2
0

firefox-db2pem.sh 1.9 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455
  1. #!/bin/sh
  2. # ***************************************************************************
  3. # * _ _ ____ _
  4. # * Project ___| | | | _ \| |
  5. # * / __| | | | |_) | |
  6. # * | (__| |_| | _ <| |___
  7. # * \___|\___/|_| \_\_____|
  8. # *
  9. # * Copyright (C) 1998 - 2022, Daniel Stenberg, <daniel@haxx.se>, et al.
  10. # *
  11. # * This software is licensed as described in the file COPYING, which
  12. # * you should have received as part of this distribution. The terms
  13. # * are also available at https://curl.se/docs/copyright.html.
  14. # *
  15. # * You may opt to use, copy, modify, merge, publish, distribute and/or sell
  16. # * copies of the Software, and permit persons to whom the Software is
  17. # * furnished to do so, under the terms of the COPYING file.
  18. # *
  19. # * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
  20. # * KIND, either express or implied.
  21. # *
  22. # * SPDX-License-Identifier: curl
  23. # *
  24. # ***************************************************************************
  25. # This shell script creates a fresh ca-bundle.crt file for use with libcurl.
  26. # It extracts all ca certs it finds in the local Firefox database and converts
  27. # them all into PEM format.
  28. #
  29. db=$(ls -1d $HOME/.mozilla/firefox/*default*)
  30. out=$1
  31. if test -z "$out"; then
  32. out="ca-bundle.crt" # use a sensible default
  33. fi
  34. currentdate=$(date)
  35. cat >$out <<EOF
  36. ##
  37. ## Bundle of CA Root Certificates
  38. ##
  39. ## Converted at: ${currentdate}
  40. ## These were converted from the local Firefox directory by the db2pem script.
  41. ##
  42. EOF
  43. certutil -L -h 'Builtin Object Token' -d "$db" | \
  44. grep ' *[CcGTPpu]*,[CcGTPpu]*,[CcGTPpu]* *$' | \
  45. sed -e 's/ *[CcGTPpu]*,[CcGTPpu]*,[CcGTPpu]* *$//' -e 's/\(.*\)/"\1"/' | \
  46. sort | \
  47. while read -r nickname; \
  48. do echo "$nickname" | sed -e "s/Builtin Object Token://g"; \
  49. eval certutil -d "$db" -L -n "$nickname" -a ; \
  50. done >> $out