Re: lynx-dev Re: FORCE_SSL_PROMPT:NO

[Thorsten Glaser]

Dixitur illum address@hidden scribere...

>How DO you "extract [the ca-bundle] from a current version of ... Internet
>Explorer"?

Exporting the registry, converting ascii armoured stuff into binary,
using openssl to convert the certificates from DER to PEM format.

The result, using the method above (IE 5.0 tho), plus some other
certs (netscape, mozilla, apache) is here:
 https://mirbsd.bsdadvocacy.org:8890/active/cvsweb.cgi/src/etc/ssl.certs.shar

If you "install" that file, you can test it by connecting to the URL
above again, as well as https://www.thawte.com/ for example.

HTH&HAND,
//Thorsten
-- 
[...] if maybe ext3fs wasn't a better pick, or jfs, or maybe reiserfs, oh but
what about xfs, and if only i had waited until reiser4 was ready... in the be-
ginning, there was ffs, and in the middle, there was ffs, and at the end, there
was still ffs, and the sys admins knew it was good. :)  -- Ted Unangst über *fs

; To UNSUBSCRIBE: Send "unsubscribe lynx-dev" to address@hidden