Re: [Lynx-dev] cert bundle sources

[Stefan Caunter]

On Sat, Mar 21, 2009 at 5:11 PM, Doug Kaufman <address@hidden> wrote:
> On Sat, 21 Mar 2009, Stefan Caunter wrote:
>
>> As it stands, I can't find a way to get all of the certs dumped from
>> Windows to DER, for openssl conversion to PEM and eventual hashing.
>
> I am not sure I understand exactly what you tried to do. On my
> WindowsXP machine, running IE6, I just go to
> "Tools/Internet Options/Content/Certificates/Trusted Root Certification 
> Authorities".
> I then highlight all the certificates by left-clicking on the first,
> going to the end and shift-left-clicking on the last. Click the export
> button and pick a name for the exported bundle (e.g. cert.p7b). Then
> "openssl pkcs7 -inform der -outform pem -in cert.p7b -out cert.pem 
> -print_certs -text"
> should do it. The "-text" is optional. I don't have IE7 to see what it
> does.

Yes, this used to work just fine. Doesn't anymore. Probably something
to do with IE7 and Windows, but I don't know enough about it.

>
> Daniel Stenberg, the author of curl, has a perl script on his web page,
> writen by Guenter Knauf, for extracting a cert bundle from the Mozilla
> source (mk-ca-bundle.pl). He also maintains extracted cert bundles
> available for download. You just need to change the name to cert.pem.
> See "http://curl.haxx.se/docs/caextract.html";

Looks like this is just about all anyone would need, thanks.

So we have Safari and Mozilla, and TG's work.

Still wish there was a way to get them from IE, for completeness. One
thing Microsoft usually keeps is compatibility with previous versions;
odd that this went away.

-- 


Stefan

---
Stefan Caunter
http://caunter.ca/contact.html