[Pkg-openssl-devel] Bug#642314: c_rehash and "trusted certificates" another regression

Stefan Skoglund stefan.skoglund at agj.net
Sun Jan 6 23:07:22 UTC 2013


Regarding the usage of "BEGIN TRUSTED CERT".

This header is created when using the '-trustout' arg to x509(1ssl)

The change as such means breaks for example  :
'openssl verify -CApath /etc/ssl/certs'

if one of the certs in the chain has this header. 

The trust functionality as such is in x509(1ssl) marked as experimental.

But i did got a little peeve when my carefully created root ca cert
didnt appear as i think it should.... 



More information about the Pkg-openssl-devel mailing list