1#!/bin/sh 2# *************************************************************************** 3# * _ _ ____ _ 4# * Project ___| | | | _ \| | 5# * / __| | | | |_) | | 6# * | (__| |_| | _ <| |___ 7# * \___|\___/|_| \_\_____| 8# * 9# * Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al. 10# * 11# * This software is licensed as described in the file COPYING, which 12# * you should have received as part of this distribution. The terms 13# * are also available at https://curl.se/docs/copyright.html. 14# * 15# * You may opt to use, copy, modify, merge, publish, distribute and/or sell 16# * copies of the Software, and permit persons to whom the Software is 17# * furnished to do so, under the terms of the COPYING file. 18# * 19# * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY 20# * KIND, either express or implied. 21# * 22# * SPDX-License-Identifier: curl 23# * 24# *************************************************************************** 25# This shell script creates a fresh ca-bundle.crt file for use with libcurl. 26# It extracts all ca certs it finds in the local Firefox database and converts 27# them all into PEM format. 28# 29 30set -eu 31 32db=$(ls -1d "$HOME"/.mozilla/firefox/*default*) 33out="${1:-}" 34 35if test -z "$out"; then 36 out="ca-bundle.crt" # use a sensible default 37fi 38 39currentdate=$(date) 40 41cat > "$out" <<EOF 42## 43## Bundle of CA Root Certificates 44## 45## Converted at: ${currentdate} 46## These were converted from the local Firefox directory by the db2pem script. 47## 48EOF 49 50 51certutil -L -h 'Builtin Object Token' -d "$db" | \ 52grep ' *[CcGTPpu]*,[CcGTPpu]*,[CcGTPpu]* *$' | \ 53sed -e 's/ *[CcGTPpu]*,[CcGTPpu]*,[CcGTPpu]* *$//' -e 's/\(.*\)/"\1"/' | \ 54sort | \ 55while read -r nickname; \ 56 do echo "$nickname" | sed -e "s/Builtin Object Token://g"; \ 57eval certutil -d "$db" -L -n "$nickname" -a ; \ 58done >> "$out" 59
