On Fri, 2005-04-22 at 17:24 +0200, D. Stolte wrote: > Tomas Mraz wrote: > > On Fri, 2005-04-22 at 16:37 +0200, D. Stolte wrote: > > > >>>openssl-0.9.7f-4 > >>>---------------- > >>>* Thu Apr 21 2005 Tomas Mraz <tmraz@xxxxxxxxxx> 0.9.7f-4 > >>>- move certificates to _sysconfdir/pki/tls (#143392) > >>>- move CA directories to _sysconfdir/pki/CA > >>>- patch the CA script and the default config so it points to the > >>> CA directories > >> > >>some questions: > >>- Why and who chose /etc/pki/tls as openssl dir? redhat has to be > >>special again? > > > > See this discussion: https://www.redhat.com/archives/fedora- > > maintainers/2005-April/msg00059.html > > Ok, thanks. Makes sense. > > >>- the patch to openssl.conf regarding the base ca dir ../../CA doesnt > >> look correct. Isnt it ./../CA ? > > > > No, the CA directory is not in the tls subdir because it presents a > > special functionality useful not only for TLS and it isn't part of non- > > rpm openssl installation. > > > > Yes, i understand why the CA dir is outside the tls dir but the relative > path in the openssl.cnf points to /etc/CA. I dont think that *this* is > intended. It actually points to a directory relative to a CWD where the openssl binary is run and in this case it is run in the /etc/pki/tls/misc. However maybe it should be patched with an absolute path instead? -- Tomas Mraz <tmraz@xxxxxxxxxx>
