diff options
| author | drochner <drochner> | 2011-03-11 21:00:06 +0000 |
|---|---|---|
| committer | drochner <drochner> | 2011-03-11 21:00:06 +0000 |
| commit | 3c8ee8ffc1be1242125ad2e5350aaabe86d9086b (patch) | |
| tree | f7bff49e96c46e08e2196c64062314d432ea961c | |
| parent | 0c1a7f130d7d0670d8184e0665a71e9cf732f260 (diff) | |
| download | pkgsrc-3c8ee8ffc1be1242125ad2e5350aaabe86d9086b.tar.gz | |
add some clarification about the difference between OpenSSL and GnuTLS,
and guidance for users of the latter
| -rw-r--r-- | security/mozilla-rootcerts/MESSAGE | 11 |
1 files changed, 9 insertions, 2 deletions
diff --git a/security/mozilla-rootcerts/MESSAGE b/security/mozilla-rootcerts/MESSAGE index 67566668ae2..68205f16a1a 100644 --- a/security/mozilla-rootcerts/MESSAGE +++ b/security/mozilla-rootcerts/MESSAGE @@ -1,11 +1,18 @@ =========================================================================== -$NetBSD: MESSAGE,v 1.1 2011/01/31 03:05:17 jym Exp $ +$NetBSD: MESSAGE,v 1.2 2011/03/11 21:00:06 drochner Exp $ Execute these commands to extract and rehash all CA root certificates distributed by the Mozilla Project, so that they can be used by third -party applications: +party applications using OpenSSL: # cd /etc/openssl/certs # Default SSLCERTS path for NetBSD # mozilla-rootcerts extract # mozilla-rootcerts rehash + +To create a single file certificate bundle in PEM format which can +be used by applications using GnuTLS, do the following: + + # mkdir -p /etc/ssl/certs + # cd /etc/ssl/certs + # cat ../../openssl/certs/*.pem >ca-certificates.crt =========================================================================== |