On Sat, Mar 21, 2009 at 5:11 PM, Doug Kaufman <[email protected]> wrote: > On Sat, 21 Mar 2009, Stefan Caunter wrote: > >> As it stands, I can't find a way to get all of the certs dumped from >> Windows to DER, for openssl conversion to PEM and eventual hashing. > > I am not sure I understand exactly what you tried to do. On my > WindowsXP machine, running IE6, I just go to > "Tools/Internet Options/Content/Certificates/Trusted Root Certification > Authorities". > I then highlight all the certificates by left-clicking on the first, > going to the end and shift-left-clicking on the last. Click the export > button and pick a name for the exported bundle (e.g. cert.p7b). Then > "openssl pkcs7 -inform der -outform pem -in cert.p7b -out cert.pem > -print_certs -text" > should do it. The "-text" is optional. I don't have IE7 to see what it > does.
Yes, this used to work just fine. Doesn't anymore. Probably something to do with IE7 and Windows, but I don't know enough about it. > > Daniel Stenberg, the author of curl, has a perl script on his web page, > writen by Guenter Knauf, for extracting a cert bundle from the Mozilla > source (mk-ca-bundle.pl). He also maintains extracted cert bundles > available for download. You just need to change the name to cert.pem. > See "http://curl.haxx.se/docs/caextract.html"; Looks like this is just about all anyone would need, thanks. So we have Safari and Mozilla, and TG's work. Still wish there was a way to get them from IE, for completeness. One thing Microsoft usually keeps is compatibility with previous versions; odd that this went away. -- Stefan --- Stefan Caunter http://caunter.ca/contact.html _______________________________________________ Lynx-dev mailing list [email protected] http://lists.nongnu.org/mailman/listinfo/lynx-dev
