Blame SOURCES/ca-legacy.8.txt

079376
////
079376
Copyright (C) 2013 Red Hat, Inc.
079376
079376
This program is free software; you can redistribute it and/or modify
079376
it under the terms of the GNU General Public License as published by
079376
the Free Software Foundation; either version 2 of the License, or
079376
(at your option) any later version.
079376
079376
This program is distributed in the hope that it will be useful,
079376
but WITHOUT ANY WARRANTY; without even the implied warranty of
079376
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
079376
GNU General Public License for more details.
079376
////
079376
079376
079376
ca-legacy(8)
079376
============
079376
:doctype: manpage
079376
:man source: ca-legacy
079376
079376
079376
NAME
079376
----
079376
ca-legacy - Manage the system configuration for legacy CA certificates
079376
079376
079376
SYNOPSIS
079376
--------
079376
*ca-legacy* ['COMMAND']
079376
079376
079376
DESCRIPTION
079376
-----------
079376
ca-legacy(8) is used to include or exclude a set of legacy Certificate Authority (CA)
079376
certificates in the system's list of trusted CA certificates.
079376
079376
The list of CA certificates and trust flags included in the ca-certificates package
079376
are based on the decisions made by Mozilla.org according to the Mozilla CA policy.
079376
079376
Occasionally, removal or distrust decisions made by Mozilla.org might be incompatible with the requirements
079376
or limitations of some applications that also use the CA certificates list in the Linux environment.
079376
079376
The ca-certificates package might keep some CA certificates included and trusted by default,
079376
as long as it is seen necessary by the maintainers, despite the fact that they have
079376
been removed by Mozilla. These certificates are called legacy CA certificates.
079376
079376
The general requirements to keep legacy CA certificates included and trusted might change over time,
079376
for example if functional limitations of software packages have been resolved.
079376
Future versions of the ca-certificates package might reduce the set of legacy CA certificates
079376
that are included and trusted by default.
079376
079376
The ca-legacy(8) command can be used to override the default behaviour.
079376
079376
The mechanisms to individually trust or distrust CA certificates as described in update-ca-trust(8) still apply.
079376
079376
079376
COMMANDS
079376
--------
079376
*check*::
079376
    The current configuration will be shown.
079376
079376
*default*::
079376
    Configure the system to use the default configuration, as recommended
079376
    by the package maintainers.
079376
079376
*disable*::
079376
    Configure the system to explicitly disable legacy CA certificates.
079376
    Using this configuration, the system will use the set of
079376
    included and trusted CA certificates as released by Mozilla.
079376
079376
*install*::
079376
    The configuration file will be read and the system configuration
079376
    will be set accordingly. This command is executed automatically during
079376
    upgrades of the ca-certificates package.
079376
079376
079376
FILES
079376
-----
079376
/etc/pki/ca-trust/ca-legacy.conf::
079376
	A configuration file that will be used and modified by the ca-legacy command.
079376
    The contents of the configuration file will be read on package upgrades.
079376
079376
AUTHOR
079376
------
079376
Written by Kai Engert.