ydb/certs/update-certs.py

#!/usr/bin/env python2
# -*- coding: utf-8 -*-

import urllib2

COMMON_ROOT_CAS_URL = "https://mkcert.org/generate"
YANDEX_INTERNAL_CAS_URL = "https://crls.yandex.net/allCAs.pem"

def get_text(url):
    return urllib2.urlopen(url).read()

common_root_cas = get_text(COMMON_ROOT_CAS_URL)
yandex_internal_cas = get_text(YANDEX_INTERNAL_CAS_URL)

with open("cacert.pem", "wt") as target:
    target.write(common_root_cas)
    target.write(yandex_internal_cas)

with open("yandex_internal.pem", "wt") as target:
    target.write(yandex_internal_cas)