Discussion:
[PATCH] Document basename checking of ssl cert. files.
(too old to reply)
James Antill
2011-04-11 17:31:58 UTC
Permalink
---
docs/yum.conf.5 | 6 ++++++
1 files changed, 6 insertions(+), 0 deletions(-)

diff --git a/docs/yum.conf.5 b/docs/yum.conf.5
index a535b79..9d3d500 100644
--- a/docs/yum.conf.5
+++ b/docs/yum.conf.5
@@ -318,6 +318,12 @@ is not registered.
Path to the SSL client certificate yum should use to connect to repos/remote sites
Defaults to none.

+Note that is you are using curl compiled against NSS (default in Fedora/RHEL),
+curl treats sslclientcert values with the same basename as _identical_. This
+version of yum will check that this isn't true and output an error when the repos "foo" and "bar" violate this, like so:
+
+ConfigError: sslclientcert basename shared between foo and bar
+
.IP
\fBsslclientkey \fR
Path to the SSL client key yum should use to connect to repos/remote sites
--
1.7.3.4
seth vidal
2011-04-11 17:35:23 UTC
Permalink
Post by James Antill
---
docs/yum.conf.5 | 6 ++++++
1 files changed, 6 insertions(+), 0 deletions(-)
diff --git a/docs/yum.conf.5 b/docs/yum.conf.5
index a535b79..9d3d500 100644
--- a/docs/yum.conf.5
+++ b/docs/yum.conf.5
@@ -318,6 +318,12 @@ is not registered.
Path to the SSL client certificate yum should use to connect to repos/remote sites
Defaults to none.
+Note that is you are using curl compiled against NSS (default in Fedora/RHEL),
+curl treats sslclientcert values with the same basename as _identical_. This
+
+ConfigError: sslclientcert basename shared between foo and bar
+
.IP
\fBsslclientkey \fR
Path to the SSL client key yum should use to connect to repos/remote sites
s/is/if/ in the first line of the new section.

-sv

Loading...