On Mar 22, 2011, at 10:47 AM, Daniel Fazekas wrote: > On Mar 22, 2011, at 16:24, Nate Sutton wrote: > >> This doesn't seem to be an issue on the Linux systems we're using, and is a >> net positive IMO, but it fails on OSX 10.6.6. OSX stores the cert files in >> the Keychain application, apparently, so they can't be found on the file >> system. Does anyone know a way to get SSL verification working on OSX 10.6.6 >> with LFTP 4.2.0? > > You can export the certificates with Keychain Access in > Applications/Utilities. > Pick the System Roots keychain, the Certificates category, Select All (Cmd-A) > and then File - Export Items will save it in a single file (choose either > .pem or .cer for the file format). > Then you can point lftp to it: > set ssl:ca-file "/somewhere/Certificates.pem"
Fantastic, that worked. > Unfortunately this obviously means that it won't automatically follow any > changes made by Apple in the future until you manually repeat the steps to > export it. It's only for testing and development, so updating it shouldn't be a problem. Thanks for your help!
