{"id":414,"date":"2008-08-21T11:13:42","date_gmt":"2008-08-21T09:13:42","guid":{"rendered":"http:\/\/daniel.haxx.se\/blog\/?p=414"},"modified":"2008-08-25T13:22:18","modified_gmt":"2008-08-25T11:22:18","slug":"ca-cert-bundle-from-firefox","status":"publish","type":"post","link":"https:\/\/daniel.haxx.se\/blog\/2008\/08\/21\/ca-cert-bundle-from-firefox\/","title":{"rendered":"CA cert bundle from Firefox"},"content":{"rendered":"<p><a href=\"http:\/\/curl.haxx.se\/libcurl\/\"><img loading=\"lazy\" decoding=\"async\" class=\"alignright alignnone size-full wp-image-108\" style=\"float: right;\" title=\"libcurl\" src=\"http:\/\/daniel.haxx.se\/blog\/wp-content\/uploads\/2007\/09\/ds-libcurlicon.png\" alt=\"\" width=\"99\" height=\"37\" \/><\/a>It could be interesting to note that <a href=\"http:\/\/curl.haxx.se\/mail\/lib-2008-08\/0324.html\">extracting all the cacerts from your local Firefox<\/a> installation isn&#8217;t that tricky, if you just use some of the magic that are at hand with the <a href=\"http:\/\/www.mozilla.org\/projects\/security\/pki\/nss\/\">NSS<\/a> <a href=\"http:\/\/www.mozilla.org\/projects\/security\/pki\/nss\/tools\/certutil.html\">certutil<\/a> tool.<\/p>\n<p>Users of <a href=\"http:\/\/www.openssl.org\/\">OpenSSL<\/a> or <a href=\"http:\/\/www.gnutls.org\/\">GnuTLS<\/a> based tools or libraries (such as <a href=\"http:\/\/curl.haxx.se\/libcurl\/\">libcurl)<\/a> might be pleased to learn this.<\/p>\n<p>curl users in general of course should be aware that <a href=\"http:\/\/daniel.haxx.se\/blog\/2008\/02\/12\/ca-cert-bundle-or-not\/\">we no longer ship any ca-cert bundle<\/a> with curl (as of <a href=\"http:\/\/curl.haxx.se\/changes.html#7_18_1\">curl 7.18.1<\/a>), as it seems <a href=\"http:\/\/lists.freebsd.org\/pipermail\/freebsd-ports\/2008-August\/050283.html\">some ports haven&#8217;t yet updated or discovered<\/a> this.<\/p>\n<p><strong>Update:<\/strong> this script is now present as <a href=\"http:\/\/cool.haxx.se\/cvs.cgi\/curl\/lib\/firefox-db2pem.sh?rev=HEAD&amp;content-type=text\/vnd.viewcvs-markup\">lib\/firefox-db2pem.sh<\/a> in the curl CVS repository.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>It could be interesting to note that extracting all the cacerts from your local Firefox installation isn&#8217;t that tricky, if you just use some of the magic that are at hand with the NSS certutil tool. Users of OpenSSL or GnuTLS based tools or libraries (such as libcurl) might be pleased to learn this. curl &hellip; <a href=\"https:\/\/daniel.haxx.se\/blog\/2008\/08\/21\/ca-cert-bundle-from-firefox\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">CA cert bundle from Firefox<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7,6],"tags":[33,232,44,193],"class_list":["post-414","post","type-post","status-publish","format-standard","hentry","category-curl","category-floss","tag-curl-and-libcurl","tag-gnutls","tag-nss","tag-openssl"],"_links":{"self":[{"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/posts\/414","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/comments?post=414"}],"version-history":[{"count":0,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/posts\/414\/revisions"}],"wp:attachment":[{"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/media?parent=414"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/categories?post=414"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/tags?post=414"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}