On Fri, Sep 05, 2003, Dann Daggett wrote:

> 
> However, I still don't know about the empty /certs directory. Am I supposed
> to copy /usr/local/src/openssl-0.9.7b/certs/ to /usr/local/ssl/certs? It
> seems strange that the install script wouldn't have done that as well if it
> were needed.
> 

Well you copy the ones that are relevant to what you want to verify. Beware of
copying the whole certs directory because it includes internal test CAs which
have the private keys included in all versions of OpenSSL: that is anyone
could create a certificate for them...

Steve.
--
Dr Stephen N. Henson.
Core developer of the   OpenSSL project: http://www.openssl.org/
Freelance consultant see: http://www.drh-consultancy.demon.co.uk/
Email: [EMAIL PROTECTED], PGP key: via homepage.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to