On Wed, 6 May 2026 17:35:08 +0100, Tom Smyth
<[email protected]> wrote:

> Folks,
> is there a more elegant way of adding private trusted cas to
> openBSD...

Out of curiosity, what's your use-case for the private CAs?

I have a private CA to use mtls on some services. I just configure the
relevant software to use specifically that CA. For instance with redis:

$ grep ^tls /etc/redis/redis.conf 
[...]
tls-cert-file /etc/ssl/chownme.crt
tls-key-file /etc/ssl/redis-chownme.key
tls-ca-cert-file /etc/ssl/chownme-cacert.pem

Cheers,
Daniel

Reply via email to