Hi Mike,

Am 01.06.2015 um 14:45 schrieb Michal Trojnara <[email protected]>:
> On 01.06.2015 14:35, Dagobert Michelsen wrote:
>>> 1. It does not include the newly created .in files in the
>>> tarball. "make distcheck" is a great tool to diagnose this kind
>>> of issues.
>> 
>> This was intended as I didn’t want to clutter up the patch with
>> generated files you will most certainly regenerate anyway before
>> release. I can inclide them next time if it helps.
> 
> My comment was not about the content of the files, but about the rules
> to include them in the tarballs.  Makefile.am not only controls the
> result of "make" and "make install", but also "make dist".  Your patch
> produces makefiles that generate uninstallable source tarballs.

I see, next time I'll run distcheck.

>>> 3. "CApath = /etc/ssl/certs" is supposed to point to the OS
>>> trusted certificate store, and not something installed locally.
>> 
>> This was somewhat intended. As I did the patch for OpenCSW we are
>> shipping basically our own userland to Solaris which also has a
>> different certstore. I understand that this should not go to
>> /usr/local/etc by default, but that also means I need another way
>> to customize it. I’ll look how this is done in other projects and
>> propose a patch.
> 
> I see your point.  /etc/ssl/certs is probably the best default for
> most modern distros.

Would it be possible to include something like
  —with-ca-bundle=<file>
  —with-ca-path=<path>
as implemented in Curl?
  https://github.com/bagder/curl/blob/master/acinclude.m4#L2553


Best regards

  — Dago

-- 
"You don't become great by trying to be great, you become great by wanting to 
do something,
and then doing it so hard that you become great in the process." - xkcd #896

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
stunnel-users mailing list
[email protected]
https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users

Reply via email to