lynx-dev
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: lynx-dev Re: FORCE_SSL_PROMPT:NO


From: Thorsten Glaser
Subject: Re: lynx-dev Re: FORCE_SSL_PROMPT:NO
Date: Wed, 17 Sep 2003 12:01:08 +0000 (UTC)

Dixitur illum address@hidden scribere...

>How DO you "extract [the ca-bundle] from a current version of ... Internet
>Explorer"?

Exporting the registry, converting ascii armoured stuff into binary,
using openssl to convert the certificates from DER to PEM format.

The result, using the method above (IE 5.0 tho), plus some other
certs (netscape, mozilla, apache) is here:
 https://mirbsd.bsdadvocacy.org:8890/active/cvsweb.cgi/src/etc/ssl.certs.shar

If you "install" that file, you can test it by connecting to the URL
above again, as well as https://www.thawte.com/ for example.

HTH&HAND,
//Thorsten
-- 
[...] if maybe ext3fs wasn't a better pick, or jfs, or maybe reiserfs, oh but
what about xfs, and if only i had waited until reiser4 was ready... in the be-
ginning, there was ffs, and in the middle, there was ffs, and at the end, there
was still ffs, and the sys admins knew it was good. :)  -- Ted Unangst ├╝ber *fs

; To UNSUBSCRIBE: Send "unsubscribe lynx-dev" to address@hidden


reply via email to

[Prev in Thread] Current Thread [Next in Thread]