Install — tls-ca-fetch

🍺

Homebrew

macOS

⬇️

Pre-built Binary

Static binary — no Go, no build tools. Download and run.

Linux · macOS · Windows

🐹

Build from Source

Requires Go 1.22+. Works on any platform Go supports.

Any platform

🐳

Docker Build

No local Go needed. Cross-compiles all platforms via build.sh.

Linux · macOS

🍺 Homebrew

Recommended for macOS. Works on both Apple Silicon (arm64) and Intel (amd64). Installs the correct pre-built binary automatically and keeps it up to date.

install

$ brew install binRick/tap/tls-ca-fetch

or tap first, then install

$ brew tap binRick/tap
$ brew install tls-ca-fetch

upgrade later

$ brew upgrade tls-ca-fetch

⬇️ Pre-built Binary

Fully static binaries — no libc, no runtime dependencies. Download, chmod +x, and run. Available for Linux, macOS, and Windows.

Linux — amd64 (x86-64)

$ curl -fsSL https://github.com/binRick/tls-ca-fetch/raw/main/releases/v1.0.0/tls-ca-fetch-linux-amd64 -o tls-ca-fetch
$ chmod +x tls-ca-fetch && sudo mv tls-ca-fetch /usr/local/bin/

Linux — arm64 (Raspberry Pi, AWS Graviton, etc.)

$ curl -fsSL https://github.com/binRick/tls-ca-fetch/raw/main/releases/v1.0.0/tls-ca-fetch-linux-arm64 -o tls-ca-fetch
$ chmod +x tls-ca-fetch && sudo mv tls-ca-fetch /usr/local/bin/

macOS — Apple Silicon (arm64)

$ curl -fsSL https://github.com/binRick/tls-ca-fetch/raw/main/releases/v1.0.0/tls-ca-fetch-darwin-arm64 -o tls-ca-fetch
$ chmod +x tls-ca-fetch && sudo mv tls-ca-fetch /usr/local/bin/

macOS — Intel (amd64)

$ curl -fsSL https://github.com/binRick/tls-ca-fetch/raw/main/releases/v1.0.0/tls-ca-fetch-darwin-amd64 -o tls-ca-fetch
$ chmod +x tls-ca-fetch && sudo mv tls-ca-fetch /usr/local/bin/

Windows — amd64 (PowerShell)

> Invoke-WebRequest -Uri https://github.com/binRick/tls-ca-fetch/raw/main/releases/v1.0.0/tls-ca-fetch-windows-amd64.exe -OutFile tls-ca-fetch.exe

verify installation

$ tls-ca-fetch -version
tls-ca-fetch v1.0.0

# quick smoke test
$ tls-ca-fetch github.com
✓ Saved 1 CA certificate(s) → github.com-ca.pem

🐹 Build from Source

Requires Go 1.22+. Check with go version. Produces a native binary for your current platform.

clone and build

$ git clone https://github.com/binRick/tls-ca-fetch && cd tls-ca-fetch
$ make build
$ sudo mv tls-ca-fetch /usr/local/bin/

or go build directly

$ CGO_ENABLED=0 go build -trimpath -ldflags="-s -w" -o tls-ca-fetch .
$ sudo mv tls-ca-fetch /usr/local/bin/

🐳 Docker Build

No local Go required. build.sh pulls golang:1.22-alpine and cross-compiles all platforms into releases/.

cross-compile all platforms

$ git clone https://github.com/binRick/tls-ca-fetch && cd tls-ca-fetch
$ VERSION=v1.0.0 ./build.sh
Done. Binaries in releases/v1.0.0/
$ sudo cp releases/v1.0.0/tls-ca-fetch-linux-amd64 /usr/local/bin/tls-ca-fetch

See Building for full details on all build methods.

📦 Install