On Thu, 2012-07-19 at 10:49 -0400, Mcclelland, Michael B Mr CTR USN USA wrote: > I might be oversimplifying but couldn't I get away with simply doing a > symlink? Something like this? > > sudo ln -s /etc/ssl/certs/ca-certificates.crt > /etc/pki/tls/certs/ca-bundle.crt Yes, that works too. > Worked when I tested. I'd hate to have you guys have to burdened with extra > code on my account when the blame should rest on the dated gnutls28 library > in the repos, which should be resolved when 12.10 hits. Yeah, in an ideal work everyone would be using GnuTLS 3.0.21 and I wouldn't have to care about backward compatibility. In practice though, I've already jumped through significantly bigger hoops to make everything work as far back as 2.12.16... and Mike has patched it a bit more to work with 2.12.14. This bit is trivial in comparison :) There are enough people out there with old versions of GnuTLS that it makes sense to do it, I think. -- dwmw2 -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 6171 bytes Desc: not available URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20120719/0e5d37f4/attachment.bin>