Add note about local overrides.
This commit is contained in:
3
README
3
README
@@ -33,3 +33,6 @@ include this CA into the ca-bundle.crt (used for GnuTLS), it must have
|
|||||||
serverAuth trust. Additionally, to explicitly disallow a certificate for a
|
serverAuth trust. Additionally, to explicitly disallow a certificate for a
|
||||||
particular use, replace the -addtrust flag with the -addreject flag.
|
particular use, replace the -addtrust flag with the -addreject flag.
|
||||||
|
|
||||||
|
Local trust overrides are handled entirely using the /etc/ssl/local directory.
|
||||||
|
To override Mozilla's trust values, simple make a copy of the certificate in
|
||||||
|
the local directory with alternate trust values.
|
||||||
|
Reference in New Issue
Block a user