← Back to team overview

mosquitto-users team mailing list archive

Re: Best practices for tls_set in Python

 

Hi Jack,

I've got a part written reply to you that I've not yet sent because
I'm not happy with it. Sorry about that, I'll try and sort it out as
soon as I can.

Cheers,

Roger

On Mon, Feb 11, 2013 at 10:04 PM, Jack O'Connor <oconnor663@xxxxxxxxx> wrote:
> Thanks for the reply, and I meant to follow up sooner. Does that mean that
> every application that uses the SSL features of Mosquitto ships its own copy
> of the certs file? (And by extension, that every app is independently
> responsible for keeping that file up to date?)
>
>
> On Tue, Feb 5, 2013 at 6:02 AM, Alexander Bolotnov <abolotnov@xxxxxxxxx>
> wrote:
>>
>> You can symlink or copy it to /etc/ssl/cert for that. There's probably a
>> bunch of certs already anyway :)
>>
>>
>> Sasha Bolotnov
>> www.bolotnov.info
>>
>>
>>
>> On Tue, Feb 5, 2013 at 4:12 PM, Jack O'Connor <oconnor663@xxxxxxxxx>
>> wrote:
>>>
>>> The tls_set API requires a path to a certificate authorities file. I can
>>> download a file of the right type from mozilla or somewhere, but I'm
>>> wondering if it's really appropriate to include my own CA list in the
>>> project. Is there a standard way to get this information from the OS
>>> instead, for example in Ubuntu? Thanks for your help.
>>>
>>> -- Jack O'Connor
>>>
>>> --
>>> Mailing list: https://launchpad.net/~mosquitto-users
>>> Post to     : mosquitto-users@xxxxxxxxxxxxxxxxxxx
>>> Unsubscribe : https://launchpad.net/~mosquitto-users
>>> More help   : https://help.launchpad.net/ListHelp
>>>
>>
>
>
> --
> Mailing list: https://launchpad.net/~mosquitto-users
> Post to     : mosquitto-users@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~mosquitto-users
> More help   : https://help.launchpad.net/ListHelp
>


Follow ups

References