HOWTO - OS X - how can I use sslcertfile

[Rainer M Krug]

Justin Abrahms <justin at abrah.ms> writes:

> Rainer M Krug <Rainer <at> krugs.de> writes:
>
>> 
>> Hi
>> 
>> I had the problem, that I dad to regularly (sometimes daily) have to
>> switch between different cert_fingerprints for gmail.
>> 
>> Now under Linux I was using the sslcacertfile, and it worked perfectly,
>> but I did not find a solution for OS X thanks to a question on
>> superuser.com [1]:
>> 
>> 1) Install curl-ca-bundle using e.g. homebrew:
>> ,----
>> | brew install curl-ca-bundle
>> `----
>> 
>> 2) Now the certificates are installed, and you can use them by adding 
>> ,----
>> | sslcacertfile = /usr/local/opt/curl-ca-bundle/share/ca-bundle.crt
>> `----
>> to the .offlineimaprc file in the appropriate repository
>> 
>> You can also use Macports, but then the path will be:
>> ,----
>> | sslcacertificate = /opt/local/share/curl/curl-ca-bundle.crt
>> `----
>> 
>> Hope that this is useful for somebody,
>> 
>> Cheers,
>> 
>> Rainer
>> 
>> Footnotes: 
>> [1]  http://superuser.com/questions/262809/where-do-i-install-certificates-so-that-wget-and-
> other-macports-programs-will-fi
>> 
>
>
> Thanks, Rainer.
>
> This was helpful. Just to update this for the next person who finds
> it.
>
> curl-ca-bundle doesn't exist in homebrew anymore thanks to this PR[0].
>
> To fix that, download the ca-cert bundle from
> https://downloads.sourceforge.net/project/machomebrew/mirror/
> curl-ca-bundle-1.87.tar.bz2 and copy the ca-bundle.crt file to
> /usr/local/etc/openssl/certs/ You'll probably need to run
> /usr/local/opt/openssl/bin/c_rehash to make openssl take count of the
> new certs.
>
> Also, instead of using sslcacertificate, the new option is
> sslcacertfile, so use that in your config.

Thanks for updating this - mine is still working, so I didn't realize
that it has changed.

In principle, I would agree with the link you provide, but does
somebody know how one can use the approach outlined there?

Cheers,

Rainer

>
> Cheers,
>  -justin
>
> [0]: https://github.com/Homebrew/homebrew/pull/28658
>
>
>
> _______________________________________________
> OfflineIMAP-project mailing list
> OfflineIMAP-project at lists.alioth.debian.org
> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/offlineimap-project
>
> OfflineIMAP homepage: http://software.complete.org/offlineimap

-- 
Rainer M. Krug, PhD (Conservation Ecology, SUN), MSc (Conservation Biology, UCT), Dipl. Phys. (Germany)

Centre of Excellence for Invasion Biology
Stellenbosch University
South Africa

Tel :       +33 - (0)9 53 10 27 44
Cell:       +33 - (0)6 85 62 59 98
Fax :       +33 - (0)9 58 10 27 44

Fax (D):    +49 - (0)3 21 21 25 22 44

email:      Rainer at krugs.de

Skype:      RMkrug

PGP: 0x0F52F982
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 494 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/offlineimap-project/attachments/20140806/698cb2b4/attachment-0003.sig>