On Wed, Jun 9, 2010 at 6:35 PM, Victor Duchovni <[email protected]> wrote: > Probably, although I don't think we've reached a final decision yet... > My preference is to not trust some random list of CAs that came with the > O/S OpenSSL package when the user specifies an explicit CAfile/CApath, > but this would be an incompatible change. > > In my case, the OpenSSL package I use is built by me, and has an empty > default list of trusted CAs, so I never notice the extra default certs. >
ok, could you please point me to the place where one can set those paths while building OpenSSL ? Jan
