diff options
| author | drochner <drochner@pkgsrc.org> | 2011-03-11 21:00:06 +0000 |
|---|---|---|
| committer | drochner <drochner@pkgsrc.org> | 2011-03-11 21:00:06 +0000 |
| commit | b928310308bb64048e508e3547ac0b7501d76a71 (patch) | |
| tree | f7bff49e96c46e08e2196c64062314d432ea961c /security | |
| parent | 2af6c1d99d140b731687ac16ffc7ca3512aad5f9 (diff) | |
| download | pkgsrc-b928310308bb64048e508e3547ac0b7501d76a71.tar.gz | |
add some clarification about the difference between OpenSSL and GnuTLS,
and guidance for users of the latter
Diffstat (limited to 'security')
| -rw-r--r-- | security/mozilla-rootcerts/MESSAGE | 11 |
1 files changed, 9 insertions, 2 deletions
diff --git a/security/mozilla-rootcerts/MESSAGE b/security/mozilla-rootcerts/MESSAGE index 67566668ae2..68205f16a1a 100644 --- a/security/mozilla-rootcerts/MESSAGE +++ b/security/mozilla-rootcerts/MESSAGE @@ -1,11 +1,18 @@ =========================================================================== -$NetBSD: MESSAGE,v 1.1 2011/01/31 03:05:17 jym Exp $ +$NetBSD: MESSAGE,v 1.2 2011/03/11 21:00:06 drochner Exp $ Execute these commands to extract and rehash all CA root certificates distributed by the Mozilla Project, so that they can be used by third -party applications: +party applications using OpenSSL: # cd /etc/openssl/certs # Default SSLCERTS path for NetBSD # mozilla-rootcerts extract # mozilla-rootcerts rehash + +To create a single file certificate bundle in PEM format which can +be used by applications using GnuTLS, do the following: + + # mkdir -p /etc/ssl/certs + # cd /etc/ssl/certs + # cat ../../openssl/certs/*.pem >ca-certificates.crt =========================================================================== |