johansen at sun.com wrote: > On Fri, Aug 14, 2009 at 09:24:00AM +0100, Darren J Moffat wrote: >> johansen at sun.com wrote: >>>> http://sac.eng/Archives/CaseLog/arc/PSARC/2009/430/20090811_darren.moffat >>> I would recommend using the certificate directory approach instead of >>> creating a single file with all certificates. >> This case doesn't preclude that. > > It may. There are still bugs in OpenSSL's certificate lookup mechanisms > that make it difficult to use both a CertificateFile and a > CertificateDirectory together:
I wasn't aware of that issue. Given that and the fact that separate files would help self assembly and have things consistent (ie always on cert per file) - I'll re-open this case and post a new spec on Monday morning UK time. -- Darren J Moffat
