Re: CA bundle

On Sun, Oct 03, 2021 at 20:54:34 +0100, David Higton wrote:
> Is there a way to make the RISC OS version of NS use the central CA cert
> bundle, InetDbase:CertData, rather than its own?

We honour a ca_bundle configuration option which defaults to
NetSurf:Resources.ca-bundle but you can change to whatever path you want.

> Which, it should be mentioned, is long out of date.

We should probably update that then.

> I try to maintain a central CA bundle, rather than having multiple ones
> that are not necessarily maintained up to date.

That is reasonable. Not everyone does that sadly. Of course, modern operating
systems manage a system-wide CA bundle for the user automatically. If there
were an emerging standard for that on RISC OS then we could probably come up
with a fallback mechanism to try that before using the built-in bundle.

D.

--
Daniel Silverstone http://www.netsurf-browser.org/
PGP mail accepted and encouraged. Key Id: 3CCE BABE 206C 3B69
_______________________________________________
netsurf-dev mailing list -- netsurf-dev@netsurf-browser.org
To unsubscribe send an email to netsurf-dev-leave@netsurf-browser.org