Re: CA bundle

In message <20211004075146.GG4793@equanimity.local>
Daniel Silverstone <dsilvers@netsurf-browser.org> wrote:

> On Sun, Oct 03, 2021 at 20:54:34 +0100, David Higton wrote:
> > Is there a way to make the RISC OS version of NS use the central CA cert
> > bundle, InetDbase:CertData, rather than its own?
>
> We honour a ca_bundle configuration option which defaults to
> NetSurf:Resources.ca-bundle but you can change to whatever path you want.

OK, then where is it, please? I cannot find any trace of such an option
anywhere in the distribution version.

> > Which, it should be mentioned, is long out of date.
>
> We should probably update that then.
>
> > I try to maintain a central CA bundle, rather than having multiple ones
> > that are not necessarily maintained up to date.
>
> That is reasonable. Not everyone does that sadly. Of course, modern
> operating systems manage a system-wide CA bundle for the user
> automatically. If there were an emerging standard for that on RISC OS then
> we could probably come up with a fallback mechanism to try that before
> using the built-in bundle.

The standard for RISC OS, for some time, has been to use InetDbase:CertData

David
_______________________________________________
netsurf-dev mailing list -- netsurf-dev@netsurf-browser.org
To unsubscribe send an email to netsurf-dev-leave@netsurf-browser.org