Hi all: Question
Where does one get the CA certs for use with OpenSSL ? Is there any specific package ? Details of the issue OpenSSL 0.9.8j sources were downloaded from http://www.openssl.org/source/openssl-0.9.8j.tar.gz Follwing the standard practice of building it from the ports ie. . apply patches . configure . make . make install the installation went fine without any errors. Applications dependent on OpenSSL library (shared) are able to use it and this confirms that the library is functioning properly. The last application i tried building was Pine4.64, with the standard command at the top of the pine source tree. ./build 'SSLCERTS=/etc/ssl' \ 'SSLINCLUDE=/usr/local/include/openssl' \ 'SSLLIB=/usr/local/lib' \ bsf The first error reported right in the beginning is "File /etc/ssl/factory.pem is missing This might indicate that CA certs did not get properly installed. If you get certificate validation failures in Pine, this might be the reason for them." On reviewing the OpenSSL code base, there is no factory.pem or a bunch of CA certs. On exploring another Linux and a FreeBSD system closely, i could not locate the factory.pem anywhere. Any pointers ? thanks Saifi.
