Re: cert file location (was Re: sslio documentation clarification (Re: ipsvd-0.9.0 available))

On Tue, May 04, 2004 at 11:00:23AM -0400, Charlie Brady wrote:
> On Mon, 3 May 2004, Charlie Brady wrote:
> > It's not clear from the documentation that the key and cert file paths are 
> > relative to the chroot directory (if -/ option is given). IOW, the chroot 
> > also occurs before the certificate files are opened.
True, thanks for the hint.

> This strikes me as wrong. What value is there in having the keys inside 
> the jail (and readable by the application)? Wouldn't this be better?

Maybe.  Let me ask the other way round: What value is there in having
the keys outside the jail?  The contents of the files are in memory of
the sslio program anyway.

The idea was to run as few code from the ssl library as possible as
root.  Currently it's only matrixSslOpen().

Regards, Gerrit.