[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Lynx-dev] cert bundle sources

From: Stefan Caunter
Subject: Re: [Lynx-dev] cert bundle sources
Date: Sun, 22 Mar 2009 22:49:26 -0400

On Sat, Mar 21, 2009 at 5:11 PM, Doug Kaufman <address@hidden> wrote:
> On Sat, 21 Mar 2009, Stefan Caunter wrote:
>> As it stands, I can't find a way to get all of the certs dumped from
>> Windows to DER, for openssl conversion to PEM and eventual hashing.
> I am not sure I understand exactly what you tried to do. On my
> WindowsXP machine, running IE6, I just go to
> "Tools/Internet Options/Content/Certificates/Trusted Root Certification 
> Authorities".
> I then highlight all the certificates by left-clicking on the first,
> going to the end and shift-left-clicking on the last. Click the export
> button and pick a name for the exported bundle (e.g. cert.p7b). Then
> "openssl pkcs7 -inform der -outform pem -in cert.p7b -out cert.pem 
> -print_certs -text"
> should do it. The "-text" is optional. I don't have IE7 to see what it
> does.

Yes, this used to work just fine. Doesn't anymore. Probably something
to do with IE7 and Windows, but I don't know enough about it.

> Daniel Stenberg, the author of curl, has a perl script on his web page,
> writen by Guenter Knauf, for extracting a cert bundle from the Mozilla
> source ( He also maintains extracted cert bundles
> available for download. You just need to change the name to cert.pem.
> See "";

Looks like this is just about all anyone would need, thanks.

So we have Safari and Mozilla, and TG's work.

Still wish there was a way to get them from IE, for completeness. One
thing Microsoft usually keeps is compatibility with previous versions;
odd that this went away.



Stefan Caunter

reply via email to

[Prev in Thread] Current Thread [Next in Thread]