Self signed certs without storing the cert in the repo

.gitignore

myrootca.crt

README.md

composer prepare
composer update

the first command will download the certificate and the second will then do the update etc. Even better would be a csript that downloads the certificate before any other command would be executed by composer but I couldn't find one (yet)

composer.json

{
  "name": "root/catest",
  "authors": [{
    "name": "Andreas Heigl",
    "email": "andreas@heigl.org"
  }],
  "repositories": [{
    "type": "composer",
    "url": "https://example.com/satis",
    "options" : {
      "ssl" : {
        "cafile" : "myrootca.crt"
      }
    }
  }],
  "require": {},
  "scripts" : {
    "prepare" : [
      "openssl x509 -in <(openssl s_client -connect example.com:443 -prexit 2>/dev/null) > myrootca.crt"
    ]
  }
}