From 5e26d52d706f129769e1d620a595c78498ca8cff Mon Sep 17 00:00:00 2001
From: Andrey Prygunkov <hugbug@users.sourceforge.net>
Date: Fri, 1 Oct 2021 00:08:45 +0200
Subject: [PATCH] #784: removed expired root certificate
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

 from ca root certificate store: certificate “DST Root CA X3” used by
Lets Encrypt
---
 linux/build-nzbget       | 2 ++
 windows/build-nzbget.bat | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/linux/build-nzbget b/linux/build-nzbget
index 3522984a..5ecad36e 100755
--- a/linux/build-nzbget
+++ b/linux/build-nzbget
@@ -184,6 +184,8 @@ UpdateFromRepository()
         echo "Updating root certificates"
         cd ../setup
         curl --remote-name --time-cond cacert.pem https://curl.se/ca/cacert.pem
+        # remove expired DST Root CA X3 certificate
+        sed '/^DST Root CA X3$/,/^-----END CERTIFICATE-----$/d;' -i cacert.pem
         cd $BUILDDIR
     fi
 }
diff --git a/windows/build-nzbget.bat b/windows/build-nzbget.bat
index 29bc0206..5913aa78 100644
--- a/windows/build-nzbget.bat
+++ b/windows/build-nzbget.bat
@@ -95,6 +95,8 @@ echo Updating root certificates
 cd image
 %CURL% --remote-name --time-cond cacert.pem https://curl.se/ca/cacert.pem
 if errorlevel 1 goto BUILD_FAILED
+rem remove expired DST Root CA X3 certificate
+%SED% -e "/^DST Root CA X3$/,/^-----END CERTIFICATE-----$/d;" -i cacert.pem
 cd ..
 
 cd tmp\nzbget-%VERSION%