2 # ***************************************************************************
4 # * Project ___| | | | _ \| |
5 # * / __| | | | |_) | |
6 # * | (__| |_| | _ <| |___
7 # * \___|\___/|_| \_\_____|
9 # * Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
11 # * This software is licensed as described in the file COPYING, which
12 # * you should have received as part of this distribution. The terms
13 # * are also available at https://curl.se/docs/copyright.html.
15 # * You may opt to use, copy, modify, merge, publish, distribute and/or sell
16 # * copies of the Software, and permit persons to whom the Software is
17 # * furnished to do so, under the terms of the COPYING file.
19 # * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
20 # * KIND, either express or implied.
22 # * SPDX-License-Identifier: curl
24 # ***************************************************************************
25 # This shell script creates a fresh ca-bundle.crt file for use with libcurl.
26 # It extracts all ca certs it finds in the local Firefox database and converts
27 # them all into PEM format.
29 db=$(ls -1d $HOME/.mozilla/firefox/*default*)
32 if test -z "$out"; then
33 out="ca-bundle.crt" # use a sensible default
40 ## Bundle of CA Root Certificates
42 ## Converted at: ${currentdate}
43 ## These were converted from the local Firefox directory by the db2pem script.
48 certutil -L -h 'Builtin Object Token' -d "$db" | \
49 grep ' *[CcGTPpu]*,[CcGTPpu]*,[CcGTPpu]* *$' | \
50 sed -e 's/ *[CcGTPpu]*,[CcGTPpu]*,[CcGTPpu]* *$//' -e 's/\(.*\)/"\1"/' | \
52 while read -r nickname; \
53 do echo "$nickname" | sed -e "s/Builtin Object Token://g"; \
54 eval certutil -d "$db" -L -n "$nickname" -a ; \