GNOME Bugzilla – Bug 675387
Store certificates under $XDG_DATA_HOME
Last modified: 2013-09-14 16:55:36 UTC
It seems there are still a couple places where we are reading/storing information in the home directory. It would be great to relocate these to directories defined in the XDG Base Directory spec. camel/camel-tcp-stream-ssl.c: g_get_home_dir (), ".camel_certs", fingerprint, NULL); camel/camel-tcp-stream-ssl.c: dir = g_build_filename (g_get_home_dir (), ".camel_certs", NULL); e_debug_log_dump_to_dated_file (GError **error)
Urgh, ~/.camel_certs? Isn't that handled by (lib)gnome-keyring nowadays anyway?
CamelTcpStreamSSL still talks to NSS and NSPR directly and therefore has to store its own certificates. Killing off CamelStream and its ilk and moving to GInput/OutputStream will be my next big project now that (I think) the GTls APIs in GIO finally support NSS certificates by way of p11-kit. But that's a 3.8 target at the earliest.
As a stopgap measure, can we relocate it to $XDG_DATA_HOME/evolution/camel_certs ? I see there already is a camel_cert.db in that location, anyway...
Moved certificate storage to $XDG_DATA_HOME/camel_certs for now. Fixed for Evolution 3.5.2 in: http://git.gnome.org/browse/evolution-data-server/commit/?id=00c97c7abe96f3507d19a6e6dcd0c3ed2245eadf