Warning, changes ahead

For many years, on Red Hat distros, the common respository for SSL certificates has been the /usr/share/ssl/certs directory. You'll find the SSL certifcate for cyrus-imapd, dovect, exim, and OpenLDAP in that directory by default. Also, the bundle of trusted CA certicates is also located in that directory.

This is changing for Fedora Core v4 and the future Red Hat Enterprise Linux v5.

As of April 22nd, the Fedora development tree for the upcoming Fedora Core v4 changed the directory to:

/etc/pki

This initially caused some breakage in applications that hard coded the path to the CA bundle. One example was Postfix.

Applications shouldn't be hard coding the path, and instead should make use of the OpenSSL API functions X509_get_default_cert_file() or SSL_CTX_set_default_verify_paths().

Additionally, any HOWTO or documentation out there should be updated to reference the new path. We have already updated the development tree of our Linux courseware.

About this Entry

This page contains a single entry by Dax published on May 10, 2005 3:16 PM.

Examining Linux file fragmentation was the previous entry in this blog.

Quick Notes on SUSE Linux 9.3 is the next entry in this blog.

Find recent content on the main index or look in the archives to find all content.