Re: CA certificates file

On 23/02/2019 22:41, David Higton wrote:
> Hi guys,
>
> The CA certs file as supplied with RISC OS is some months out of date.
> Also, RISC OS HardDisc4 distributions come with the same file, but in
> a different location and under a different name.
>
> Can NetSurf be made to use the one that RISC OS provides?

Probably, although it should most likely check for its existence first
and fall back to the one that is provided with NetSurf itself (which
will always be current at the time the relevant release of NetSurf is
made). Patches to set_default() in frontends/riscos/gui.c are most welcome.

> Is it a command line option, for example?

The relevant configuration option is called "ca_bundle" and its value is
expected to be a (host-platform native) path to a standard certificate
bundle file. This may be set manually by editing the configuration file.
There is a corresponding "ca_path" which may be used to provide a path
to a standard indexed certificate directory (which is probably
irrelevant for RISC OS, as such a thing would have to exist first).

Like all configuration options, it can be passed on the command line, thus:

--<option-name>=<option-value>

So, for ca_bundle (on an OS that uses Unix-style paths):

--ca_bundle=/path/to/file

However, the command line should be reserved for a user's own
configuration choices and not be used in shipped software.


J.