Bug#309564: cacert certificate

[Alexander Sack]

On Fri, Jul 11, 2008 at 02:27:52PM +0200, martin f krafft wrote:
> also sprach Alexander Sack <asac at debian.org> [2008.07.11.1414 +0200]:
> > So, do you want a _special_ inclusion for just cacert here or
> > something that honours the selections made during ca-certificates
> > package configuration?
> 
> Of course, the former would be better but probably also harder to
> get in place in time for lenny. Thus, the latter would be a good
> intermediate solution.
> 

IMO, the _special_ inclusion is easier to do from a technical pov;
however, this wont allow users to opt-out. Maybe we can build the
security module twice (e.g. original certs + extended certs) and use
the debian alternatives system?

Mike? What are your thoughts on this?

 - Alexander