On Mar 22, 2011, at 16:24, Nate Sutton wrote:

> This doesn't seem to be an issue on the Linux systems we're using, and is a 
> net positive IMO, but it fails on OSX 10.6.6. OSX stores the cert files in 
> the Keychain application, apparently, so they can't be found on the file 
> system. Does anyone know a way to get SSL verification working on OSX 10.6.6 
> with LFTP 4.2.0?

You can export the certificates with Keychain Access in Applications/Utilities.
Pick the System Roots keychain, the Certificates category, Select All (Cmd-A) 
and then File - Export Items will save it in a single file (choose either .pem 
or .cer for the file format).
Then you can point lftp to it:
set ssl:ca-file "/somewhere/Certificates.pem"

Unfortunately this obviously means that it won't automatically follow any 
changes made by Apple in the future until you manually repeat the steps to 
export it.

Reply via email to