On Mon, 2008-06-02 at 02:13 +0200, Pierre Schmitz wrote: > Am Mittwoch 28 Mai 2008 21:31:33 schrieb Roman Kyrylych: > > This reminds me a feature request about providing more root > > certificates in a separate package (more than in previous openssl > > package). > > I have just put such a package (ca-certificates) into testing. It includes > all > the certs Debian trusts, which should not be that bad. :-) > > They provide an update-script and the possibility to enable/disable some > certs. > > Please give it a tr and tell me what you think. I plan to move it into extra > and make it an optional package.
Nice. I'll update java-gcj-compat to use these soon. At this moment the java-gcj-compat certificate db is created from a large certificate file we have in SVN. Does the ca-certificates update thing contain any support for hooks so the java-gcj-compat certdb can be rebuilt on update?

