2 Commits

Author	SHA1	Message	Date
Kai Engert	40d3667f3c	rename legacy=enable to legacy=default and related changes; add ca-legacy man page; handle absent configuration in ca-legacy	2015-03-31 23:02:57 +02:00
Kai Engert	e24bfeb6b0	- Introduce the ca-legacy utility and a ca-legacy.conf configuration file. ... By default, legacy roots required for OpenSSL/GnuTLS compatibility are kept enabled. Using the ca-legacy utility, the legacy roots can be disabled. If disabled, the system will use the trust set as provided by the upstream Mozilla CA list. (See also: rhbz#1158197)	2014-10-28 20:54:15 +01:00