CA certificates on NetBSD

Using SSL-aware programs which expect a CA certificate path on NetBSD (such as cURL, Git or Wget) without installing CA certificates will result in the following SSL certificate error messages.

Lets say we wanna clone vimmer on a fresh NetBSD install:

git clone https://github.com/mlinuxgada/vimmer.git
Cloning into 'vimmer'...
fatal: unable to access 'https://github.com/mlinuxgada/vimmer.git/': SSL certificate problem: unable to get ...

 

In order to fix this issue, we need to install CA certificates distributed by the Mozilla Project (mozilla-rootcerts package), using either pkgsrc or pkgin :

cd /usr/pkgsrc/security/mozilla-rootcerts
make install clean clean-depends

Using pkgin :

pkgin install mozilla-rootcerts

Now we have to extract and rehash all CA root certificates :

mozilla-rootcerts install
Сподели с приятел: Сподели в Twitter