Re: lynx-dev FORCE_SSL_PROMPT:NO

[Doug Kaufman]

On Tue, 22 Jul 2003, Stef Caunter wrote:

> Thanks very much for this. I had forgotten to export
> SSL_CERT_FILE and SSL_CERT_DIR. Lynx now finds commercial and "imported"
> certs.
> 
> Is there somewhere that this could be documented? I don't
> mind doing a step by step write up of the procedure
> (download cert, convert to pem format, rehash, set
> environment vars, export), instead of people having to
> wade through the list archive.

Actually, I don't think that this is really documented anywhere other
than in the source code for OpenSSL. The environment variables aren't
mentioned (as far as I can tell) in any of the OpenSSL documentation.
The closest that I can find is an obsolete documentation file for
SSLeay "http://www2.psy.uq.edu.au/~ftp/Crypto/certs.html";, but the
source code filenames are no longer current. Note that at least the
SSL_CERT_FILE mechanism was broken in OpenSSL until I reported it late
last year. This suggests that not many people were trying to use this
part of the code.

I don't know which is the best place to write this up for lynx. I would
think either in the INSTALLATION file or in a new file, that you could
call something like README.certs. I think good documentation files are
always welcomed.
                        Doug
-- 
Doug Kaufman
Internet: address@hidden


; To UNSUBSCRIBE: Send "unsubscribe lynx-dev" to address@hidden