CA pinning for DNF (sslcacert honoured?)

[Joonas Lehtonen]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi,

since it has been suggested that I should file bug [1] (CA pinning for
mirrors.fedoraproject.org for yum) also against yum's successor dnf
[2], I'm wondering if sslcacert is also understood by dnf?

from the man page of dnf.conf:
"DNF  by  default uses the global configuration file at
/etc/dnf/dnf.conf and all *.repo files found under /etc/yum.repos.d."

That tells me that dnf parses the same repo files as dnf, but there is
no 'sslcacert' option in dnf.conf 's man page. So I'm wondering
whether just the man page is not complete or dnf has no such option (yet)?

next step would be to simply try it..




[1] https://bugzilla.redhat.com/show_bug.cgi?id=1131673
[2] https://lists.fedoraproject.org/pipermail/devel/2014-June/199808.html
https://fedoraproject.org/wiki/Changes/ReplaceYumWithDNF
-----BEGIN PGP SIGNATURE-----
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=SQ9u
-----END PGP SIGNATURE-----