From 519076e779137c60797ad47e0ae7e7062805f32f Mon Sep 17 00:00:00 2001 From: Tatsuhiro Tsujikawa Date: Fri, 6 Jul 2012 21:30:00 +0900 Subject: [PATCH] Updated doc about system-wide ca --- README.rst | 14 +++++++++----- doc/manual-src/en/aria2c.rst | 8 ++++++++ 2 files changed, 17 insertions(+), 5 deletions(-) diff --git a/README.rst b/README.rst index 7076034d..25524714 100644 --- a/README.rst +++ b/README.rst @@ -203,11 +203,15 @@ The configure script checks available libraries and enables the features as much as possible because all the features are enabled by default. Since 1.1.0, aria2 checks the certificate of HTTPS servers by default. -If you build with HTTPS support, I recommend to supply the path to the -CA bundle file. For example, in Debian the path to CA bundle file is -'/etc/ssl/certs/ca-certificates.crt' (in ca-certificates package). This -may vary depending on your distribution. You can give it to -configure script using ``--with-ca-bundle option``:: +If you build with OpenSSL or the recent version of GnuTLS which has +``gnutls_certificate_set_x509_system_trust()`` function and the +library is properly configured to locate the system-wide CA +certificates store, aria2 will automatically load those certificates +at the startup. If it is not the case, I recommend to supply the path +to the CA bundle file. For example, in Debian the path to CA bundle +file is '/etc/ssl/certs/ca-certificates.crt' (in ca-certificates +package). This may vary depending on your distribution. You can give +it to configure script using ``--with-ca-bundle option``:: $ ./configure --with-ca-bundle='/etc/ssl/certs/ca-certificates.crt' $ make diff --git a/doc/manual-src/en/aria2c.rst b/doc/manual-src/en/aria2c.rst index 0d889e66..583a4d23 100644 --- a/doc/manual-src/en/aria2c.rst +++ b/doc/manual-src/en/aria2c.rst @@ -338,6 +338,14 @@ HTTP Specific Options certificates. Use :option:`--check-certificate` option to enable verification. + .. note:: + + If you build with OpenSSL or the recent version of GnuTLS which + has ``gnutls_certificate_set_x509_system_trust()`` function and + the library is properly configured to locate the system-wide CA + certificates store, aria2 will automatically load those + certificates at the startup. + .. option:: --certificate= Use the client certificate in FILE.