cURL
Haxx ad
libcurl
CA Extract

curl's project page on SourceForge.net

Sponsors:
Haxx

cURL > Docs > CA Extract

Extract CA Certs from mozilla.org

Related:
SSL Certs

The lib/mk-ca-bundle.pl script converts Mozilla's CA cert bundle to PEM format, suitable for (lib)curl and others. Writtten by Guenter Knauf.

Automated Conversions

We provide automated conversions - done weekly. The output CA bundle file in PEM format is available from here:

The file contains the datestamp of the conversion.

These files do not contain the DigiNotar certificates anymore since Mozilla started marking them as untrusted and our script was updated to be aware of that marking.

Requirements

It is a perl script. The script uses the 'openssl' tool and it requires the version that comes with the 0.9.7 series or later.

The exact Mozilla file needed for this job is found within that script.

License

This new file is only a converted version of the original one and thus it is licensed under the same licenses: MPL 1.1, GPL v2.0 or LGPL 2.1

Convert from your local Firefox installation

You can also extract the ca certs off your Firefox installation, if you just have the 'certutil' tool installed and run the firefox-db2pem.sh script!

donate! Page updated January 5, 2012.
web site info

File upload with ASP.NET