search

jens-maus / yam

:mailbox_with_mail: YAM (short for 'Yet Another Mailer') is a MIME-compliant open-source Internet email client written for Amiga-based computer systems (AmigaOS4, AmigaOS3, MorphOS, AROS). It supports POP3, SMTP, TLSv1/SSLv3 connection security, multiple users, multiple identities, PGPv2/v5 encryption, unlimited hierarchical folders, an ARexx interface, etc...
https://yam.ch
GNU General Public License v2.0
61 stars 18 forks source link

Possibility to read in ca-bundle.crt from a given path and name #657

Closed raziel- closed 6 years ago

raziel- commented 7 years ago

Submission type

YAM version

[2.9p1]

Used operating system

Used Amiga system

[AmigaOneX1000]

Expected behaviour you didn't see

[It would be nice if you could add either a normal or a hidden option/setting to read/use the "Bundle of CA Root Certificates" (ca-bundle.crt) from a user given path and a user given name (e.g. curl-ca-bundle.crt or certdata.txt). This way updating this file would become cleaner, if a users chooses to do so by him/herself. My preference would be to have the file in DEVS: and let YAM read it from there. (nb: Odyssey lets the user decide from where to read that file, just fyi)

Config/Security would be a good candidate or the hidden settings in .config, it's your decision obviously]

Unexpected behaviour you saw

[Yam, right now, automatically reads and uses a specially named file (ca-bundle.crt) from it's Resources subdir. This file should of course stay there (and also still be updated when a YAM update is rolled out) and read/used by default since not all users go through all of their settings, but the possibility of giving a user path and name for that file would add a nice little touch of controllability.]

Steps to reproduce the problem

[No problem]

jens-maus commented 7 years ago

There should be no need for a user to replace or override this file. There are enough places in AmiSSL to place an own certificate in the global AmiSSL:certs path which YAM should also evaluate, use.

raziel- commented 7 years ago

Ah, i forgot about AmiSSL

Of course it would fit better to let AmiSSL take care of that. Some "foreign" programs like Odyssey uses this file for their certs and since YAM 2.9p1 does the same i thought it would be a good idea to bring them together.

If AmiSSL is going to be used together with YAM 2.10 i think you can trash this FR