From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Ted Zlatanov Newsgroups: gmane.emacs.devel Subject: Re: need help with certificate bundles for ALL the platforms Emacs supports Date: Tue, 14 Feb 2012 08:01:16 -0500 Organization: =?utf-8?B?0KLQtdC+0LTQvtGAINCX0LvQsNGC0LDQvdC+0LI=?= @ Cienfuegos Message-ID: <877gzpwov7.fsf@lifelogs.com> References: <4F25FA2F.2010401@gmail.com> <4F27F4A1.6030907@gmail.com> <6E4BE1E758D04283A7C3A660ED379966@us.oracle.com> <87liolnipl.fsf@lifelogs.com> <50081AA79F2F4860A3B9DCEDFC1ABEC8@us.oracle.com> <877h04nc2e.fsf@lifelogs.com> <83ehucfjc8.fsf@gnu.org> <87r4ycjbjz.fsf_-_@lifelogs.com> <83mx8zev8s.fsf@gnu.org> <87vcnnj1xm.fsf@lifelogs.com> <87ipjgw0r3.fsf_-_@lifelogs.com> <87zkcqr4td.fsf@lifelogs.com> <87fwef8zui.fsf@lifelogs.com> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: dough.gmane.org 1329224501 25242 80.91.229.3 (14 Feb 2012 13:01:41 GMT) X-Complaints-To: usenet@dough.gmane.org NNTP-Posting-Date: Tue, 14 Feb 2012 13:01:41 +0000 (UTC) Cc: emacs-devel@gnu.org To: Glenn Morris Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Tue Feb 14 14:01:37 2012 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([140.186.70.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1RxI0k-0002Xf-94 for ged-emacs-devel@m.gmane.org; Tue, 14 Feb 2012 14:01:34 +0100 Original-Received: from localhost ([::1]:53199 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1RxI0j-00009s-1z for ged-emacs-devel@m.gmane.org; Tue, 14 Feb 2012 08:01:33 -0500 Original-Received: from eggs.gnu.org ([140.186.70.92]:41258) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1RxI0b-000092-N7 for emacs-devel@gnu.org; Tue, 14 Feb 2012 08:01:31 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1RxI0V-0003Er-Ca for emacs-devel@gnu.org; Tue, 14 Feb 2012 08:01:25 -0500 Original-Received: from z.lifelogs.com ([173.255.230.239]:41551) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1RxI0U-0003EG-SA; Tue, 14 Feb 2012 08:01:18 -0500 Original-Received: from heechee (c-76-28-40-19.hsd1.vt.comcast.net [76.28.40.19]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: tzz) by z.lifelogs.com (Postfix) with ESMTPSA id 142B07E0F2; Tue, 14 Feb 2012 13:01:16 +0000 (UTC) X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6; d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT= D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx" Mail-Copies-To: never Gmane-Reply-To-List: yes In-Reply-To: (Glenn Morris's message of "Mon, 13 Feb 2012 21:32:14 -0500") User-Agent: Gnus/5.130002 (Ma Gnus v0.2) Emacs/24.0.93 (gnu/linux) X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 173.255.230.239 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:148603 Archived-At: On Mon, 13 Feb 2012 21:32:14 -0500 Glenn Morris wrote: GM> Ted Zlatanov wrote: >> + ;; Fedora and RHEL >> + "/etc/pki/tls/certs/ca-bundle.crt" GM> FWIW, on RHEL6 I have both /etc/pki/tls/certs/ca-bundle.crt: GM> # This is a bundle of X.509 certificates of public Certificate GM> # Authorities. It was generated from the Mozilla root CA list. GM> and /etc/pki/tls/certs/ca-bundle.trust.crt: GM> # This is a bundle of X.509 certificates of public Certificate GM> # Authorities. It was generated from the Mozilla root CA list. GM> # These certificates are in the OpenSSL "TRUSTED CERTIFICATE" GM> # format and have trust bits set accordingly. GM> I have no idea which of those you want. The latter is slightly larger. Me neither, and I have no RHEL systems. According to http://rpmfind.net/linux/RPM/fedora/15/i386/ca-certificates-2011.70-2.fc15.noarch.html both of these are in the ca-certificates Fedora package. So I would guess the differences are cosmetic and the files are equivalent. But if anyone knows different, please let us know. Thanks Ted