Re: Openssl and certificate directory

[Mark H Weaver]

Andreas Enge <address@hidden> writes:

> the attached patch does the same thing as we just pushed for gnutls:
> It sets the global certificate store to files and directories inside
> /etc/ssl.

Unlike GnuTLS, OpenSSL supports setting the trust store location using
environment variables, specifically SSL_CERT_DIR and SSL_CERT_FILE.
Shouldn't we just use those?

> It should be applied after the update to 1.0.2, which I am
> trying to have built by hydra on the wip-openssl branch (except that hydra
> refuses to evaluate this for the last few hours, did I make a mistake?).

If we were to apply this patch, I'd rather have just one rebuild rather
than two, especially since our MIPS build slave is unable to keep up as
it is.  What do you think?

     Best,
      Mark