{"id":13588105,"url":"https://github.com/raggi/openssl-osx-ca","last_synced_at":"2025-04-09T19:18:49.162Z","repository":{"id":7107975,"uuid":"8400923","full_name":"raggi/openssl-osx-ca","owner":"raggi","description":"Simple periodic task to sync OSX Keychain certs to Homebrew installed OpenSSL \u0026 LibreSSL","archived":false,"fork":false,"pushed_at":"2023-08-11T14:01:20.000Z","size":31,"stargazers_count":243,"open_issues_count":4,"forks_count":24,"subscribers_count":8,"default_branch":"master","last_synced_at":"2025-04-09T19:18:44.112Z","etag":null,"topics":["certificate-authorities","certificates","homebrew","libressl","mac","openssl","osx","root-certificates"],"latest_commit_sha":null,"homepage":"","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/raggi.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2013-02-25T02:40:22.000Z","updated_at":"2025-04-07T23:30:35.000Z","dependencies_parsed_at":"2024-01-14T10:59:58.648Z","dependency_job_id":null,"html_url":"https://github.com/raggi/openssl-osx-ca","commit_stats":{"total_commits":28,"total_committers":6,"mean_commits":4.666666666666667,"dds":0.1785714285714286,"last_synced_commit":"d899b0b0cac46c32c465952e18ad2708fa871d3b"},"previous_names":[],"tags_count":13,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/raggi%2Fopenssl-osx-ca","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/raggi%2Fopenssl-osx-ca/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/raggi%2Fopenssl-osx-ca/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/raggi%2Fopenssl-osx-ca/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/raggi","download_url":"https://codeload.github.com/raggi/openssl-osx-ca/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248094990,"owners_count":21046770,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["certificate-authorities","certificates","homebrew","libressl","mac","openssl","osx","root-certificates"],"created_at":"2024-08-01T15:06:30.745Z","updated_at":"2025-04-09T19:18:49.134Z","avatar_url":"https://github.com/raggi.png","language":"Shell","funding_links":[],"categories":["Shell"],"sub_categories":[],"readme":"# osx-ca-certs (previously openssl-osx-ca (and libressl-osx-ca))\n\nA simple tool and script intended to be run periodically by `launchd(8)` to sync\nan openssl style CA pem with the certificates found in the OSX Keychain(s).\n\nThe original name is now a misnomer, as the software will manage certificate\nbundles for both openssl and libressl installed under Homebrew.\n\nThe Makefile contains a target called `osx-ca-certs` that acts a lot like\n`security export -t certs -p`, except that it does not dump certificates that\nare marked as untrusted as the latter does.\n\nThe keychains exported to the CA bundle by default are:\n * System.keychain\n * SystemRootCertificates.keychain\n * login.keychain (if run as a user)\n\nThe installed CA pem file will be made available through the default X.509 store\npath. This is commonly found in either: `/usr/local/etc/openssl/cert.pem` (for\nIntel based Macs) or `/opt/homebrew/etc/openssl/cert.pem` (for M1/ARM based Macs).\n\n## Installation\n\n * To install via homebrew:\n   ``` bash\n      brew tap raggi/ale\n      brew install openssl-osx-ca\n      brew services start openssl-osx-ca\n   ```\n\n * To install standalone:\n   ``` bash\n      make install\n   ```\n\n * To set the frequency, set the value of FREQUENCY when installing, defaults to\n   `3600`, one hour. The value of FREQUENCY must be a value in seconds.\n   ``` bash\n      make install FREQUENCY=3600\n   ```\n\n * Other variables from the Makefile can be overridden, take a look at the head\n   of the Makefile for more information.\n\n## Intended use cases\n\n * Ruby 2.0.0+\n * LibreSSL users\n * OpenSSL users\n * Other brew / manually installed things that link a non-Apple TLS\n   implementations\n\n## Known limitations \u0026 Notes\n\n * Only supports El Capitan and above.\n * Syncs are by default perfomed once per hour.\n * Syncs may not be sufficiently atomic. There is a small possiblity of race\n   conditions that could cause `openssl` programs to fail. The sync time is very\n   very short, so in practice this is unlikely.\n * OSX CA bundles are not always particularly up to date, for example in August\n   2016, they contained 17 expired certificates and several that Mozilla have\n   chosen to remove, either for technical or audit reasons.\n * Installation as root is generally not required, and may require some extra\n   changes to the Makefile.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fraggi%2Fopenssl-osx-ca","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fraggi%2Fopenssl-osx-ca","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fraggi%2Fopenssl-osx-ca/lists"}