Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 281847 - app-misc/ca-certificates should support addition local only certificates
Summary: app-misc/ca-certificates should support addition local only certificates
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: High enhancement (vote)
Assignee: Robin Johnson
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-08-17 22:40 UTC by Christian Birchinger (RETIRED)
Modified: 2010-07-16 13:30 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Christian Birchinger (RETIRED) gentoo-dev 2009-08-17 22:40:52 UTC
It would be nice to use app-misc/ca-certificates also for own CAs, by using an additional config file. This would make it easier when /etc/ca-certificates.conf changes (on package updates). For example /etc/ca-certificates-local.conf could be used for this. With that additional config file any merging with your own entries after an update would be unnecessary.

Example usage:
/etc/ca-certificates-local.conf file content:
local/ca-netswarm.crt

/usr/share/ca-certificates/local/ dir content:
ca-netswarm.crt


Reproducible: Always

Steps to Reproduce:
Comment 1 Priit Laes (IRC: plaes) 2009-10-21 06:29:03 UTC
This is a good idea, as I have been recently bitten by this missing feature ;)
It should also handle duplicates between system and local certificates in case same certificate gets added into ca-certificates (or other similar packages) .
Comment 2 Mike Nerone 2010-05-25 18:02:05 UTC
In recent versions, ca-certificates automatically trusts any .crt's you put in /usr/local/share/ca-certificates. Does that not address your need?
Comment 3 Priit Laes (IRC: plaes) 2010-05-25 18:52:52 UTC
(In reply to comment #2)
> In recent versions, ca-certificates automatically trusts any .crt's you put in
> /usr/local/share/ca-certificates. Does that not address your need?
> 

I guess so. Maybe this bug can be marked as fixed now?
Comment 4 Christian Birchinger (RETIRED) gentoo-dev 2010-07-16 13:30:29 UTC
Yes, it works. Closing the bug.