mirror of
https://github.com/curl/curl.git
synced 2026-01-18 17:21:26 +01:00
fe8393d7db
- drop stray duplicate empty lines in docs, scripts, test data, include, examples, tests. - drop duplicate PP parenthesis. - curl-functions.m4: move literals to the right side in if expressions, to match rest of the source code. - FAQ.md: delete language designator from an URL. - packages: apply clang-format (OS400, VMS). - scripts/schemetable.c: apply clang-format. - data320: delete duplicate empty line that doesn't change the outcome. - spacecheck: extend to check for duplicate empty lines (with exceptions.) - fix whitespace nits Closes #19936
65 lines
2.2 KiB
Bash
Executable File
65 lines
2.2 KiB
Bash
Executable File
#!/bin/sh
|
|
# ***************************************************************************
|
|
# * _ _ ____ _
|
|
# * Project ___| | | | _ \| |
|
|
# * / __| | | | |_) | |
|
|
# * | (__| |_| | _ <| |___
|
|
# * \___|\___/|_| \_\_____|
|
|
# *
|
|
# * Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
|
|
# *
|
|
# * This software is licensed as described in the file COPYING, which
|
|
# * you should have received as part of this distribution. The terms
|
|
# * are also available at https://curl.se/docs/copyright.html.
|
|
# *
|
|
# * You may opt to use, copy, modify, merge, publish, distribute and/or sell
|
|
# * copies of the Software, and permit persons to whom the Software is
|
|
# * furnished to do so, under the terms of the COPYING file.
|
|
# *
|
|
# * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
|
|
# * KIND, either express or implied.
|
|
# *
|
|
# * SPDX-License-Identifier: curl
|
|
# *
|
|
# ***************************************************************************
|
|
# This shell script creates a fresh ca-bundle.crt file for use with libcurl.
|
|
# It extracts all ca certs it finds in the local Firefox database and converts
|
|
# them all into PEM format.
|
|
#
|
|
# It uses the "certutil" command line tool from the NSS project to perform the
|
|
# conversion. On Debian it comes in the "libnss3-tools" package.
|
|
#
|
|
|
|
set -eu
|
|
|
|
if [ -d "$HOME/Library/Application Support"/Firefox/Profiles ]; then
|
|
db=$(ls -1d "$HOME/Library/Application Support"/Firefox/Profiles/*default*)
|
|
else
|
|
db=$(ls -1d "$HOME"/.mozilla/firefox/*default*)
|
|
fi
|
|
out="${1:-}"
|
|
|
|
if test -z "$out"; then
|
|
out="ca-bundle.crt" # use a sensible default
|
|
fi
|
|
|
|
currentdate=$(date)
|
|
|
|
cat > "$out" <<EOF
|
|
##
|
|
## Bundle of CA Root Certificates
|
|
##
|
|
## Converted at: ${currentdate}
|
|
## These were converted from the local Firefox directory by the db2pem script.
|
|
##
|
|
EOF
|
|
|
|
certutil -L -h 'Builtin Object Token' -d "$db" | \
|
|
grep ' *[CcGTPpu]*,[CcGTPpu]*,[CcGTPpu]* *$' | \
|
|
sed -e 's/ *[CcGTPpu]*,[CcGTPpu]*,[CcGTPpu]* *$//' -e 's/\(.*\)/"\1"/' | \
|
|
sort | \
|
|
while read -r nickname; do
|
|
echo "$nickname" | sed 's/Builtin Object Token://g'
|
|
echo "$nickname" | xargs -I{} certutil -d "$db" -L -a -n {}
|
|
done >> "$out"
|