Often, the cert/key directory is not used at all; otherwise it should be easy to use symbolic links to get the desired effect. Thus it should be possible to do without the '--certdir' patch.
A reason for *not* introducing '--certdir' is that the '--prefix'/'--openssldir' situation is already a little bit complicated w.r.t. default values, and there have been proposals to simplify it. '--certdir' would further complicate the current situation. ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
