summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorPhilipp Kern <pkern@debian.org>2008-04-11 18:29:12 +0200
committerPhilipp Kern <pkern@debian.org>2008-04-11 18:29:12 +0200
commitb18f55356cc50a1dec46c8b853aadc488c74ea29 (patch)
treed33f7fbe19b368caaa63b4d92ba7ffd1cfa50532
parent5b214c623ceb3d3175d332f4edd9825f4441d2c4 (diff)
downloadca-certificates-b18f55356cc50a1dec46c8b853aadc488c74ea29.tar.gz
Reworded and amended README.Debian.
-rw-r--r--debian/README.Debian81
-rw-r--r--debian/changelog1
2 files changed, 41 insertions, 41 deletions
diff --git a/debian/README.Debian b/debian/README.Debian
index f77c1e6..d0fbef2 100644
--- a/debian/README.Debian
+++ b/debian/README.Debian
@@ -1,43 +1,42 @@
-The Debian Package ca-certificates
+The Debian Package “ca-certificates”
----------------------------------
-Common CA certificates PEM files, installed in /usr/share/ca-certificates/
-
-It includes the following certificates:
- - spi-inc.org certificate
- - db.debian.org certificate
- - debconf.org certificate
- - Mozilla builtin CA certificates
- - brasil.gov.br certificate
- - cacert.org certificate
-
-configuration file:
- /etc/ca-certificates.conf
- - managed by debconf
- # dpkg-reconfigure ca-certificates
-
- update-ca-certificates will update /etc/ssl/certs
- make hash symlinks
- generate ca-certificates.crt (single-file version)
-
-/etc/ssl/certs/ca-certificates.crt may be used by the web browsers
-in Debian, such as w3m, when deciding what secure web sites to trust.
-For w3m package, it has ssl_ca_path configuration in /etc/w3m/w3mconfig,
-so it works without any configuration. You can specify
-/etc/ssl/certs/ca-certificates.crt for ssl_ca_file instead.
-
-
-How certificate will be accepted in ca-certificates package
------------------------------------------------------------
-
- - submit *GPG signed* bug report to ca-certificate with severity normal.
- the bug report should include
- - description of the CA
- - how to obtain CA cert pem or paste it in the bug report
- - license of the CA certificate
- - fingerprint and/or hash value of the cert
- - get 2 or 3 recommendation ("seconded" mail) from other people to
- the bug report, GPG signed.
- I won't accept if the CA is requested by only one people.
-
- -- Fumitoshi UKAI <ukai@debian.or.jp>, Thu, 17 Aug 2006 13:27:55 +0900
+This package includes PEM files of CA certificates to allow SSL-based
+applications to check for the authenticity of SSL connections.
+
+Please note that certificate authorities whose certificates are included
+in this package are not in any way audited for trustworthiness and RFC
+3647 compliance, and that full responsibility to assess them belongs to
+the local system administrator.
+
+The CA certificates contained in this package are installed into
+“/usr/share/ca-certificates”.
+
+The configuration file “/etc/ca-certificates.conf” is seeded with
+trust information through Debconf. Just call “dpkg-reconfigure
+ca-certificates” to adjust the settings.
+
+“update-ca-certificates” will then update “/etc/ssl/certs” which may be
+used by the web browsers in Debian. It will also generate the hash
+symlinks and generate a single-file version in
+“/etc/ssl/certs/ca-certificates.crt”.
+
+
+How certificates will be accepted into the ca-certificates package
+------------------------------------------------------------------
+
+ Option 1:
+ - File a *GPG-signed* bug report against ca-certificates with
+ *severity normal*. The bug report must include an attached
+ copy of the PEM certificates of the CA, a link to and a
+ description of the CA, the licence of the CA certificate
+ and signed fingerprint and/or hash values of the certificate.
+ - Get two or three recommendations from other people to the
+ bug report, GPG-signed (preferably from the strong set).
+ - CA certificates will not be accepted if requested by only
+ one person.
+
+ Option 2:
+ - Get it included into Mozilla's trust store.
+ - File a bug against ca-certificates stating this fact.
+
diff --git a/debian/changelog b/debian/changelog
index bafbd20..fb7a6b8 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -51,6 +51,7 @@ ca-certificates (20080319) UNRELEASED; urgency=low
* Updated the Russian debconf translation, thanks to Mikhail Gusarov.
(Closes: #434856)
* Reworded the description and made it static to ease translations.
+ * Reworded and amended README.Debian.
* Added myself to the uploaders of this package.
-- Philipp Kern <pkern@debian.org> Wed, 19 Mar 2008 14:25:26 +0100