Bug#595279: ca-certificates: Locally installed certificate files with .pem extension are ignored

2010-09-03 Thread Matthew King
Philipp Kern pk...@debian.org writes:

 It's also a terrible inflation of severities.  .crt is clearly documented
 in README.Debian, so it's hardly important.

My first inclination was normal priority, but I opted for important in
part because it's so simple but mostly because documentation (this
package's and the internet in general) refers constantly to 'pem files',
so much so that the crt and pem extensions are virtually
indistinguishable.

Anyway the bug's reported, and that's the main thing. If it manages to
get into squeeze then all well and good.

Either way you may want to upgrade the manpage in addition to the
README.Debian:

Current:

   /usr/share/ca-certificates
  Directory  of CA certificates.  /usr/local/share/ca-certificates
  Directory of local CA certificates.

(Yes, with the funny formatting. I don't know if that's just a locale
thing on my system.)

To:

   /usr/share/ca-certificates
  Directory of CA certificates.

   /usr/local/share/ca-certificates
  Directory of local CA certificates (with .crt extension).

Matthew

-- 
I must take issue with the term a mere child, for it has been my
invariable experience that the company of a mere child is infinitely
preferable to that of a mere adult.
   --  Fran Lebowitz



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#595279: ca-certificates: Locally installed certificate files with .pem extension are ignored

2010-09-02 Thread Matthew King
Package: ca-certificates
Version: 20090814
Severity: important
Tags: patch


Files in /usr/local/share/ca-certificates must be named with the
extension '.crt' or they will be ignored. The extension '.pem' is often
used in documentation, examples, etc. and not being able to name local
certificates with it is likely to cause confusion (it did me :).

Tagged 'important' because .pem is so common, despite it being trivially
easy to work around. Also because the patch is similarly trivial:

Append -o -name '*.pem' to the find command on line 124

Matthew

-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.34 (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages ca-certificates depends on:
ii  debconf [debconf-2.0] 1.5.33 Debian configuration management sy
ii  openssl   0.9.8o-1   Secure Socket Layer (SSL) binary a

ca-certificates recommends no packages.

ca-certificates suggests no packages.

-- debconf information excluded



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#595279: ca-certificates: Locally installed certificate files with .pem extension are ignored

2010-09-02 Thread Philipp Kern
severity 595279 wishlist
thanks

On Thu, Sep 02, 2010 at 05:54:35PM +0100, Matthew King wrote:
 Files in /usr/local/share/ca-certificates must be named with the
 extension '.crt' or they will be ignored. The extension '.pem' is often
 used in documentation, examples, etc. and not being able to name local
 certificates with it is likely to cause confusion (it did me :).
 
 Tagged 'important' because .pem is so common, despite it being trivially
 easy to work around. Also because the patch is similarly trivial:

It's also a terrible inflation of severities.  .crt is clearly documented
in README.Debian, so it's hardly important.

Kind regards,
Philipp Kern 


signature.asc
Description: Digital signature