doesn't provide some HTTP features such as If-Modified-Since and Accept-Encoding. This is depressing

Requirements

• wget
• xmllint
• golang
• git (for git integration)

Very simple usage

Prepare directories:

mkdir -p ~/gost-russian-ca/certs

Compile:

go build -o ~/gost-russian-ca/gost-ca-parse

Just test it:

~/gost-ca-parse/parse.sh ~/gost-russian-ca/CA.xml ~/gost-russian-ca/certs ~/gost-russian-ca/gost-ca-parse

Put line in the crontab:

30 */4 * * * flock -x -n /tmp/gost-ca-parse.lock ~/gost-ca-parse/parse.sh ~/gost-russian-ca/CA.xml ~/gost-russian-ca/certs ~/gost-russian-ca/gost-ca-parse >/dev/null 2>&1

Links

• Gosuslugi e-trust Portal of Russian Federal Authority of using electronic signature
• Gosuslugi TLS Unknown Russian CA: https://habr.com/ru/post/655975/

For nuts

• YooMoney: https://sobe.ru/na/m2i2s077M0g2/

• PayPal: https://www.paypal.me/schorsx

• BTC: 18YFeAV12ktBxv9hy4wSiSCUXXAh5VR7gE

• LTC: LVXP51M8MrzaEQi6eBEGWpTSwckybqHU5s

• ETH: 0xba53cebd99157bf412a6bb91165e7dff29abd0a2

• BCH: 1FiXmPZ6eecHVaZbgdadAuzQLU9kqdSzVN

• ETC: 0xeb990a29d4f870b5fdbe331db90d9849ce3dae77

• ZEC: t1McmUhzdsauoXpiu2yCjNpnLKGGH225aAW

• TON: EQBrl8BNLWNVvmSCZDNexzoGQLIojnp4xNDT6Wf4AFX4S_57

---