gistfile1.txt

$ brew edit pianobar
diff --git a/Library/Formula/pianobar.rb b/Library/Formula/pianobar.rb
index cae4571..e32a4e5 100644
--- a/Library/Formula/pianobar.rb
+++ b/Library/Formula/pianobar.rb
@@ -6,7 +6,7 @@ class Pianobar < Formula
   homepage 'https://github.com/PromyLOPh/pianobar/'
   md5 ''
 
-  head 'https://github.com/PromyLOPh/pianobar.git'
+  head 'https://github.com/PromyLOPh/pianobar.git', :tag => 'tls'
 
   depends_on 'libao'
   depends_on 'mad'

$ sudo mkdir -p /etc/ssl/certs
$ sudo wget -O /etc/ssl/certs/ca-certificates.crt http://curl.haxx.se/ca/cacert.pem
$ brew install gnutls
$ brew install --HEAD pianobar

hmm, if this is going to get implemented into something automated I'd really suggest finding a more legitimate source of the CA root certificates

Also I had named mine something like pianobar-ca-certs.crt for a reason - if the file was corrupted or had a problem other system programs would not use it by default - I was specifying it in the pianobar config file specifically. at the very least you may consider checking to see if the file exists first and respect the existing one by not overwriting it if it already exists.

udpate: after doing some looking around perhaps that website is the best place to find them, but I wish someone else would pipe up on this.

That's where the curl project drops a ca-certificates bundle generated from the mozilla trusted roots. You have to make a root trust decision somehow.

ok, that's fair enough. but what abut obliterating the existing file with wget?

Mac OS X doesn't ship with that file. Hence downloading it. If you were going to automate this, yeah, I'd check for existence first.