Re: root certificate

[Chris Marusich]

Mark H Weaver <address@hidden> writes:

>            ;; Create hash symlinks suitable for OpenSSL ('SSL_CERT_DIR' and
>            ;; similar.)
>            (chdir (string-append %output "/etc/ssl/certs"))
>            (invoke (string-append perl "/bin/perl")
>                    (string-append openssl "/bin/c_rehash")
>                    ".")))))

I didn't know about c_rehash until now.  Interesting!  In the past, I've
defined my own certificate packages as described in my own separate
replies to this thread, and they worked even though I didn't invoke
c_rehash.  Could this simply have been because the software I use
happens to work even when the symlinks created by c_rehash don't exist?

It looks like the ca-certificate-bundle profile hook (defined in
guix/profiles.scm) doesn't currently invoke c_rehash.  Should it?

-- 
Chris

signature.asc
Description: PGP signature