Re: need help with certificate bundles for ALL the platforms Emacs supports

[Ted Zlatanov]

On Sun, 12 Feb 2012 06:05:22 +0200 Eli Zaretskii <address@hidden> wrote: 

EZ> The question is, can whatever you are using or writing read and use
EZ> the format of the certificates stored in the Windows Registry?

The GnuTLS API can take a file name or binary blobs in DER or PEM
format, according to the docs.  We only support file names right now.  I
would make the necessary changes if it was necessary to load the
registry blobs.

Unfortunately according to
http://citrixblogger.org/2010/09/13/public-key-certificate-locations-in-windows/
the story is much more complicated, with some certificates stored to
disk and so on.  It looks like a much better idea to use certreq.exe or
certutil.exe to dump all the trusted certificates, if those tools
support it.  Does anyone know?

Thanks
Ted