[Info-vax] CA Cert database...

[Stephen Hoffman]

On 2019-07-03 01:53:46 +0000, BillPedersen said:

> Ok, about four years ago I figured out how to download a set of 
> certificate authority certificate files which already had hashed 
> filenames for use with OpenSSL/HP (at the time) SSL.
> 
> I am now in a position/situation where I need to update that 
> “database”… It was not for a browser but for a limited connection 
> to an application platform using TN3270.   Well, the platform has been 
> updated and they appear to have a new certificate but the application 
> comes back and suggests that it can not find the appropriate CA – aka 
> “unknown CA”…

If this is using the OpenSSL installation, the usual path is to borrow 
the Mozilla database. This as do various others. Or to use a private CA.

Here are the directions for curl, and which is basically what I've used 
to install the most common commercial root certificates onto OpenVMS.
https://curl.haxx.se/docs/caextract.html

What OpenVMS provides for APIs and setup and documentation is...  poor.

I'll mail you some documentation on this topic.

Hopefully, VSI fixes this.

"Most secure operating system on the planet", my rosy red azaleas.

-- 
Pure Personal Opinion | HoffmanLabs LLC