On Fri, Sep 05, 2003, Dann Daggett wrote: > > However, I still don't know about the empty /certs directory. Am I supposed > to copy /usr/local/src/openssl-0.9.7b/certs/ to /usr/local/ssl/certs? It > seems strange that the install script wouldn't have done that as well if it > were needed. >
Well you copy the ones that are relevant to what you want to verify. Beware of copying the whole certs directory because it includes internal test CAs which have the private keys included in all versions of OpenSSL: that is anyone could create a certificate for them... Steve. -- Dr Stephen N. Henson. Core developer of the OpenSSL project: http://www.openssl.org/ Freelance consultant see: http://www.drh-consultancy.demon.co.uk/ Email: [EMAIL PROTECTED], PGP key: via homepage. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]