Re: [spice-gtk v5 2/2] Use system-wide trust certificate store

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hey,

On Tue, Nov 12, 2013 at 10:55:23AM -0500, i iordanov wrote:
> Hence, would it be possible to provide an option along the lines of
> what librest provides (--with-ca-certificates=[path]), which specifies
> where to look for the system-wide CA bundle?

The latest iteration of the patches no longer tries to figure out the
location of the system-wide CA bundle on its own, but relies on OpenSSL
defaults instead.

> 
> This way, I can create a CA bundle file, add it to mobile applications
> as a resource, and then specify its location to librest and spice-gtk
> at compile time.
> 
> If such an option cannot be provided, it would be nice if I can simply
> change one location in the source of spice-gtk to tell it where to
> look for the bundle. Where is that location?

If you don't specify a CA file explicitly, spice-gtk will try to use
the CA file located in ~/.spicec/spice_truststore.pem if you use
spice_set_session_option in your application (which implies using
the spice commandline option stuff).

Christophe

Attachment: pgpbtRzBvIEi9.pgp
Description: PGP signature

_______________________________________________
Spice-devel mailing list
Spice-devel@xxxxxxxxxxxxxxxxxxxxx
http://lists.freedesktop.org/mailman/listinfo/spice-devel

[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]     [Monitors]