[OmniOS-discuss] CA certs redux

[Paul B. Henson]

On Sun, Nov 04, 2012 at 12:02:34PM -0500, Eric Sproul wrote:

> I agree that pulling them from libnssckbi is the most desirable
> outcome, and superior to arbitrary syncing from curl.haxx.se.  I can
> look into changing the mozilla-nss build process to extract these
> during the build, and potentially produce the cert package as part of
> the overall nss build as well.

Cool, that sounds great; thanks much...