RFC: root cert tool

[Kuba Ober]

On Wednesday 15 August 2007, Alexandre Julliard wrote:
> "Juan Lang" <juan.lang at gmail.com> writes:
> >> Do we really need them in the registry at all?  It would seem a lot
> >> safer to load them directly from some system dir.
> >
> > The trouble is not knowing which is the correct system dir / file.  It
> > changes from distro to distro, from version to version.  Guessing
> > seems less safe (to me) than getting them from some known-good source,
> > or from allowing the user to specify the correct source.
>
> As long as you don't try paths under /home, even a moderate amount of
> guessing seems safer than storing them in a user-writable file. How
> many different paths are there really?

This should be a configure-time parameter to be set by packagers in the distro 
specific manner. Seems like a "duh" to me. Wine won't be the first software 
set up like this.

Cheers, Kuba