Skip to content

Instantly share code, notes, and snippets.

@aeris
Created Mar 20, 2014
Embed
What would you like to do?
#!/bin/sh
DIR=/usr/share/ca-certificates/cacert
mkdir $DIR
wget http://www.cacert.org/certs/root.crt -O $DIR/class1.crt
wget http://www.cacert.org/certs/class3.crt -O $DIR/class3.crt
dpkg-reconfigure ca-certificates
# Choose « yes » to add all new certificates automatically
# or « ask » to select manually the CACert certificates to use
@bortzmeyer
Copy link

bortzmeyer commented Sep 10, 2014

There is no way to check : no HTTPS for the wget (which makes sense since the CAcert cert is not yet installed) and not even a fingerprint verification ("ask" is useless since it does not display the fingerprints of the CA to include).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment