2. Beyond Linux From Scratch 12.2
3. postlfs_security_make-ca
4. Search

Filters

• Untranslated strings • state:empty
• Unfinished strings • state:<translated
• Translated strings • state:>=translated
• Strings marked for edit • state:needs-editing
• Strings with suggestions • has:suggestion
• Strings with variants • has:variant
• Strings with screenshots • has:screenshot
• Strings with labels • has:label
• Strings with context • has:context
• Unfinished strings without suggestions • state:<translated AND NOT has:suggestion
• Strings with comments • has:comment
• Strings with any failing checks • has:check
• Approved strings • state:approved
• Strings waiting for review • state:translated

state:>=translated

Position and priority

• Position and priority
• Position
• Priority
• Labels
• Source string
• Target string
• String age
• Last updated
• Number of words
• Number of comments
• Number of failing checks
• Key
• String location

	Translation	Source string	Target string
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	<userinput>cat &gt; /etc/cron.weekly/update-pki.sh &lt;&lt; "EOF" &amp;&amp; <literal>#!/bin/bash /usr/sbin/make-ca -g</literal> EOF chmod 754 /etc/cron.weekly/update-pki.sh</userinput>	<userinput>cat &gt; /etc/cron.weekly/update-pki.sh &lt;&lt; "EOF" &amp;&amp; <literal>#!/bin/bash /usr/sbin/make-ca -g</literal> EOF chmod 754 /etc/cron.weekly/update-pki.sh</userinput>
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	<userinput>cat &gt; /etc/cron.weekly/update-pki.sh &lt;&lt; "EOF" &amp;&amp; <literal>#!/bin/bash /usr/sbin/make-ca -g</literal> EOF chmod 754 /etc/cron.weekly/update-pki.sh</userinput>	<userinput>cat &gt; /etc/cron.weekly/update-pki.sh &lt;&lt; "EOF" &amp;&amp; <literal>#!/bin/bash /usr/sbin/make-ca -g</literal> EOF chmod 754 /etc/cron.weekly/update-pki.sh</userinput>
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — English	<userinput>systemctl enable update-pki.timer</userinput>	<userinput>systemctl enable update-pki.timer</userinput>
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	<userinput>systemctl enable update-pki.timer</userinput>	<userinput>systemctl enable update-pki.timer</userinput>
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	<userinput>systemctl enable update-pki.timer</userinput>	<userinput>systemctl enable update-pki.timer</userinput>
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — English	Configuring make-ca	Configuring make-ca
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	Configuring make-ca	Configuration de make-ca
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	Configuring make-ca	Configurando make-ca
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — English	For most users, no additional configuration is necessary, however, the default <filename>certdata.txt</filename> file provided by make-ca is obtained from the mozilla-release branch, and is modified to provide a Mercurial revision. This will be the correct version for most systems. There are several other variants of the file available for use that might be preferred for one reason or another, including the files shipped with Mozilla products in this book. RedHat and OpenSUSE, for instance, use the version included in <xref linkend="nss"/>. Additional upstream downloads are available at the links included in <filename>/etc/make-ca/make-ca.conf.dist</filename>. Simply copy the file to <filename>/etc/make-ca.conf</filename> and edit as appropriate.	For most users, no additional configuration is necessary, however, the default <filename>certdata.txt</filename> file provided by make-ca is obtained from the mozilla-release branch, and is modified to provide a Mercurial revision. This will be the correct version for most systems. There are several other variants of the file available for use that might be preferred for one reason or another, including the files shipped with Mozilla products in this book. RedHat and OpenSUSE, for instance, use the version included in <xref linkend="nss"/>. Additional upstream downloads are available at the links included in <filename>/etc/make-ca/make-ca.conf.dist</filename>. Simply copy the file to <filename>/etc/make-ca.conf</filename> and edit as appropriate.
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	For most users, no additional configuration is necessary, however, the default <filename>certdata.txt</filename> file provided by make-ca is obtained from the mozilla-release branch, and is modified to provide a Mercurial revision. This will be the correct version for most systems. There are several other variants of the file available for use that might be preferred for one reason or another, including the files shipped with Mozilla products in this book. RedHat and OpenSUSE, for instance, use the version included in <xref linkend="nss"/>. Additional upstream downloads are available at the links included in <filename>/etc/make-ca/make-ca.conf.dist</filename>. Simply copy the file to <filename>/etc/make-ca.conf</filename> and edit as appropriate.	Pour la plupart des utilisateurs, aucune configuration supplémentaire n'est nécessaire, cependant le fichier <filename>certdata.txt</filename> par défaut fournit par make-ca est obtenu à partir de la branche mozilla-release, et est modifié pour fournir une révision Mercurial. Ce sera la bonne version pour la plupart des systèmes. Il y a plusieurs variantes du fichier disponibles à l'utilisation que vous pourriez préférer pour une raison ou une autre, incluses dans les produits Mozilla dans ce livre. RedHat et OpenSUSE par exemple utilisent la version incluse dans <xref linkend="nss"/>. Des emplacements de téléchargement supplémentaires sont disponibles dans les liens inclus dans <filename>/etc/make-ca/make-ca.conf.dist</filename>. Copiez simplement ce fichier vers <filename>/etc/make-ca.conf</filename> et modifiez-le comme vous le voulez.
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	For most users, no additional configuration is necessary, however, the default <filename>certdata.txt</filename> file provided by make-ca is obtained from the mozilla-release branch, and is modified to provide a Mercurial revision. This will be the correct version for most systems. There are several other variants of the file available for use that might be preferred for one reason or another, including the files shipped with Mozilla products in this book. RedHat and OpenSUSE, for instance, use the version included in <xref linkend="nss"/>. Additional upstream downloads are available at the links included in <filename>/etc/make-ca/make-ca.conf.dist</filename>. Simply copy the file to <filename>/etc/make-ca.conf</filename> and edit as appropriate.	Para a maioria dos(as) usuários(as), nenhuma configuração adicional é necessária; entretanto, o arquivo <filename>certdata.txt</filename> padrão fornecido pelo "make-ca" é obtido a partir da ramificação "mozilla-release" e é modificado para fornecer uma revisão "Mercurial". Essa será a versão correta para a maior parte dos sistemas. Existem muitas outras variantes do arquivo disponíveis para uso que poderiam ser preferidas por uma razão ou por outra, incluindo os arquivos enviados com os produtos da "Mozilla" neste livro. "RedHat" e "OpenSUSE", por exemplo, usam a versão inclusa no <xref linkend="nss"/>. Transferências adicionais do(a) desenvolvedor(a) estão disponíveis nos links inclusos em <filename>/etc/make-ca/make-ca.conf.dist</filename>. Simplesmente copie o arquivo para <filename>/etc/make-ca.conf</filename> e edite conforme apropriado.
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — English	/etc/make-ca.conf	/etc/make-ca.conf
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	/etc/make-ca.conf	/etc/make-ca.conf
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	/etc/make-ca.conf	/etc/make-ca.conf
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — English	About Trust Arguments	About Trust Arguments
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	About Trust Arguments	À propos des arguments sur la confiance
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	About Trust Arguments	Acerca de Argumentos de Confiança
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — English	There are three trust types that are recognized by the <application>make-ca</application> script, SSL/TLS, S/Mime, and code signing. For <application>OpenSSL</application>, these are <parameter>serverAuth</parameter>, <parameter>emailProtection</parameter>, and <parameter>codeSigning</parameter> respectively. If one of the three trust arguments is omitted, the certificate is neither trusted, nor rejected for that role. Clients that use <application>OpenSSL</application> or <application>NSS</application> encountering this certificate will present a warning to the user. Clients using <application>GnuTLS</application> without <application>p11-kit</application> support are not aware of trusted certificates. To include this CA into the <filename>ca-bundle.crt</filename>, <filename>email-ca-bundle.crt</filename>, or <filename>objsign-ca-bundle.crt</filename> files (the <application>GnuTLS</application> legacy bundles), it must have the appropriate trust arguments.	There are three trust types that are recognized by the <application>make-ca</application> script, SSL/TLS, S/Mime, and code signing. For <application>OpenSSL</application>, these are <parameter>serverAuth</parameter>, <parameter>emailProtection</parameter>, and <parameter>codeSigning</parameter> respectively. If one of the three trust arguments is omitted, the certificate is neither trusted, nor rejected for that role. Clients that use <application>OpenSSL</application> or <application>NSS</application> encountering this certificate will present a warning to the user. Clients using <application>GnuTLS</application> without <application>p11-kit</application> support are not aware of trusted certificates. To include this CA into the <filename>ca-bundle.crt</filename>, <filename>email-ca-bundle.crt</filename>, or <filename>objsign-ca-bundle.crt</filename> files (the <application>GnuTLS</application> legacy bundles), it must have the appropriate trust arguments.
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	There are three trust types that are recognized by the <application>make-ca</application> script, SSL/TLS, S/Mime, and code signing. For <application>OpenSSL</application>, these are <parameter>serverAuth</parameter>, <parameter>emailProtection</parameter>, and <parameter>codeSigning</parameter> respectively. If one of the three trust arguments is omitted, the certificate is neither trusted, nor rejected for that role. Clients that use <application>OpenSSL</application> or <application>NSS</application> encountering this certificate will present a warning to the user. Clients using <application>GnuTLS</application> without <application>p11-kit</application> support are not aware of trusted certificates. To include this CA into the <filename>ca-bundle.crt</filename>, <filename>email-ca-bundle.crt</filename>, or <filename>objsign-ca-bundle.crt</filename> files (the <application>GnuTLS</application> legacy bundles), it must have the appropriate trust arguments.	Il y a trois types de confiances reconnues par le script <application>make-ca</application>, SSL/TLS, S/Mime et signature de code. Pour <application>OpenSSL</application>, il s'agit de <parameter>serverAuth</parameter>, <parameter>emailProtection</parameter> et <parameter>codeSigning</parameter> respectivement. Si un argument trust en omis, le certificat n'est ni reconnu ni rejeté pour ce rôle. Les clients qui utilisent <application>OpenSSL</application> ou <application>NSS</application> rencontrant ce certificat renverront un avertissement à l'utilisateur. Les clients qui utilisent <application>GnuTLS</application> sans le support de <application>p11-kit</application> ne sont pas conscient des certificats de confiance. Pour inclure cette CA dans les fichiers <filename>ca-bundle.crt</filename>, <filename>email-ca-bundle.crt</filename> ou <filename>objsign-ca-bundle.crt</filename> (les anciens lots de <application>GnuTLS</application>), il doit avoir l'argument de confiance approprié.
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	There are three trust types that are recognized by the <application>make-ca</application> script, SSL/TLS, S/Mime, and code signing. For <application>OpenSSL</application>, these are <parameter>serverAuth</parameter>, <parameter>emailProtection</parameter>, and <parameter>codeSigning</parameter> respectively. If one of the three trust arguments is omitted, the certificate is neither trusted, nor rejected for that role. Clients that use <application>OpenSSL</application> or <application>NSS</application> encountering this certificate will present a warning to the user. Clients using <application>GnuTLS</application> without <application>p11-kit</application> support are not aware of trusted certificates. To include this CA into the <filename>ca-bundle.crt</filename>, <filename>email-ca-bundle.crt</filename>, or <filename>objsign-ca-bundle.crt</filename> files (the <application>GnuTLS</application> legacy bundles), it must have the appropriate trust arguments.	Existem três tipos de confiança que são reconhecidos pelo script <application>make-ca</application>, SSL/TLS, S/Mime e assinatura de código. Para o <application>OpenSSL</application>, esses são <parameter>serverAuth</parameter>; <parameter>emailProtection</parameter>; e <parameter>codeSigning</parameter>, respectivamente. Se um dos três argumentos de confiança for omitido, [então] o certificado nem é acreditado, nem é rejeitado para aquela função. Os clientes que usarem o <application>OpenSSL</application> ou o <application>NSS</application> encontrando esse certificado apresentarão um aviso para o(a) usuário(a). Os clientes usando o <application>GnuTLS</application> sem o suporte ao <application>p11-kit</application> não estão cientes dos certificados confiáveis. Para incluir essa AC nos arquivos <filename>ca-bundle.crt</filename>, <filename>email-ca-bundle.crt</filename> ou <filename>objsign-ca-bundle.crt</filename> (os pacotes legados do <application>GnuTLS</application>), precisa ter os argumentos confiáveis adequados.
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — English	Adding Additional CA Certificates	Adding Additional CA Certificates
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	Adding Additional CA Certificates	Ajouter des certificats de CA supplémentaires
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	Adding Additional CA Certificates	Acrescentando Certificados Adicionais de AC
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — English	The <filename class="directory">/etc/ssl/local</filename> directory is available to add additional CA certificates to the system trust store. This directory is also used to store certificates that were added to or modified in the system trust store by <xref linkend="p11-kit"/> so that trust values are maintained across upgrades. Files in this directory must be in the <application>OpenSSL</application> trusted certificate format. Certificates imported using the <command>trust</command> utility from <xref linkend="p11-kit"/> will utilize the x509 Extended Key Usage values to assign default trust values for the system anchors.	The <filename class="directory">/etc/ssl/local</filename> directory is available to add additional CA certificates to the system trust store. This directory is also used to store certificates that were added to or modified in the system trust store by <xref linkend="p11-kit"/> so that trust values are maintained across upgrades. Files in this directory must be in the <application>OpenSSL</application> trusted certificate format. Certificates imported using the <command>trust</command> utility from <xref linkend="p11-kit"/> will utilize the x509 Extended Key Usage values to assign default trust values for the system anchors.
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	The <filename class="directory">/etc/ssl/local</filename> directory is available to add additional CA certificates to the system trust store. This directory is also used to store certificates that were added to or modified in the system trust store by <xref linkend="p11-kit"/> so that trust values are maintained across upgrades. Files in this directory must be in the <application>OpenSSL</application> trusted certificate format. Certificates imported using the <command>trust</command> utility from <xref linkend="p11-kit"/> will utilize the x509 Extended Key Usage values to assign default trust values for the system anchors.	Le répertoire <filename class="directory">/etc/ssl/local</filename> permet d'ajouter des certificats d'autorités supplémentaires à la banque de confiance du système. Ce répertoire est aussi utilisé pour stocker des certificats qui ont été ajoutés ou modifiés dans la banque de confiance du système par <xref linkend="p11-kit"/> pour que les valeurs de confiance soient maintenues entre les mises à jour. Les fichiers de ce répertoire doivent être au format des certificats de confiance d'<application>OpenSSL</application>. Les certificats importés avec l'utilitaire <command>trust</command> de <xref linkend="p11-kit"/> utiliseront les valeurs d'utilisation étendue x509 pour assigner une valeur de confiance par défaut aux ancres du système.
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	The <filename class="directory">/etc/ssl/local</filename> directory is available to add additional CA certificates to the system trust store. This directory is also used to store certificates that were added to or modified in the system trust store by <xref linkend="p11-kit"/> so that trust values are maintained across upgrades. Files in this directory must be in the <application>OpenSSL</application> trusted certificate format. Certificates imported using the <command>trust</command> utility from <xref linkend="p11-kit"/> will utilize the x509 Extended Key Usage values to assign default trust values for the system anchors.	O diretório <filename class="directory">/etc/ssl/local</filename> está disponível para acrescentar certificados adicionais de AC à loja de confiança do sistema. Esse diretório também é usado para armazenar certificados que foram acrescentados a ou modificados na loja de confiança do sistema pelo <xref linkend="p11-kit"/>, de forma que os valores de confiança sejam mantidos ao longo de atualizações. Os arquivos nesse diretório precisam estar no formato de certificado confiável do <application>OpenSSL</application>. Os certificados importados usando o utilitário <command>trust</command> originário do <xref linkend="p11-kit"/> utilizarão os valores Uso Estendido de Chave x509 para atribuir valores confiáveis padrão para as âncoras do sistema.
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — English	If you need to override trust values, or otherwise need to create an <application>OpenSSL</application> trusted certificate manually from a regular PEM encoded file, you need to add trust arguments to the <command>openssl</command> command, and create a new certificate. For example, using the <ulink url="http://www.cacert.org/">CAcert</ulink> roots, if you want to trust both for all three roles, the following commands will create appropriate OpenSSL trusted certificates (run as the <systemitem class="username">root</systemitem> user after <xref linkend="wget"/> is installed):	If you need to override trust values, or otherwise need to create an <application>OpenSSL</application> trusted certificate manually from a regular PEM encoded file, you need to add trust arguments to the <command>openssl</command> command, and create a new certificate. For example, using the <ulink url="http://www.cacert.org/">CAcert</ulink> roots, if you want to trust both for all three roles, the following commands will create appropriate OpenSSL trusted certificates (run as the <systemitem class="username">root</systemitem> user after <xref linkend="wget"/> is installed):
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	If you need to override trust values, or otherwise need to create an <application>OpenSSL</application> trusted certificate manually from a regular PEM encoded file, you need to add trust arguments to the <command>openssl</command> command, and create a new certificate. For example, using the <ulink url="http://www.cacert.org/">CAcert</ulink> roots, if you want to trust both for all three roles, the following commands will create appropriate OpenSSL trusted certificates (run as the <systemitem class="username">root</systemitem> user after <xref linkend="wget"/> is installed):	Si vous avez besoin de remplacer les valeurs de confiance ou que vous devez créer un certificat <application>OpenSSL</application> de confiance manuellement à partir d'un fichier encodé en PEM, vous devrez ajouter des arguments «&nbsp;trust&nbsp;» à la commande <command>openssl</command> et créer un nouveau certificat. Par exemple, si vous souhaitez utiliser les racines <ulink url="http://www.cacert.org/">CAcert</ulink> pour que les deux soient de confiance pour ces trois rôles, les commandes suivantes créeront des certificats de confiance OpenSSL approprié (à lancer en tant qu'utilisateur <systemitem class="username">root</systemitem> après l'installation de <xref linkend="wget"/>)&nbsp;:
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	If you need to override trust values, or otherwise need to create an <application>OpenSSL</application> trusted certificate manually from a regular PEM encoded file, you need to add trust arguments to the <command>openssl</command> command, and create a new certificate. For example, using the <ulink url="http://www.cacert.org/">CAcert</ulink> roots, if you want to trust both for all three roles, the following commands will create appropriate OpenSSL trusted certificates (run as the <systemitem class="username">root</systemitem> user after <xref linkend="wget"/> is installed):	Se você precisar substituir os valores de confiança ou, do contrário, precisar criar um certificado de confiança do <application>OpenSSL</application> manualmente a partir de um arquivo codificado PEM comum, [então] você precisa acrescentar argumentos de confiança ao comando <command>openssl</command> e criar um certificado novo. Por exemplo, usando as raízes do <ulink url="http://www.cacert.org/">CAcert</ulink>, se você quiser confiar em ambos para todas as três funções, [então] os seguintes comandos criarão os certificados confiáveis do OpenSSL adequados (execute como o(a) usuário(a) <systemitem class="username">root</systemitem> depois que o <xref linkend="wget"/> estiver instalado):
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — English	<userinput>wget http://www.cacert.org/certs/root.crt &amp;&amp; wget http://www.cacert.org/certs/class3.crt &amp;&amp; openssl x509 -in root.crt -text -fingerprint -setalias "CAcert Class 1 root" \ -addtrust serverAuth -addtrust emailProtection -addtrust codeSigning \ > /etc/ssl/local/CAcert_Class_1_root.pem &amp;&amp; openssl x509 -in class3.crt -text -fingerprint -setalias "CAcert Class 3 root" \ -addtrust serverAuth -addtrust emailProtection -addtrust codeSigning \ > /etc/ssl/local/CAcert_Class_3_root.pem &amp;&amp; /usr/sbin/make-ca -r</userinput>	<userinput>wget http://www.cacert.org/certs/root.crt &amp;&amp; wget http://www.cacert.org/certs/class3.crt &amp;&amp; openssl x509 -in root.crt -text -fingerprint -setalias "CAcert Class 1 root" \ -addtrust serverAuth -addtrust emailProtection -addtrust codeSigning \ > /etc/ssl/local/CAcert_Class_1_root.pem &amp;&amp; openssl x509 -in class3.crt -text -fingerprint -setalias "CAcert Class 3 root" \ -addtrust serverAuth -addtrust emailProtection -addtrust codeSigning \ > /etc/ssl/local/CAcert_Class_3_root.pem &amp;&amp; /usr/sbin/make-ca -r</userinput>
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	<userinput>wget http://www.cacert.org/certs/root.crt &amp;&amp; wget http://www.cacert.org/certs/class3.crt &amp;&amp; openssl x509 -in root.crt -text -fingerprint -setalias "CAcert Class 1 root" \ -addtrust serverAuth -addtrust emailProtection -addtrust codeSigning \ > /etc/ssl/local/CAcert_Class_1_root.pem &amp;&amp; openssl x509 -in class3.crt -text -fingerprint -setalias "CAcert Class 3 root" \ -addtrust serverAuth -addtrust emailProtection -addtrust codeSigning \ > /etc/ssl/local/CAcert_Class_3_root.pem &amp;&amp; /usr/sbin/make-ca -r</userinput>	<userinput>wget http://www.cacert.org/certs/root.crt &amp;&amp; wget http://www.cacert.org/certs/class3.crt &amp;&amp; openssl x509 -in root.crt -text -fingerprint -setalias "CAcert Class 1 root" \ -addtrust serverAuth -addtrust emailProtection -addtrust codeSigning \ > /etc/ssl/local/CAcert_Class_1_root.pem &amp;&amp; openssl x509 -in class3.crt -text -fingerprint -setalias "CAcert Class 3 root" \ -addtrust serverAuth -addtrust emailProtection -addtrust codeSigning \ > /etc/ssl/local/CAcert_Class_3_root.pem &amp;&amp; /usr/sbin/make-ca -r</userinput>
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	<userinput>wget http://www.cacert.org/certs/root.crt &amp;&amp; wget http://www.cacert.org/certs/class3.crt &amp;&amp; openssl x509 -in root.crt -text -fingerprint -setalias "CAcert Class 1 root" \ -addtrust serverAuth -addtrust emailProtection -addtrust codeSigning \ > /etc/ssl/local/CAcert_Class_1_root.pem &amp;&amp; openssl x509 -in class3.crt -text -fingerprint -setalias "CAcert Class 3 root" \ -addtrust serverAuth -addtrust emailProtection -addtrust codeSigning \ > /etc/ssl/local/CAcert_Class_3_root.pem &amp;&amp; /usr/sbin/make-ca -r</userinput>	<userinput>wget http://www.cacert.org/certs/root.crt &amp;&amp; wget http://www.cacert.org/certs/class3.crt &amp;&amp; openssl x509 -in root.crt -text -fingerprint -setalias "CAcert Class 1 root" \ -addtrust serverAuth -addtrust emailProtection -addtrust codeSigning \ > /etc/ssl/local/CAcert_Class_1_root.pem &amp;&amp; openssl x509 -in class3.crt -text -fingerprint -setalias "CAcert Class 3 root" \ -addtrust serverAuth -addtrust emailProtection -addtrust codeSigning \ > /etc/ssl/local/CAcert_Class_3_root.pem &amp;&amp; /usr/sbin/make-ca -r</userinput>
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — English	Overriding Mozilla Trust	Overriding Mozilla Trust
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	Overriding Mozilla Trust	Remplacer la confiance de Mozilla
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	Overriding Mozilla Trust	Substituindo a Confiança do Mozilla
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — English	Occasionally, there may be instances where you don't agree with Mozilla's inclusion of a particular certificate authority. If you'd like to override the default trust of a particular CA, simply create a copy of the existing certificate in <filename class="directory">/etc/ssl/local</filename> with different trust arguments. For example, if you'd like to distrust the "Makebelieve_CA_Root" file, run the following commands:	Occasionally, there may be instances where you don't agree with Mozilla's inclusion of a particular certificate authority. If you'd like to override the default trust of a particular CA, simply create a copy of the existing certificate in <filename class="directory">/etc/ssl/local</filename> with different trust arguments. For example, if you'd like to distrust the "Makebelieve_CA_Root" file, run the following commands:
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	Occasionally, there may be instances where you don't agree with Mozilla's inclusion of a particular certificate authority. If you'd like to override the default trust of a particular CA, simply create a copy of the existing certificate in <filename class="directory">/etc/ssl/local</filename> with different trust arguments. For example, if you'd like to distrust the "Makebelieve_CA_Root" file, run the following commands:	Parfois, il peut arriver que vous ne soyez pas d'accord avec l'inclusion d'une autorité de certification particulière. Si vous voulez remplacer la confiance par défaut d'une CA particulière, créez simplement une copie du certificat existant dans <filename class="directory">/etc/ssl/local</filename> avec des arguments de confiances différents. Par exemple, si vous ne voulez pas faire confiance au fichier «&nbsp;Makebelieve_CA_Root&nbsp;», lancez les commandes suivantes&nbsp;:
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	Occasionally, there may be instances where you don't agree with Mozilla's inclusion of a particular certificate authority. If you'd like to override the default trust of a particular CA, simply create a copy of the existing certificate in <filename class="directory">/etc/ssl/local</filename> with different trust arguments. For example, if you'd like to distrust the "Makebelieve_CA_Root" file, run the following commands:	Ocasionalmente, possivelmente existam instâncias onde você não concorda com a inclusão do Mozilla de uma autoridade de certificação específica. Se você gostaria de substituir a confiança padrão de uma AC específica, [então] simplesmente crie uma cópia do certificado existente em <filename class="directory">/etc/ssl/local</filename> com argumentos de confiança diferentes. Por exemplo, se você gostaria de desconfiar do arquivo "Makebelieve_CA_Root", [então] execute os seguintes comandos:
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — English	<userinput>openssl x509 -in /etc/ssl/certs/Makebelieve_CA_Root.pem \ -text \ -fingerprint \ -setalias "Disabled Makebelieve CA Root" \ -addreject serverAuth \ -addreject emailProtection \ -addreject codeSigning \ > /etc/ssl/local/Disabled_Makebelieve_CA_Root.pem &amp;&amp; /usr/sbin/make-ca -r</userinput>	<userinput>openssl x509 -in /etc/ssl/certs/Makebelieve_CA_Root.pem \ -text \ -fingerprint \ -setalias "Disabled Makebelieve CA Root" \ -addreject serverAuth \ -addreject emailProtection \ -addreject codeSigning \ > /etc/ssl/local/Disabled_Makebelieve_CA_Root.pem &amp;&amp; /usr/sbin/make-ca -r</userinput>
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	<userinput>openssl x509 -in /etc/ssl/certs/Makebelieve_CA_Root.pem \ -text \ -fingerprint \ -setalias "Disabled Makebelieve CA Root" \ -addreject serverAuth \ -addreject emailProtection \ -addreject codeSigning \ > /etc/ssl/local/Disabled_Makebelieve_CA_Root.pem &amp;&amp; /usr/sbin/make-ca -r</userinput>	<userinput>openssl x509 -in /etc/ssl/certs/Makebelieve_CA_Root.pem \ -text \ -fingerprint \ -setalias "Disabled Makebelieve CA Root" \ -addreject serverAuth \ -addreject emailProtection \ -addreject codeSigning \ > /etc/ssl/local/Disabled_Makebelieve_CA_Root.pem &amp;&amp; /usr/sbin/make-ca -r</userinput>
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	<userinput>openssl x509 -in /etc/ssl/certs/Makebelieve_CA_Root.pem \ -text \ -fingerprint \ -setalias "Disabled Makebelieve CA Root" \ -addreject serverAuth \ -addreject emailProtection \ -addreject codeSigning \ > /etc/ssl/local/Disabled_Makebelieve_CA_Root.pem &amp;&amp; /usr/sbin/make-ca -r</userinput>	<userinput>openssl x509 -in /etc/ssl/certs/Makebelieve_CA_Root.pem \ -text \ -fingerprint \ -setalias "Disabled Makebelieve CA Root" \ -addreject serverAuth \ -addreject emailProtection \ -addreject codeSigning \ > /etc/ssl/local/Disabled_Makebelieve_CA_Root.pem &amp;&amp; /usr/sbin/make-ca -r</userinput>
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — English	Using make-ca with Python3	Using make-ca with Python3
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	Using make-ca with Python3	Utiliser make-ca avec Python3
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	Using make-ca with Python3	Usando make-ca com Python3
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — English	When <application>Python3</application> was installed in LFS, it included the <application>pip3</application> module with vendored certificates from the <application>Certifi</application> module. That was necessary, but it means that whenever <command>pip3</command> is used it can reference those certificates, primarily when creating a virtual environment or when installing a module with all its wheel dependencies in one go.	When <application>Python3</application> was installed in LFS, it included the <application>pip3</application> module with vendored certificates from the <application>Certifi</application> module. That was necessary, but it means that whenever <command>pip3</command> is used it can reference those certificates, primarily when creating a virtual environment or when installing a module with all its wheel dependencies in one go.
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	When <application>Python3</application> was installed in LFS, it included the <application>pip3</application> module with vendored certificates from the <application>Certifi</application> module. That was necessary, but it means that whenever <command>pip3</command> is used it can reference those certificates, primarily when creating a virtual environment or when installing a module with all its wheel dependencies in one go.	Lorsque <application>Python3</application> a été installé dans LFS, il contenait le module <application>pip3</application> avec les certificats inclus du module <application>Certifi</application>. C'était nécessaire, mais cela signifie que lorsque vous utilisez <command>pip3</command>, il peut utiliser ces certificats surtout lors de la création d'environnements virtuels ou à l'installation d'un module avec toutes ses dépendances wheels en une seule fois.
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	When <application>Python3</application> was installed in LFS, it included the <application>pip3</application> module with vendored certificates from the <application>Certifi</application> module. That was necessary, but it means that whenever <command>pip3</command> is used it can reference those certificates, primarily when creating a virtual environment or when installing a module with all its wheel dependencies in one go.	Quando <application>Python3</application> foi instalado no LFS, ele incluiu o módulo <application>pip3</application> com certificados vendidos originários do módulo <application>Certifi</application>. Isso era necessário, mas significa que sempre que <command>pip3</command> for usado, ele pode referenciar esses certificados, principalmente ao criar um ambiente virtual ou ao instalar um módulo com todas as dependências wheel dele de uma vez.
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — English	It is generally considered that the System Administrator should be in charge of which certificates are available. Now that <xref linkend="make-ca"/> and <xref linkend="p11-kit"/> have been installed and <application>make-ca</application> has been configured, it is possible to make <command>pip3</command> use the system certificates.	It is generally considered that the System Administrator should be in charge of which certificates are available. Now that <xref linkend="make-ca"/> and <xref linkend="p11-kit"/> have been installed and <application>make-ca</application> has been configured, it is possible to make <command>pip3</command> use the system certificates.
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	It is generally considered that the System Administrator should be in charge of which certificates are available. Now that <xref linkend="make-ca"/> and <xref linkend="p11-kit"/> have been installed and <application>make-ca</application> has been configured, it is possible to make <command>pip3</command> use the system certificates.	On considère en général que l'administrateur système est en charge des certificats disponibles. Maintenant que <xref linkend="make-ca"/> et <xref linkend="p11-kit"/> sont installés et que <application>make-ca</application> est configuré, il est possible de faire utiliser les certificats systèmes à <command>pip3</command>.
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	It is generally considered that the System Administrator should be in charge of which certificates are available. Now that <xref linkend="make-ca"/> and <xref linkend="p11-kit"/> have been installed and <application>make-ca</application> has been configured, it is possible to make <command>pip3</command> use the system certificates.	Geralmente considera-se que o(a) Administrador(a) do Sistema(a) deveria ser responsável por quais certificados estão disponíveis. Agora que <xref linkend="make-ca"/> e <xref linkend="p11-kit"/> foram instalados e <application>make-ca</application> foi configurado, é possível fazer com que <command >pip3</command> use os certificados do sistema.
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — English	The vendored certificates installed in LFS are a snapshot from when the pulled-in version of <application>Certifi</application> was created. If you regularly update the system certificates, the vendored version will become out of date.	The vendored certificates installed in LFS are a snapshot from when the pulled-in version of <application>Certifi</application> was created. If you regularly update the system certificates, the vendored version will become out of date.
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	The vendored certificates installed in LFS are a snapshot from when the pulled-in version of <application>Certifi</application> was created. If you regularly update the system certificates, the vendored version will become out of date.	Les certificats embarqués installés dans LFS sont une image du moment où la version de <application>Certifi</application> a été créée. Si vous mettez souvent à jour les certificats du système, les certificats embarqués seront périmés.
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	The vendored certificates installed in LFS are a snapshot from when the pulled-in version of <application>Certifi</application> was created. If you regularly update the system certificates, the vendored version will become out of date.	Os certificados fornecidos instalados no LFS são um instantâneo de quando a versão extraída do <application>Certifi</application> foi criada. Se você atualizar regularmente os certificados do sistema, [então] a versão fornecida se tornará desatualizada.
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — English	To use the system certificates in <application>Python3</application>, you should set <envar>_PIP_STANDALONE_CERT</envar> to point to them, e.g for the <application>bash</application> shell:	To use the system certificates in <application>Python3</application>, you should set <envar>_PIP_STANDALONE_CERT</envar> to point to them, e.g for the <application>bash</application> shell:
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	To use the system certificates in <application>Python3</application>, you should set <envar>_PIP_STANDALONE_CERT</envar> to point to them, e.g for the <application>bash</application> shell:	Pour utiliser les certificats du système dans <application>Python3</application>, vous devriez configurer la variable <envar>_PIP_STANDALONE_CERT</envar> pour y pointer, p. ex. pour le shell <application>bash</application>&nbsp;:
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	To use the system certificates in <application>Python3</application>, you should set <envar>_PIP_STANDALONE_CERT</envar> to point to them, e.g for the <application>bash</application> shell:	Para usar os certificados do sistema no <application>Python3</application>, você deveria configurar <envar>_PIP_STANDALONE_CERT</envar> para apontar para eles, por exemplo, para o shell <application>bash</application>:
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — English	<userinput>export _PIP_STANDALONE_CERT=/etc/pki/tls/certs/ca-bundle.crt</userinput>	<userinput>export _PIP_STANDALONE_CERT=/etc/pki/tls/certs/ca-bundle.crt</userinput>
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	<userinput>export _PIP_STANDALONE_CERT=/etc/pki/tls/certs/ca-bundle.crt</userinput>	<userinput>export _PIP_STANDALONE_CERT=/etc/pki/tls/certs/ca-bundle.crt</userinput>
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	<userinput>export _PIP_STANDALONE_CERT=/etc/pki/tls/certs/ca-bundle.crt</userinput>	<userinput>export _PIP_STANDALONE_CERT=/etc/pki/tls/certs/ca-bundle.crt</userinput>
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — English	If you have created virtual environments, for example when testing modules, and those include the <application>Requests</application> and <application>Certifi</application> modules in <filename class="directory">~/.local/lib/python&python3-majorver;/</filename>, then those local modules will be used instead of the system certificates unless you remove the local modules.	If you have created virtual environments, for example when testing modules, and those include the <application>Requests</application> and <application>Certifi</application> modules in <filename class="directory">~/.local/lib/python&python3-majorver;/</filename>, then those local modules will be used instead of the system certificates unless you remove the local modules.
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	If you have created virtual environments, for example when testing modules, and those include the <application>Requests</application> and <application>Certifi</application> modules in <filename class="directory">~/.local/lib/python&python3-majorver;/</filename>, then those local modules will be used instead of the system certificates unless you remove the local modules.	Si vous avez créé des environnements virtuels, par exemple pour tester des modules, et qu'ils incluent le module <application>Requests</application> ou <application>Certifi</application> dans <filename class="directory">~/.local/lib/python&python3-majorver;/</filename> , alors ces modules locaux seront utilisés au lieu des certificats systèmes à moins que vous supprimiez les modules locaux.
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	If you have created virtual environments, for example when testing modules, and those include the <application>Requests</application> and <application>Certifi</application> modules in <filename class="directory">~/.local/lib/python&python3-majorver;/</filename>, then those local modules will be used instead of the system certificates unless you remove the local modules.	Se você tiver criado ambientes virtuais, por exemplo, ao testar módulos, e eles incluem os módulos <application>Requests</application> e <application>Certifi</application> em <filename class="directory">~/.local/lib/python&python3-majorver;/</filename>, então esses módulos locais serão usados em vez dos certificados do sistema, a menos que você remova os módulos locais.
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — English	To use the system certificates in <application>Python3</application> with the BLFS profiles, add the following variable to your system or personal profiles:	To use the system certificates in <application>Python3</application> with the BLFS profiles, add the following variable to your system or personal profiles:
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	To use the system certificates in <application>Python3</application> with the BLFS profiles, add the following variable to your system or personal profiles:	Pour utiliser les certificats systèmes dans <application>Python3</application> avec les profils BLFS, ajoutez la variable suivante à vos profils systèmes ou personnels&nbsp;:
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	To use the system certificates in <application>Python3</application> with the BLFS profiles, add the following variable to your system or personal profiles:	Para usar os certificados do sistema no <application>Python3</application> com os perfis BLFS, adicione a seguinte variável aos teus perfis de sistema ou pessoal:
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — English	<userinput>mkdir -pv /etc/profile.d &amp;&amp; cat &gt; /etc/profile.d/pythoncerts.sh &lt;&lt; "EOF" <literal># Begin /etc/profile.d/pythoncerts.sh export _PIP_STANDALONE_CERT=/etc/pki/tls/certs/ca-bundle.crt # End /etc/profile.d/pythoncerts.sh</literal> EOF</userinput>	<userinput>mkdir -pv /etc/profile.d &amp;&amp; cat &gt; /etc/profile.d/pythoncerts.sh &lt;&lt; "EOF" <literal># Begin /etc/profile.d/pythoncerts.sh export _PIP_STANDALONE_CERT=/etc/pki/tls/certs/ca-bundle.crt # End /etc/profile.d/pythoncerts.sh</literal> EOF</userinput>
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	<userinput>mkdir -pv /etc/profile.d &amp;&amp; cat &gt; /etc/profile.d/pythoncerts.sh &lt;&lt; "EOF" <literal># Begin /etc/profile.d/pythoncerts.sh export _PIP_STANDALONE_CERT=/etc/pki/tls/certs/ca-bundle.crt # End /etc/profile.d/pythoncerts.sh</literal> EOF</userinput>	<userinput>mkdir -pv /etc/profile.d &amp;&amp; cat &gt; /etc/profile.d/pythoncerts.sh &lt;&lt; "EOF" <literal># Begin /etc/profile.d/pythoncerts.sh export _PIP_STANDALONE_CERT=/etc/pki/tls/certs/ca-bundle.crt # End /etc/profile.d/pythoncerts.sh</literal> EOF</userinput>
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	<userinput>mkdir -pv /etc/profile.d &amp;&amp; cat &gt; /etc/profile.d/pythoncerts.sh &lt;&lt; "EOF" <literal># Begin /etc/profile.d/pythoncerts.sh export _PIP_STANDALONE_CERT=/etc/pki/tls/certs/ca-bundle.crt # End /etc/profile.d/pythoncerts.sh</literal> EOF</userinput>	<userinput>mkdir -pv /etc/profile.d &amp;&amp; cat &gt; /etc/profile.d/pythoncerts.sh &lt;&lt; "EOF" <literal># Inicia /etc/profile.d/pythoncerts.sh export _PIP_STANDALONE_CERT=/etc/pki/tls/certs/ca-bundle.crt # Termina /etc/profile.d/pythoncerts.sh</literal> EOF</userinput>
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — English	Contents	Contents
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	Contents	Contenu
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	Contents	Conteúdo
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — English	Installed Programs	Installed Programs
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	Installed Programs	Programmes installés
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	Installed Programs	Aplicativos Instalados
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — English	Installed Directories	Installed Directories
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	Installed Directories	Répertoires installés
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	Installed Directories	Diretórios Instalados
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — English	/etc/ssl/{certs,local} and /etc/pki/{nssdb,anchors,tls/{certs,java}}	/etc/ssl/{certs,local} and /etc/pki/{nssdb,anchors,tls/{certs,java}}
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	/etc/ssl/{certs,local} and /etc/pki/{nssdb,anchors,tls/{certs,java}}	/etc/ssl/{certs,local} et /etc/pki/{nssdb,anchors,tls/{certs,java}}
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	/etc/ssl/{certs,local} and /etc/pki/{nssdb,anchors,tls/{certs,java}}	/etc/ssl/{certs,local} e /etc/pki/{nssdb,anchors,tls/{certs,java}}
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — English	Short Descriptions	Short Descriptions
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	Short Descriptions	Descriptions courtes
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	Short Descriptions	Descrições Curtas
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — English	<?dbfo list-presentation="list"?> <?dbhtml list-presentation="table"?>	<?dbfo list-presentation="list"?> <?dbhtml list-presentation="table"?>
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	<?dbfo list-presentation="list"?> <?dbhtml list-presentation="table"?>	<?dbfo list-presentation="list"?> <?dbhtml list-presentation="table"?>
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	<?dbfo list-presentation="list"?> <?dbhtml list-presentation="table"?>	<?dbfo list-presentation="list"?> <?dbhtml list-presentation="table"?>
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — English	<command>make-ca</command>	<command>make-ca</command>
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	<command>make-ca</command>	<command>make-ca</command>
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	<command>make-ca</command>	<command>make-ca</command>
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — English	is a shell script that adapts a current version of <filename>certdata.txt</filename>, and prepares it for use as the system trust store	is a shell script that adapts a current version of <filename>certdata.txt</filename>, and prepares it for use as the system trust store
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — French	is a shell script that adapts a current version of <filename>certdata.txt</filename>, and prepares it for use as the system trust store	est un script shell qui adapte une version actuelle de <filename>certdata.txt</filename> et le prépare pour l'utiliser comme banque de confiance du système
	Beyond Linux From Scratch 12.2/postlfs_security_make-ca — Portuguese (Brazil)	is a shell script that adapts a current version of <filename>certdata.txt</filename>, and prepares it for use as the system trust store	é um script de shell que adapta uma versão atual do <filename>certdata.txt</filename> e o apronta para uso como a loja de confiança do sistema

• 2 / 2
  / 2