Re: mozilla-rootcerts assumes /etc/ssl/certs

[Joerg Sonnenberger <joerg%bec.de@localhost>]

On Wed, Mar 29, 2017 at 06:05:04PM +0000, coypu%sdf.org@localhost wrote:
> It could probably be smarter, or pkgsrc openssl can be taught to look
> at system-wide CAs too, if it doesn't.
> (I feel like for root CA choices, people will likely prefer system-wide
> settings to be respected by default).

Except that you can run into issues with c_rehash giving different
results with different OpenSSL versions. In that case, you can't just
reuse the system-wide index...

Joerg