Mailinglist Archive: opensuse-bugs (4736 mails)

< Previous Next >
[Bug 594501] update-ca-certificates doesn't generate /etc/ssl/cert.pem
  • From: bugzilla_noreply@xxxxxxxxxx
  • Date: Thu, 8 Apr 2010 10:06:18 +0000
  • Message-id: <20100408100618.488C8CC7CE@xxxxxxxxxxxxxxxxxxxxxx>
http://bugzilla.novell.com/show_bug.cgi?id=594501

http://bugzilla.novell.com/show_bug.cgi?id=594501#c4


--- Comment #4 from Vincent Untz <vuntz@xxxxxxxxxx> 2010-04-08 10:06:17 UTC ---
(In reply to comment #3)
(In reply to comment #2)
Anyway, in all cases, I don't have any pem file in /etc/ssl, do I don't have
/etc/ssl/ca-bundle.pem either ;-)

Is ca-certificates-mozilla installed?

Yes. Anything I can do to debug?

As for epiphany: it's a build time option. Right now, we pass
--without-ca-file
to configure since we don't have any file to use, so it's not related to bug
594434. By default, it was checking for the existence of a file, so the
build
was failing, but I can force a path and it won't check the existence during
the
build. So if /etc/ssl/ca-bundle.pem is the right thing to use, then that's I
need to know to fix the epiphany part.

Does epiphany use openssl or gnutls? In case of openssl just make it
call SSL_CTX_set_default_verify_paths(). gnutls unfortunately
doesn't support directories itself so the cheap solution there
indeed is to use the bundle file (won't work on older openSUSE
though) or just load /etc/ssl/certs/*.pem manually. libpurple does
that.

Epiphany uses libsoup, which uses gnutls. It's okay if it doesn't work on old
versions of openSUSE, so I guess I'll be happy with the bundle.

--
Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

< Previous Next >
References