Re: Openssl and certificate directory

2015-02-08 Thread Mark H Weaver
l...@gnu.org (Ludovic Courtès) writes: > Andreas Enge skribis: > >> On Sat, Feb 07, 2015 at 08:57:32PM -0500, Mark H Weaver wrote: >>> Unlike GnuTLS, OpenSSL supports setting the trust store location using >>> environment variables, specifically SSL_CERT_DIR and SSL_CERT_FILE. >>> Shouldn't we ju

Re: Openssl and certificate directory

2015-02-08 Thread Ludovic Courtès
Andreas Enge skribis: > On Sat, Feb 07, 2015 at 08:57:32PM -0500, Mark H Weaver wrote: >> Unlike GnuTLS, OpenSSL supports setting the trust store location using >> environment variables, specifically SSL_CERT_DIR and SSL_CERT_FILE. >> Shouldn't we just use those? > > I had read about these, but t

Re: Openssl and certificate directory

2015-02-08 Thread Andreas Enge
On Sat, Feb 07, 2015 at 08:57:32PM -0500, Mark H Weaver wrote: > Unlike GnuTLS, OpenSSL supports setting the trust store location using > environment variables, specifically SSL_CERT_DIR and SSL_CERT_FILE. > Shouldn't we just use those? I had read about these, but the documentation mentions them o

Re: Openssl and certificate directory

2015-02-07 Thread Mark H Weaver
Andreas Enge writes: > the attached patch does the same thing as we just pushed for gnutls: > It sets the global certificate store to files and directories inside > /etc/ssl. Unlike GnuTLS, OpenSSL supports setting the trust store location using environment variables, specifically SSL_CERT_DIR a