Bug#571776: document symbols

2012-03-19 Thread Jonathan Nieder
Russ Allbery wrote: > I'm therefore including here the complete > SGML source of that section not in diff format, followed by the diff of > everything *outside* of that section. I think this will be easier to > review. Thanks! I would have preferred a diff since it

Bug#571776: document symbols

2012-03-19 Thread Charles Plessy
Le Sat, Mar 17, 2012 at 11:17:29AM -0700, Russ Allbery a écrit : > Here is a new proposed patch that incorporates the feedback to date with > some other, substantial changes. > Due to the reformatting, the diff is even longer and is now really just > the complete removal of the current shlibs sect

Debian Policy about administrator X.509 certificate stores [was: Re: dovecot-common: please do not use /etc/ssl/certs for end-entity X.509 certificates (/etc/ssl/certs/dovecot.pem)]

2012-03-19 Thread Daniel Kahn Gillmor
[this discussion started on http://bugs.debian.org/608719] On 03/19/2012 11:14 PM, Ben Hutchings wrote: On Sun, 2011-01-02 at 18:20 -0500, Daniel Kahn Gillmor wrote: It looks like dovecot-common's postinst script creates a new X.509 certificate and places it in /etc/ssl/certs/dovecot.pem. This

Re: Debian Policy about administrator X.509 certificate stores

2012-03-19 Thread Russ Allbery
Daniel Kahn Gillmor writes: > On 03/19/2012 11:14 PM, Ben Hutchings wrote: >> Personally, I think that it is a bad idea to treat the certificates in >> /etc/ssl/certs as automatically trusted. Even if packagers follow such >> a policy, system administrators likely will not read the policy and >>