James wrote:
> Every certificate that doesn't have something at the root of its chain, as it should. I'm on osx and there is no /etc/ssl/certs, so I had no roots until I started loading them.
Where does OSX keep them?
I'd looked on the web a bit in the past in case there was any simple
consensus out there on the matter of where to check, but didn't find
anything.
I'll see where curl checks. Whatever they do is probably a good idea.