From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Ted Zlatanov Newsgroups: gmane.emacs.devel Subject: Re: need help with certificate bundles for ALL the platforms Emacs supports Date: Fri, 10 Feb 2012 08:06:31 -0500 Organization: =?utf-8?B?0KLQtdC+0LTQvtGAINCX0LvQsNGC0LDQvdC+0LI=?= @ Cienfuegos Message-ID: <87lioau9bc.fsf@lifelogs.com> References: <4F25FA2F.2010401@gmail.com> <4F27F4A1.6030907@gmail.com> <6E4BE1E758D04283A7C3A660ED379966@us.oracle.com> <87liolnipl.fsf@lifelogs.com> <50081AA79F2F4860A3B9DCEDFC1ABEC8@us.oracle.com> <877h04nc2e.fsf@lifelogs.com> <83ehucfjc8.fsf@gnu.org> <87r4ycjbjz.fsf_-_@lifelogs.com> <83mx8zev8s.fsf@gnu.org> <87vcnnj1xm.fsf@lifelogs.com> <87ipjgw0r3.fsf_-_@lifelogs.com> <83liobaleu.fsf@gnu.org> Reply-To: emacs-devel@gnu.org NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: dough.gmane.org 1328879207 25729 80.91.229.3 (10 Feb 2012 13:06:47 GMT) X-Complaints-To: usenet@dough.gmane.org NNTP-Posting-Date: Fri, 10 Feb 2012 13:06:47 +0000 (UTC) To: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Fri Feb 10 14:06:46 2012 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([140.186.70.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1RvqBa-0005km-E6 for ged-emacs-devel@m.gmane.org; Fri, 10 Feb 2012 14:06:46 +0100 Original-Received: from localhost ([::1]:39006 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1RvqBZ-0000J8-VQ for ged-emacs-devel@m.gmane.org; Fri, 10 Feb 2012 08:06:45 -0500 Original-Received: from eggs.gnu.org ([140.186.70.92]:38070) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1RvqBX-0000Hv-0R for emacs-devel@gnu.org; Fri, 10 Feb 2012 08:06:43 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1RvqBU-0004O9-Mg for emacs-devel@gnu.org; Fri, 10 Feb 2012 08:06:42 -0500 Original-Received: from plane.gmane.org ([80.91.229.3]:36475) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1RvqBU-0004Nv-Fl for emacs-devel@gnu.org; Fri, 10 Feb 2012 08:06:40 -0500 Original-Received: from list by plane.gmane.org with local (Exim 4.69) (envelope-from ) id 1RvqBT-0005i0-HT for emacs-devel@gnu.org; Fri, 10 Feb 2012 14:06:39 +0100 Original-Received: from c-76-28-40-19.hsd1.vt.comcast.net ([76.28.40.19]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Fri, 10 Feb 2012 14:06:39 +0100 Original-Received: from tzz by c-76-28-40-19.hsd1.vt.comcast.net with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Fri, 10 Feb 2012 14:06:39 +0100 X-Injected-Via-Gmane: http://gmane.org/ Mail-Followup-To: emacs-devel@gnu.org Original-Lines: 46 Original-X-Complaints-To: usenet@dough.gmane.org X-Gmane-NNTP-Posting-Host: c-76-28-40-19.hsd1.vt.comcast.net X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6; d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT= D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx" Mail-Copies-To: never User-Agent: Gnus/5.130002 (Ma Gnus v0.2) Emacs/24.0.93 (gnu/linux) Cancel-Lock: sha1:ixKC83w/fcz6jaBBSsWbuouKLm8= X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 80.91.229.3 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:148425 Archived-At: On Thu, 09 Feb 2012 20:53:13 +0200 Eli Zaretskii wrote: >> From: Ted Zlatanov >> Date: Thu, 09 Feb 2012 09:16:16 -0500 >> >> I need a list of possible cert bundle locations on all the platforms >> Emacs supports, or methods to retrieve them. Please send to me directly >> or follow up here. The assembled list will help me greatly. >> [...] >> W32 doesn't seem to have a system cert bundle and getting it from any >> specific browser is unreliable, but any suggestions are welcome. EZ> I think you are wrong about that. Where did you get this information? Web searching, e.g. the URL I cited in the post you quoted. I'd love to be wrong! EZ> Can you show me an example of a "cert bundle", i.e. what kind of EZ> directory hierarchy, if any, is there, and what files can one find EZ> there? Examples of how files are named and their contents will help. EZ> I need this to compare with what I think is a cert bundle on my EZ> Windows box (if I'm not mistaken). Certificate bundles are usually in a .pem format (I've also seen .crt, and unfortunately there are at least 4 different formats). On W32, I know the MSysGit environment has a cert bundle (inherited from curl/libcurl and placed under /usr/bin IIRC), but I don't think there's a generally available bundle. They consist of hundreds of text blocks like this: -----BEGIN CERTIFICATE----- MIIDpDCCAoygAwIBAgIBATANBgkqhkiG9w0BAQUFADBjMQswCQYDVQQGEwJVUzEc ... MMbHNYaz+ZZfRtsMRf3zUMNvxsNIrUam4SdHCh0Om7bCd39j8uB9Gr784N/Xx6ds sPmuujz9dLQR6FgNgLzTqIA6me11zEZ7 -----END CERTIFICATE----- which are simply individual .pem files, concatenated. In Debian/Ubuntu there is a directory structure under /etc/ssl, but Mozilla's bundle, for instance, is offered as simply a monolithic download. The question is how to obtain one reliably, and all my research leads me to believe that W32 doesn't have it. Ted