Fixed certdata source

Makefile

 all:
 	tar xf make-ca-1.7.tar.xz
+	patch -Np1 -d make-ca-1.7 < make-ca-1.7-fix_source.patch
 	$(MAKE) -C make-ca-1.7
 	$(MAKE) -C make-ca-1.7 install
 	make-ca -f -g

make-ca-1.7-fix_source.patch

+diff -uNr make-ca-1.7/make-ca make-ca-1.7-fix_source/make-ca
+--- make-ca-1.7/make-ca	2020-03-08 15:25:46.000000000 +1030
++++ make-ca-1.7-fix_source/make-ca	2025-04-10 08:59:40.590266018 +0930
+@@ -35,7 +35,7 @@
+     NSSDB="${PKIDIR}/nssdb"
+     LOCALDIR="${SSLDIR}/local"
+     DESTDIR=""
+-    URL="https://hg.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt"
++    URL="https://hg-edge.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt"
+ fi
+ 
+ # Some data in the certs have UTF-8 characters
+@@ -569,7 +569,7 @@
+   if test "${PROXY}x" != "x"; then
+     SARGS="${SARGS} -proxy ${PROXY}"
+   fi
+-  echo GET ${_url} | \
++  printf "GET ${_url} HTTP/1.1\nConnection: no-keep-alive\n\n" | \
+   ${OPENSSL} s_client ${SARGS} 2> /dev/null > "${TEMPDIR}/certdata.txt.log"
+   unset _url
+ 
+@@ -592,7 +592,7 @@
+   fi
+ 
+   # Download the new file
+-  echo GET ${URL} | \
++  printf "GET ${URL} HTTP/1.1\nConnection: no-keep-alive\n\n" | \
+   ${OPENSSL} s_client ${SARGS} 2> /dev/null >> "${CERTDATA}"
+   _line=$(( $(grep -n "certdata.txt" "${CERTDATA}" | cut -d ":" -f 1) - 1))
+   sed -e "1,${_line}d" -i "${CERTDATA}"