d538ada99c
- Major rework for the Fedora SharedSystemCertificates feature. - Only ship a PEM bundle file using the BEGIN TRUSTED CERTIFICATE file format. - Require the p11-kit package that contains tools to automatically create other file format bundles. - Convert old file locations to symbolic links that point to dynamically generated files. - Old files, which might have been locally modified, will be saved in backup files with .rpmsave extension. - Added a update-ca-certificates script which can be used to regenerate the merged trusted output. - Refer to the various README files that have been added for more detailed explanation of the new system. - No longer require rsc for building. - Add explanation for the future version numbering scheme, because the old numbering scheme was based on upstream using cvs, which is no longer true, and therefore can no longer be used. - Includes changes from rhbz#873369.
28 lines
1.1 KiB
Plaintext
28 lines
1.1 KiB
Plaintext
This directory /etc/pki/ca-trust/extracted/openssl/ contains
|
|
CA certificate bundle files which are automatically created
|
|
based on the information found in the
|
|
/usr/share/pki/ca-trust-source/ and /etc/pki/ca-trust/source/
|
|
directories.
|
|
|
|
All files are in the BEGIN/END TRUSTED CERTIFICATE file format,
|
|
as described in the x509(1) manual page.
|
|
|
|
File /ca-bundle.trust.crt contains the full set of all trusted
|
|
or distrusted certificates, including the associated trust flags.
|
|
|
|
If your application isn't able to load the PKCS#11 module p11-kit-trust.so,
|
|
then you can use these files in your application to load a list of global
|
|
root CA certificates.
|
|
|
|
Please never manually edit the files stored in this directory,
|
|
because your changes will be lost and the files automatically overwritten,
|
|
each time the update-ca-trust command gets executed.
|
|
|
|
In order to install new trusted or distrusted certificates,
|
|
please rather install them in the
|
|
/usr/share/pki/ca-trust-source/ and /etc/pki/ca-trust/source/
|
|
directories.
|
|
|
|
Please refer to the README files in those directories to learn
|
|
how to install new files.
|