All geek questions in one place

Where are SSL certificates stored?

I understand how SSL works, but my question is about storing certificates on the client side. To understand the exact context, you can assume that I'm kind of like my own browser. Part of my rendering will be done using WebKit, and part of http request processing will be done by libCurl. LibCurl has the option CURLOPT_CAPATH in which I can specify a single folder location in libCurl and that libCurl will refer to possibly trusted certificates. But I do not know where this place is? Whether this is a specific operating system, my application, such as a browser, should work in several formats.

  • Where do OSx and Windows keep their certificates?
  • Is this one unified directory? or was it divided in several places?
  • Does Windows store them in a registry not in a directory?

  • Do multiple browsers on the same operating system use the same certificate store, or do they all have their own certificate stores?

  • Do I need to worry about nss?

+5
source share
1 answer

Where do OSx and Windows store their certificates?

OS X stores certificates in a keychain. Windows stores certificates in the certificate store.

Is this one unified directory?

Not.

or was it divided in several places?

Yes.

Does Windows store them in a registry not in a directory?

Windows stores certificates in the certificate store. It is supported by the file (s), but you are not working directly with the file.

Do multiple browsers on the same operating system use the same certificate store, or do they all have their own certificate stores?

It depends.

Firefox and Opera maintain their own collection of trusted signatures (CA Certifcates).

Chrome uses storage provided by the operating system.

Safari uses certificates in the keychain.

Using IE uses certificates in the certificate store.

I'm not sure what other browsers do. For example, I don’t know where Iceweasel and Dillo get the list of trust anchors from.

Do I need to worry about nss?

It depends. What do you have in mind?

... CURLOPT_CAPATH ...

When using cURL, you often use the ca-certs file. See Automatically Converted CA Certs from mozilla.org .

+2
source

Source: https://habr.com/ru/post/1201352/

More articles:


All Articles