I'm trying to extend the list of certifictaes (the default CA bundle)
OpenSSL and OpenSSL-aware apps trust to include out Enterprise root
cert.

This is on a RHEL 5.x machine (0.9.8e plus backported RH patches).

>From reading, it seems like the proper way to do this is either to
append the cert to the end of my /etc/pkt/tls/certs/ca-bundle.crt file
OR to create a symlink to the crt in the same /etc/pki/tls/certs
directory with the target link being named <hash_of_cert>.0.

Couple of questions:

- Is the latter option listed above the correct/best way to do this?
- What's the best way to test?  Some utilities such as cURL seem to use
  OpenSSL but don't appear to be referencing my .0 cert above and need
  application specific ways to trust additional certs.

Thanks for the feedback.

Ray
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to