On Tue, Jul 13, 2004 at 07:04:09PM +0300, Timo Sirainen wrote:
I have no idea how to do it in Linux though. Does OpenSSL have some hardcoded root certificates directory, or does each program handle it in it's own way?
A bit of both: there is a system-wide certificate directory, but some applications also have their own certificate store. mutt, when linked agaisnt OpenSSL, allows a user to store CA certificates in a default location of ~/.mutt_certificates, and use of the system-wide certificate directory can be toggled. I'm not so familiar with other clients.
On a Debian system, you can "apt-get install ca-certificates" to populate the system directory.
-- Ray Miller, Unix Systems Programmer & Team Leader Systems Development & Support, Computing Services, University of Oxford