From 05c191199dbbc0ac0dbfaebb075b78802edb6f80 Mon Sep 17 00:00:00 2001 From: Daniel Stenberg Date: Fri, 8 Feb 2008 11:20:20 +0000 Subject: [PATCH] and mention make ca-bundle in the 1.11 faq entry as well --- docs/FAQ | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/docs/FAQ b/docs/FAQ index 36a6791fe..a59375742 100644 --- a/docs/FAQ +++ b/docs/FAQ @@ -320,10 +320,10 @@ FAQ 1.11 Why don't you update ca-bundle.crt - The ca-bundle.crt file is to be treated as an example file these days, as it - is very outdated (it being last modified year 2000 should tell) and should - be replaced with a much more modern and up-to-date version by anyone who - wants to verify peers. + The bundled ca-bundle.crt file is to be treated as an example file these + days, as it is very outdated (it being last modified year 2000 should tell) + and should be replaced with a much more modern and up-to-date version by + anyone who wants to verify peers. In the cURL project we've decided not to attempt to keep this file updated since deciding what to add to a ca cert bundle is an undertaking we've not @@ -337,8 +337,9 @@ FAQ If you want the most recent collection of ca certs that Mozilla Firefox uses (which should be seen as the effictive successor of Netscape 4.72 from where this particular bundle originates from), we recommend that you extract the - collection yourself from Mozilla Firefox, or by using our service setup for - this purpose: http://curl.haxx.se/docs/caextract.html + collection yourself from Mozilla Firefox (by running 'make ca-bundle), or by + using our online service setup for this purpose: + http://curl.haxx.se/docs/caextract.html Due to the licensing of that particular file, we've decided to not simply include that in the curl package/tree. It is of course arguable whether the