Add a reasonably sane CA bundle to /etc/ssl/cert.pem, the default

location for libssl, this makes lynx not bitch when seeing sites
with certificates signed by these issuers. We should probably
think carefully about adding a few more in here too.

1 files changed, 3 insertions, 1 deletions

diff --git a/src/lib/libssl/Makefile b/src/lib/libssl/Makefile
index 80fb532c3c..f356472977 100644
--- a/src/lib/libssl/Makefile
+++ b/src/lib/libssl/Makefile
@@ -1,4 +1,4 @@
-# $OpenBSD: Makefile,v 1.13 2002/09/03 18:59:55 markus Exp $
+# $OpenBSD: Makefile,v 1.14 2005/04/01 05:31:40 beck Exp $
 
 SUBDIR=crypto ssl man
 
@@ -6,6 +6,8 @@ distribution:
         ${INSTALL} ${INSTALL_COPY} -g ${BINGRP} -m 444 \
            ${.CURDIR}/openssl.cnf ${DESTDIR}/etc/ssl/openssl.cnf && \
         ${INSTALL} ${INSTALL_COPY} -g ${BINGRP} -m 444 \
+           ${.CURDIR}/cert.pem ${DESTDIR}/etc/ssl/cert.pem && \
+        ${INSTALL} ${INSTALL_COPY} -g ${BINGRP} -m 444 \
            ${.CURDIR}/x509v3.cnf ${DESTDIR}/etc/ssl/x509v3.cnf
 
 .include <bsd.subdir.mk>