summaryrefslogtreecommitdiff
path: root/pith/pine.hlp
diff options
context:
space:
mode:
authorEduardo Chappa <chappa@washington.edu>2020-02-03 21:15:19 -0700
committerEduardo Chappa <chappa@washington.edu>2020-02-03 21:15:19 -0700
commitdba6c62a11eed30f7a4e3e625eec8ca88252ab6c (patch)
treead330ee9baf787e4ce638b5da2a9480e33b6c630 /pith/pine.hlp
parent709dc44768db0c0e1123181f53fdba26484eceaa (diff)
downloadalpine-dba6c62a11eed30f7a4e3e625eec8ca88252ab6c.tar.xz
* Add variable system-certs-file to indicate the location of a container
of CA certificates. This complements the variable system-certs-path that gives the location the directory that containes CA certificates.
Diffstat (limited to 'pith/pine.hlp')
-rw-r--r--pith/pine.hlp54
1 files changed, 47 insertions, 7 deletions
diff --git a/pith/pine.hlp b/pith/pine.hlp
index fa1468ca..4f0eb38f 100644
--- a/pith/pine.hlp
+++ b/pith/pine.hlp
@@ -140,7 +140,7 @@ with help text for the config screen and the composer that didn't have any
reasonable place to be called from.
Dummy change to get revision in pine.hlp
============= h_revision =================
-Alpine Commit 401 2020-01-30 00:08:16
+Alpine Commit 402 2020-02-03 21:15:05
============= h_news =================
<HTML>
<HEAD>
@@ -187,6 +187,10 @@ any problems you find with this release. New enhancements
this must be C:\\libressl\\ssl\\certs. The C: drive can be replaced
by the name of the drive where the binary and DLL files are located.
+<LI> New variable system-certs-file that allows users to configure the
+ location of a container of certificate authoririty (CA) certificates
+ to be used to validate certificates of remote servers.
+
<LI>Crash in Alpine when attempting to reply to a multipart/alternative
message that is malformed, and the option to include attachments in
reply is enabled. Reported and patched by Peter Tirsek.
@@ -22232,7 +22236,7 @@ directory. For example, the directory might not be accessible, or has not been
updated and contains old certificates that have expired.
<P>
-When a user wants to override the default, this variable can be used to list
+This variable can be used to list
the directory where such certificates can be found. Alpine will use the first
directory in this list that exists in your system and can be accessed. This
allows for users to be able to use the same pinerc file in different systems.
@@ -22241,9 +22245,45 @@ allows for users to be able to use the same pinerc file in different systems.
Example of values for this option might be:
<PRE>
-System Certs Path = /etc/ssl/certs
- /usr/local/ssl/certs
- C:\\libressl\\ssl\\certs
+System CACerts Dir = /etc/ssl/certs
+ /usr/local/ssl/certs
+ C:\\libressl\\ssl\\certs
+<PRE>
+
+<P>
+In unix systems, the default location of the certificates for openssl can
+be obtained by first executing the command
+
+<PRE>openssl version -d</PRE>
+
+and adding &quot;/certs&quot; to that value. In Windows the default location
+for the certificates is C:\\libressl\\ssl\\certs. This value was set by
+LibreSSL developers, and this option can be used to override this default.
+
+<P>
+&lt;End of help on this topic&gt;
+</BODY></HTML>
+====== h_config_system_certs_file ======
+<HTML>
+<HEAD>
+<TITLE>OPTION: <!--#echo var="VAR_system-certs-file"--></TITLE>
+</HEAD>
+<BODY>
+<H1>OPTION: <!--#echo var="VAR_system-certs-file"--></H1>
+
+This option sets the location of the container file that holds
+certificate authority (CA) certificates.
+Alpine will use the first
+container in this list that exists in your system and can be accessed. This
+allows for users to be able to use the same pinerc file in different systems.
+
+<P>
+Example of values for this option might be:
+
+<PRE>
+System Certs Path = /etc/ssl/certs/cert.pem
+ /usr/local/ssl/ca-root-nss.crt
+ C:\\libressl\\ssl\\certs\\cert.pem
<PRE>
<P>
@@ -22253,8 +22293,8 @@ be obtained by first executing the command
<PRE>openssl version -d</PRE>
and adding &quot;/certs&quot; to that value. In Windows the default location
-for the certificates is C:\\libressl\\ssl\\certs. This value was set by LibreSSL
-developers, and this option can be used to override this default.
+for the certificates is C:\\libressl\\ssl\\certs\\cert.pem. This value was set
+by LibreSSL developers, and this option can be used to override this default.
<P>
&lt;End of help on this topic&gt;