how to update curl's certificates

You used to be able to download the certs from here and here.

You can make your own cert-bundle by running this script.

where are certs normally stored?

Run curl -v -I https://registry.npmjs.org/ 2>&1 | grep -i 'capath\|cafile'

Run curl-config --ca

It varies by distro; see here.

In Windows, curl will search for a CA cert file named "curl-ca-bundle.crt" in these directories and in this order:

  1. application's directory
  2. current working directory
  3. Windows System directory (e.g. C:\windows\system32)
  4. Windows Directory (e.g. C:\windows)
  5. all directories along %PATH%

how do I test if it's working or not?

curl -vvv -I --cacert npmca.crt https://registry.npmjs.org/