search

raggi / openssl-osx-ca

Simple periodic task to sync OSX Keychain certs to Homebrew installed OpenSSL & LibreSSL
Other
225 stars 24 forks source link

Also search login keychain for certs #12

Closed joefiorini closed 8 years ago

joefiorini commented 8 years ago

Some certs (especially manually imported ones) get installed in the login keychain. In order to make sure those get synced, this script should pull them in too.

raggi commented 8 years ago

I'd be concerned that this could be leaking public certs across user boundaries, as login chains are semi-private and this CA bundle is system wide.

I do realize that one of the most common use cases here is a single user development system, but I'm interested to hear thoughts about an approach that might satisfy all the requirements. Any ideas?