Fix getCAROOT switch statement

See #32

HomebrewFormula/mkcert.rb

@@ -1,18 +0,0 @@
-class Mkcert < Formula
-  desc "Simple tool to make locally-trusted development certificates"
-  homepage "https://github.com/FiloSottile/mkcert"
-  head "https://github.com/FiloSottile/mkcert.git"
-
-  depends_on "go" => :build
-
-  def install
-    ENV["GOPATH"] = buildpath
-    mkcertpath = buildpath/"src/github.com/FiloSottile/mkcert"
-    mkcertpath.install buildpath.children
-    cd mkcertpath do
-      system "go", "build", "-o", bin/"mkcert"
-      prefix.install_metafiles
-    end
-  end
-end
-  

README.md

@@ -33,7 +33,7 @@ mkcert automatically creates and installs a local CA in the system root store, a
 On macOS, use Homebrew.
 
 ```
-brew install --HEAD https://github.com/FiloSottile/mkcert/raw/master/HomebrewFormula/mkcert.rb
+brew install mkcert
 brew install nss # if you use Firefox
 ```
 
@@ -54,7 +54,7 @@ $(go env GOPATH)/bin/mkcert
 
 Windows will be supported next. (PRs welcome!)
 
-Warning: the `rootCA-key.pem` file that mkcert automatically generates gives complete power to intercept secure requests from your machine. Do not share it.
+> **Warning**: the `rootCA-key.pem` file that mkcert automatically generates gives complete power to intercept secure requests from your machine. Do not share it.
 
 ## Advanced topics
 

main.go

@@ -137,25 +137,24 @@ func getCAROOT() string {
 	}
 
 	var dir string
-	switch runtime.GOOS {
+	switch {
-	case "windows":
+	case runtime.GOOS == "windows":
 		dir = os.Getenv("LocalAppData")
-	case "darwin":
+	case os.Getenv("XDG_DATA_HOME") != "":
+		dir = os.Getenv("XDG_DATA_HOME")
+	case runtime.GOOS == "darwin":
 		dir = os.Getenv("HOME")
 		if dir == "" {
 			return ""
 		}
 		dir = filepath.Join(dir, "Library", "Application Support")
 	default: // Unix
-		dir = os.Getenv("XDG_DATA_HOME")
-		if dir == "" {
 		dir = os.Getenv("HOME")
 		if dir == "" {
 			return ""
 		}
 		dir = filepath.Join(dir, ".local", "share")
 	}
-	}
 	return filepath.Join(dir, "mkcert")
 }
 

truststore_nss.go

@@ -97,6 +97,9 @@ func (m *mkcert) forEachNSSProfile(f func(profile string)) (found int) {
 		return
 	}
 	for _, profile := range profiles {
+		if stat, err := os.Stat(profile); err != nil || !stat.IsDir() {
+			continue
+		}
 		if _, err := os.Stat(filepath.Join(profile, "cert8.db")); !os.IsNotExist(err) {
 			f("dbm:" + profile)
 			found++