Pkg Gatelings, If you don't build and test the pkg(5) gate, you can stop reading now.
My putback for '16765 pkg5 should stop delivering its own CA certificate' is a FLAG DAY for the pkg software. This change introduces a dependency on the 'crypto/ca-certificates' package. If this isn't installed, your client software will not be able to use SSL properly. In general, the software will raise an error when a CA directory isn't present; however, since one package delivers /etc/openssl/certs, and another delivers its content, most systems will have this directory present, but empty. If you choose to ignore this message, but later get the following error: Framework error: code: 60 reason: SSL certificate problem, verify that the CA cert is OK. Details: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed This means that client wasn't able to load the correct CA certificate in order to verify the cert presented by the server. If you see this, make sure that you have 'crypto/ca-certificates' installed. -j _______________________________________________ pkg-discuss mailing list [email protected] http://mail.opensolaris.org/mailman/listinfo/pkg-discuss
