Adding extra CAs on OS X 11:32 AM, 1 Comments

In looking around for stuff, I found this neat FREE Certificate authority, www.cacert.org. Decided to look at it. Looks like the browsers don't have it listed. They're lobbying Mozilla to include it in their CA list. They have a link to add it to your CA list though. For Safari, it required a little more than mozilla, as mozilla is automatic, but it looks like this method of adding the CA to OS X makes it system-wide, not just the browser, but there for Mail and stuff:

1. Get This.
2. Place it in ~/Library/Keychains/
3. Now, at the commandline, execute the following instructions.

   cd ~/Library/Keychains/
   cp /System/Library/Keychains/X509Anchors .
   certtool i cacert.crt k=X509Anchors
   sudo cp X509Anchors /System/Library/Keychains/X509Anchors

4. Quit and restart Safari, and you should be good to go (in any WebCore-based application).