[gnutls-help] Root certificates on a Mac

[Nikos Mavrogiannopoulos]

On Sat, 2016-02-20 at 13:04 -0800, Ron Garret wrote:
> How can one configure gnutls to recognize the root certificates in 
> the system keychain on OS X?
> 
> Meta-question: I would have expected to be able to find the answer to 
> this question with a Google search or by reading the docs.  I cannot 
> possibly be the first person to want to know the answer to this 
> question.  And yet the answer does not seem to be out there.  The 
> strings “root certificate” and “root ca” each occur exactly once in 
> the documentation at http://gnutls.org/manual/gnutls.html, and 
> neither of those is even remotely the answer to this question.  So it 
> seems my basic model of the world is somehow badly broken.  What am I 
> missing?  How is someone supposed to figure out how to configure the 
> root certs for gnutls?

There is no support for MacOSX in
gnutls_certificate_set_x509_system_trust(). There are some 3rd party
packages of gnutls for that system so maybe they setup the certificates
via ./configure. Otherwise, someone would have to contribute that code.

regards,
Nikos