|
 |
1c8b67f |
This directory (/etc/ssl) is provided as a courtesy attempt to provide
|
|
|
1c8b67f |
compatibility with software which assumes its existence. It is not a
|
|
|
1c8b67f |
supported or canonical location. Software which assumes and relies on
|
|
|
1c8b67f |
the existence and layout of this directory is making a wrong assumption
|
|
|
1c8b67f |
(this directory is not any kind of 'standard', it is a configuration
|
|
|
1c8b67f |
detail of Debian and its derivatives) and should be improved. No
|
|
|
1c8b67f |
software packaged in this distribution should use this directory.
|
|
|
1c8b67f |
|
|
|
1c8b67f |
An attempt is made to make the layout of /etc/ssl/certs match that
|
|
|
1c8b67f |
provided by Debian: it is an OpenSSL 'CApath'-style hashed directory
|
|
|
1c8b67f |
of individual certificate files, and also contains a certificate bundle
|
|
|
1c8b67f |
file named ca-certificates.crt, as Debian does. It also contains a
|
|
|
1c8b67f |
bundle named ca-bundle.crt, as this distribution has long provided
|
|
|
1c8b67f |
such a file, and it is possible some software has come to expect its
|
|
|
1c8b67f |
existence.
|
|
|
1c8b67f |
|
|
|
1c8b67f |
/etc/ssl/certs itself and the bundle files are in fact symlinks to
|
|
|
1c8b67f |
some of the output of the 'update-ca-trust' script which forms a part
|
|
|
1c8b67f |
of a system of consolidated CA certificates. Please refer to the
|
|
|
1c8b67f |
update-ca-trust(8) manual page for additional information.
|