I get the following error when accessing Github over HTTPS:
error: server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
This is because I don't have any certificates in
/etc/ssl/certs/. I know how to fix this problem. I can install the package
ca-certificates from Debian repository. The problem is, however, that this will install all certificates (thousands) which I don't necessarily want to accept/trust.
How can I install certificate for Github only?
On another machine, where the package
ca-certificates is already installed and git works, I have noticed that some certificates in
/etc/ssl/certs/ are one-certificate-per-file and other are many-certificates-in-one-file. The particular file containing Github certificate,
/etc/ssl/certs/ca-certificates.crt contains over 150 other certificates:
$ grep 'BEGIN CERTIFICATE' /etc/ssl/certs/ca-certificates.crt | wc -l 159
How can I find which one out of these 159 certificate is the one I need? (other than brute force - slicing the file in halves and checking both halves, repeating
while n > 1).