Bug#316436: mozilla-firefox: firefox should honor /etc/ssl/certs/

2005-07-17 Thread Eric Dorland
severity 316436 wishlist
thanks

* Peter Palfrader ([EMAIL PROTECTED]) wrote:
> Package: mozilla-firefox
> Version: 1.0.4-3
> Severity: normal
> 
> Hi,
> 
> as a site admin I tend to place my local root certificate in
> /etc/ssl/certs on all my systems.  wget and w3m use this directory and
> now accept certs signed by my CA without checking back with the user.
> 
> I think firefox too should accept certificates placed by the admin in
> /etc/ssl/certs.
> 
> Ideally it would use those exclusively.  If the admin wants they can
> still install ca-certificates to get all the silly certs by the big
> ssl cert businesses.

I strongly agree. Unfortunately Mozilla doesn't use openssl (or
gnutls), it uses nss which is from my understanding somewhat old and
crufty. So it would likely be a bit of an undertaking. I would hope
someone would step up to bat and add something like this, or port the
whole thing to something like openssl. 
 

-- 
Eric Dorland <[EMAIL PROTECTED]>
ICQ: #61138586, Jabber: [EMAIL PROTECTED]
1024D/16D970C6 097C 4861 9934 27A0 8E1C  2B0A 61E9 8ECF 16D9 70C6

-BEGIN GEEK CODE BLOCK-
Version: 3.12
GCS d- s++: a-- C+++ UL+++ P++ L++ E++ W++ N+ o K- w+ 
O? M++ V-- PS+ PE Y+ PGP++ t++ 5++ X+ R tv++ b+++ DI+ D+ 
G e h! r- y+ 
--END GEEK CODE BLOCK--


signature.asc
Description: Digital signature


Bug#316436: mozilla-firefox: firefox should honor /etc/ssl/certs/

2005-06-30 Thread Peter Palfrader
Package: mozilla-firefox
Version: 1.0.4-3
Severity: normal

Hi,

as a site admin I tend to place my local root certificate in
/etc/ssl/certs on all my systems.  wget and w3m use this directory and
now accept certs signed by my CA without checking back with the user.

I think firefox too should accept certificates placed by the admin in
/etc/ssl/certs.

Ideally it would use those exclusively.  If the admin wants they can
still install ca-certificates to get all the silly certs by the big
ssl cert businesses.

-- 
Peter


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]