Mailinglist Archive: opensuse-bugs (4736 mails)

< Previous Next >
[Bug 594501] update-ca-certificates doesn't generate /etc/ssl/cert.pem
  • From: bugzilla_noreply@xxxxxxxxxx
  • Date: Thu, 8 Apr 2010 10:06:18 +0000
  • Message-id: <20100408100618.488C8CC7CE@xxxxxxxxxxxxxxxxxxxxxx>

--- Comment #4 from Vincent Untz <vuntz@xxxxxxxxxx> 2010-04-08 10:06:17 UTC ---
(In reply to comment #3)
(In reply to comment #2)
Anyway, in all cases, I don't have any pem file in /etc/ssl, do I don't have
/etc/ssl/ca-bundle.pem either ;-)

Is ca-certificates-mozilla installed?

Yes. Anything I can do to debug?

As for epiphany: it's a build time option. Right now, we pass
to configure since we don't have any file to use, so it's not related to bug
594434. By default, it was checking for the existence of a file, so the
was failing, but I can force a path and it won't check the existence during
build. So if /etc/ssl/ca-bundle.pem is the right thing to use, then that's I
need to know to fix the epiphany part.

Does epiphany use openssl or gnutls? In case of openssl just make it
call SSL_CTX_set_default_verify_paths(). gnutls unfortunately
doesn't support directories itself so the cheap solution there
indeed is to use the bundle file (won't work on older openSUSE
though) or just load /etc/ssl/certs/*.pem manually. libpurple does

Epiphany uses libsoup, which uses gnutls. It's okay if it doesn't work on old
versions of openSUSE, so I guess I'll be happy with the bundle.

Configure bugmail:
------- You are receiving this mail because: -------
You are on the CC list for the bug.

< Previous Next >