Opened 6 years ago
Last modified 4 years ago
#1557 assigned enhancement
openssl load system certs
Reported by: | Jim Ursetto | Owned by: | Jim Ursetto |
---|---|---|---|
Priority: | minor | Milestone: | someday |
Component: | extensions | Version: | 4.13.0 |
Keywords: | Cc: | ||
Estimated difficulty: | easy |
Description
Patch attached to read the system default certs (configurable via parameter). It also removes (nullifies the action of) the default CA directory parameter because the default of /etc/ssl/certs only works on Debian based systems, and it doesn’t let you select a default certs.pem file anyway.
This is tested on OS X Sierra and should work fine on Debian and RedHat?, please test. This lets henrietta-cache automatically work on OS X with Homebrew openssl, which it could not before, as the cert path was invalid.
Attachments (1)
Change History (4)
Changed 6 years ago by
Attachment: | openssl-default-certs.diff.txt added |
---|
comment:1 Changed 6 years ago by
Version: | 5.0.0 → 4.13.0 |
---|
comment:2 Changed 4 years ago by
Owner: | changed from Thomas Chust to Vasilij Schneidermann |
---|---|
Status: | new → assigned |
comment:3 Changed 4 years ago by
Owner: | changed from Vasilij Schneidermann to Jim Ursetto |
---|
Note: See
TracTickets for help on using
tickets.
Sorry Jim, but there have been changes to openssl in the meantime that conflict with the patch in
ssl-default-certificate-authority-directory
,ssl-make-client-context*
,ssl-listen*
andssl-start*
. Maybe the egg works on macOS now. That aside, the patch needs to be adjusted to use(ssl-load-default-root-certificates?)
, otherwise it cannot be disabled.