Re: certs directory

2006-02-21 Thread Marcin Sztolcman
Dnia 20-02-2006, pon o godzinie 12:38 +0100, Marcin Król napisał(a):

 I assume all certs should go there then? Those from apache for
example.
 And should they be stored directly in this direcotry or in some
 subdirectories?

I'm not an developer, but imo they sould be in subdirectories, like:
jabber, httpd etc. Jabberd2 can use one cert for c2s, another for s2s
etc.

MySZ
-- 
Marcin ``MySZ`` Sztolcman
http://diary.urzenia.net :: mailto:http://urzenia.net/email
System zarządzania treścią :: http://core-cms.com

___
pld-devel-en mailing list
pld-devel-en@lists.pld-linux.org
http://lists.pld-linux.org/mailman/listinfo/pld-devel-en


Re: certs directory

2006-02-21 Thread Jacek Konieczny
On Tue, Feb 21, 2006 at 04:14:18PM +0100, Marcin Sztolcman wrote:
 Dnia 20-02-2006, pon o godzinie 12:38 +0100, Marcin Król napisał(a):
 
  I assume all certs should go there then? Those from apache for
 example.
  And should they be stored directly in this direcotry or in some
  subdirectories?
 
 I'm not an developer, but imo they sould be in subdirectories, like:
 jabber, httpd etc. Jabberd2 can use one cert for c2s, another for s2s
 etc.

Some people would like to use one certificate for all services on the
host, other several certificates per service and many others different
combination of that. Certificates provided by a distribution are quite
useless, so I would suggest to leave certificate management to the
system administrator. We could just provide a directory and suggest
configuration pointing to that directory (even to not existing files).
SSL is for security and if admin wants security he has to configure it
by himself.

Greets,
Jacek
___
pld-devel-en mailing list
pld-devel-en@lists.pld-linux.org
http://lists.pld-linux.org/mailman/listinfo/pld-devel-en


Re: certs directory

2006-02-20 Thread Marcin Król
 imap and imap-pop3 packages already require openssl, so there is no need
 for imap-common to own this directory.

I'll fix it and move certs.

 Also, some time ago /etc/certs directory has been chosen for this
 purpose.
 $ rpm -qf /etc/certs
 FHS-2.3-13

I assume all certs should go there then? Those from apache for example.
And should they be stored directly in this direcotry or in some
subdirectories?

M.
___
pld-devel-en mailing list
pld-devel-en@lists.pld-linux.org
http://lists.pld-linux.org/mailman/listinfo/pld-devel-en