Re: need help with certificate bundles for ALL the platforms Emacs supports

[Eli Zaretskii]

> From: Ted Zlatanov <address@hidden>
> Date: Fri, 10 Feb 2012 08:06:31 -0500
> 
> >> W32 doesn't seem to have a system cert bundle and getting it from any
> >> specific browser is unreliable, but any suggestions are welcome.
> 
> EZ> I think you are wrong about that.  Where did you get this information?
> 
> Web searching, e.g. the URL I cited in the post you quoted.  I'd love to
> be wrong!

This URL:

   http://technet.microsoft.com/en-us/library/cc962104.aspx

and also a few others seem to indicate that each Windows user has
his/her certificates in this directory:

  C:\Documents and Settings\<username>\Application 
Data\Microsoft\SystemCertificates\My\Certificates

I do have such a directory on my XP box, but it is empty.  Meanwhile,
the application that is used on Windows to browse certificates does
show a long list of certificates I allegedly have on this box.

On another XP system I did see files in the above directory, but they
were binary files, unlike the contents you show:

> They consist of hundreds of text blocks like this:
> 
> -----BEGIN CERTIFICATE-----
> MIIDpDCCAoygAwIBAgIBATANBgkqhkiG9w0BAQUFADBjMQswCQYDVQQGEwJVUzEc
> ...
> MMbHNYaz+ZZfRtsMRf3zUMNvxsNIrUam4SdHCh0Om7bCd39j8uB9Gr784N/Xx6ds
> sPmuujz9dLQR6FgNgLzTqIA6me11zEZ7
> -----END CERTIFICATE-----
> 
> which are simply individual .pem files, concatenated.  In Debian/Ubuntu
> there is a directory structure under /etc/ssl, but Mozilla's bundle, for
> instance, is offered as simply a monolithic download.
> 
> The question is how to obtain one reliably, and all my research leads me
> to believe that W32 doesn't have it.

I know nothing about these issues, so I'm really not the right person
to look into this.  Perhaps someone else could chime in.