You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
54 lines
1.8 KiB
54 lines
1.8 KiB
#!/bin/sh |
|
# *************************************************************************** |
|
# * _ _ ____ _ |
|
# * Project ___| | | | _ \| | |
|
# * / __| | | | |_) | | |
|
# * | (__| |_| | _ <| |___ |
|
# * \___|\___/|_| \_\_____| |
|
# * |
|
# * Copyright (C) 1998 - 2015, Daniel Stenberg, <daniel@haxx.se>, et al. |
|
# * |
|
# * This software is licensed as described in the file COPYING, which |
|
# * you should have received as part of this distribution. The terms |
|
# * are also available at https://curl.haxx.se/docs/copyright.html. |
|
# * |
|
# * You may opt to use, copy, modify, merge, publish, distribute and/or sell |
|
# * copies of the Software, and permit persons to whom the Software is |
|
# * furnished to do so, under the terms of the COPYING file. |
|
# * |
|
# * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY |
|
# * KIND, either express or implied. |
|
# * |
|
# *************************************************************************** |
|
# This shell script creates a fresh ca-bundle.crt file for use with libcurl. |
|
# It extracts all ca certs it finds in the local Firefox database and converts |
|
# them all into PEM format. |
|
# |
|
db=`ls -1d $HOME/.mozilla/firefox/*default*` |
|
out=$1 |
|
|
|
if test -z "$out"; then |
|
out="ca-bundle.crt" # use a sensible default |
|
fi |
|
|
|
currentdate=`date` |
|
|
|
cat >$out <<EOF |
|
## |
|
## Bundle of CA Root Certificates |
|
## |
|
## Converted at: ${currentdate} |
|
## These were converted from the local Firefox directory by the db2pem script. |
|
## |
|
EOF |
|
|
|
|
|
certutil -L -h 'Builtin Object Token' -d $db | \ |
|
grep ' *[CcGTPpu]*,[CcGTPpu]*,[CcGTPpu]* *$' | \ |
|
sed -e 's/ *[CcGTPpu]*,[CcGTPpu]*,[CcGTPpu]* *$//' -e 's/\(.*\)/"\1"/' | \ |
|
sort | \ |
|
while read nickname; \ |
|
do echo $nickname | sed -e "s/Builtin Object Token://g"; \ |
|
eval certutil -d $db -L -n "$nickname" -a ; \ |
|
done >> $out |
|
|
|
|