Hi, today I wanted to install globally a custom ca-certificate (actually just the ca-certificates-cacert rpm package). I found that it's a bit annoying that this is not easily possible since different programs are using different paths to look for ca certificates and we have a lot duplicated certs installed For example we have some packages giving us some certificates ca-certificates-mozilla: /usr/share/ca-certificates/mozilla/ kdelibs3: /opt/kde3/share/apps/kssl/ca-bundle.crt kdelibs4: /usr/share/kde4/apps/kssl/ca-bundle.crt (They all have more less the same content.) Then we have autogenerated bundle file and directory /etc/ssl/ca-bundle.pem /etc/ssl/certs/ which are generated from everything below /usr/share/ca-certificates/ and possibly some other paths. Many programs (like curl or wget) are using /etc/ssl/ to search for certificates. But to get firefox, kde4 and kde3 in sync I need to ln -sf /etc/ssl/ca-bundle.pem /opt/kde3/share/apps/kssl/ca-bundle.crt ln -sf /etc/ssl/ca-bundle.pem /usr/share/kde4/apps/kssl/ca-bundle.crt and somehow to teach firefox to use /etc/ssl/certs/ instead of /usr/share/ca-certificates/mozilla/. My question is, couldn't we do that per default? So that installing custom ca-certificates globally would affect hopefully all possible programs. cu, Rudi -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org