2 # ***************************************************************************
4 # * Project ___| | | | _ \| |
5 # * / __| | | | |_) | |
6 # * | (__| |_| | _ <| |___
7 # * \___|\___/|_| \_\_____|
9 # * Copyright (C) 1998 - 2008, Daniel Stenberg, <daniel@haxx.se>, et al.
11 # * This software is licensed as described in the file COPYING, which
12 # * you should have received as part of this distribution. The terms
13 # * are also available at http://curl.haxx.se/docs/copyright.html.
15 # * You may opt to use, copy, modify, merge, publish, distribute and/or sell
16 # * copies of the Software, and permit persons to whom the Software is
17 # * furnished to do so, under the terms of the COPYING file.
19 # * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
20 # * KIND, either express or implied.
22 # * $Id: firefox-db2pem.sh,v 1.1.1.1 2008-09-23 16:32:05 hoffman Exp $
23 # ***************************************************************************
24 # This shell script creates a fresh ca-bundle.crt file for use with libcurl.
25 # It extracts all ca certs it finds in the local Firefox database and converts
26 # them all into PEM format.
28 db
=`ls -1d $HOME/.mozilla/firefox/*default`
31 if test -z "$out"; then
32 out
="ca-bundle.crt" # use a sensible default
39 ## Bundle of CA Root Certificates
41 ## Converted at: ${currentdate}
42 ## These were converted from the local Firefox directory by the db2pem script.
47 certutil
-L -h 'Builtin Object Token' -d $db | \
48 grep ' *[CcGTPpu]*,[CcGTPpu]*,[CcGTPpu]* *$' | \
49 sed -e 's/ *[CcGTPpu]*,[CcGTPpu]*,[CcGTPpu]* *$//' -e 's/\(.*\)/"\1"/' | \
51 while read nickname
; \
52 do echo $nickname |
sed -e "s/Builtin Object Token://g"; \
53 eval certutil
-d $db -L -n "$nickname" -a ; \