在OSX的哪里可以找到system-ca-bundle.crt? [英] Where do I find system-ca-bundle.crt on OSX?

问题描述

我正在运行Mono 4.8，并且在证书方面遇到了一些麻烦.我知道我需要运行cert-sync，但是我不知道system-ca-bundle.crt在OSX上的位置.此版本的文档 http://www.mono -project.com/docs/about-mono/releases/3.12.0/，仅提及不同Linux系统上的位置.

I'm running mono 4.8 and have some trouble with certificates. I know I need to run cert-sync but I can't figure out where the system-ca-bundle.crt is on OSX. The docs for this release, http://www.mono-project.com/docs/about-mono/releases/3.12.0/, only mentions where it is on different linux systems.

推荐答案

您可以从以下位置获取PEM格式的完整Mozilla CA证书存储:

You can grab the complete Mozilla CA certificate store in PEM format from:

• https://curl.haxx.se/docs/caextract.html

请买家当心:下载并盲目添加CA根证书应该引人入胜.他们提供的cacert.pem被标记为SHA256，您可以将其与Mozilla的进行比较

Buyer beware: Downloading and blindly adding CA Root Certificates should set off bells, alarms, and whistles. The cacert.pem they provide is SHA256 marked and you can compare it to Mozilla's

• https://hg.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt

也就是说，您始终可以从该PEM中提取所需的单个CA证书，并验证每个证书，依此类推....或者盲目地将它们全部添加:

That said, you can always extract the individual CA certs you need from that PEM and verify each one, etc.... Or blindly add them all:

curl --remote-name --time-cond cacert.pem https://curl.haxx.se/ca/cacert.pem
cert-sync --user cacert.pem

将BoringSSL设置为Mono的TLS提供程序并享受:

Set BoringSSL as Mono's TLS provider and enjoy:

export MONO_TLS_PROVIDER=btls

这篇关于在OSX的哪里可以找到system-ca-bundle.crt?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！