On Tue, 22 Jul 2003, Stef Caunter wrote: > Thanks very much for this. I had forgotten to export > SSL_CERT_FILE and SSL_CERT_DIR. Lynx now finds commercial and "imported" > certs. > > Is there somewhere that this could be documented? I don't > mind doing a step by step write up of the procedure > (download cert, convert to pem format, rehash, set > environment vars, export), instead of people having to > wade through the list archive.
Actually, I don't think that this is really documented anywhere other than in the source code for OpenSSL. The environment variables aren't mentioned (as far as I can tell) in any of the OpenSSL documentation. The closest that I can find is an obsolete documentation file for SSLeay "http://www2.psy.uq.edu.au/~ftp/Crypto/certs.html";, but the source code filenames are no longer current. Note that at least the SSL_CERT_FILE mechanism was broken in OpenSSL until I reported it late last year. This suggests that not many people were trying to use this part of the code. I don't know which is the best place to write this up for lynx. I would think either in the INSTALLATION file or in a new file, that you could call something like README.certs. I think good documentation files are always welcomed. Doug -- Doug Kaufman Internet: [EMAIL PROTECTED] ; To UNSUBSCRIBE: Send "unsubscribe lynx-dev" to [EMAIL PROTECTED]
