[stunnel-users] Rework "Honor --sysconfdir and --localstatedir in stunnel.conf-sample.in"

Mon Jun 1 14:45:11 CEST 2015

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 01.06.2015 14:35, Dagobert Michelsen wrote:
>> 1. It does not include the newly created .in files in the
>> tarball. "make distcheck" is a great tool to diagnose this kind
>> of issues.
> 
> This was intended as I didn’t want to clutter up the patch with
> generated files you will most certainly regenerate anyway before
> release. I can inclide them next time if it helps.

My comment was not about the content of the files, but about the rules
to include them in the tarballs.  Makefile.am not only controls the
result of "make" and "make install", but also "make dist".  Your patch
produces makefiles that generate uninstallable source tarballs.

>> 3. "CApath = /etc/ssl/certs" is supposed to point to the OS
>> trusted certificate store, and not something installed locally.
> 
> This was somewhat intended. As I did the patch for OpenCSW we are
> shipping basically our own userland to Solaris which also has a
> different certstore. I understand that this should not go to
> /usr/local/etc by default, but that also means I need another way
> to customize it. I’ll look how this is done in other projects and
> propose a patch.

I see your point.  /etc/ssl/certs is probably the best default for
most modern distros.

Mike
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=szY8
-----END PGP SIGNATURE-----