Re: [Mosquitto-users] Best practices for tls_set in Python

2013-06-21 Thread Jack O'Connor
What I didn't realize all along is that there's a concatenated certs file at */etc/ssl/certs/ca-certificates.crt* (at least on Arch and Ubuntu). That's what I should've been using from the beginning. Thanks for your help. -- Jack On Wed, Jun 12, 2013 at 4:01 PM, Roger Light wrote: > Hi Jack, >

Re: [Mosquitto-users] Best practices for tls_set in Python

2013-06-12 Thread Roger Light
Hi Jack, Thanks for the reminder that I'd not replied to this. You can of course use the certificates that come with your OS and as Alexander says they are located in /etc/ssl/certs. You can use the "capath" option rather than "cafile" to load them. Bear in mind that there may be no need for you

Re: [Mosquitto-users] Best practices for tls_set in Python

2013-06-10 Thread Jack O'Connor
Any new thoughts on this cert issue? On Mon, Feb 11, 2013 at 2:21 PM, Roger Light wrote: > Hi Jack, > > I've got a part written reply to you that I've not yet sent because > I'm not happy with it. Sorry about that, I'll try and sort it out as > soon as I can. > > Cheers, > > Roger > > On Mon, F

Re: [Mosquitto-users] Best practices for tls_set in Python

2013-02-11 Thread Roger Light
Hi Jack, I've got a part written reply to you that I've not yet sent because I'm not happy with it. Sorry about that, I'll try and sort it out as soon as I can. Cheers, Roger On Mon, Feb 11, 2013 at 10:04 PM, Jack O'Connor wrote: > Thanks for the reply, and I meant to follow up sooner. Does th

Re: [Mosquitto-users] Best practices for tls_set in Python

2013-02-11 Thread Jack O'Connor
Thanks for the reply, and I meant to follow up sooner. Does that mean that every application that uses the SSL features of Mosquitto ships its own copy of the certs file? (And by extension, that every app is independently responsible for keeping that file up to date?) On Tue, Feb 5, 2013 at 6:02

Re: [Mosquitto-users] Best practices for tls_set in Python

2013-02-05 Thread Alexander Bolotnov
You can symlink or copy it to /etc/ssl/cert for that. There's probably a bunch of certs already anyway :) Sasha Bolotnov www.bolotnov.info On Tue, Feb 5, 2013 at 4:12 PM, Jack O'Connor wrote: > The tls_set API requires a path to a certificate authorities file. I can > download a file of the

[Mosquitto-users] Best practices for tls_set in Python

2013-02-05 Thread Jack O'Connor
The tls_set API requires a path to a certificate authorities file. I can download a file of the right type from mozilla or somewhere, but I'm wondering if it's really appropriate to include my own CA list in the project. Is there a standard way to get this information from the OS instead, for examp