geier/khal — pull request #2 by tdwyer (2013-12-05 11:30:59+00:00)
Title: Correct instructions to verify in-house SSL CA Certificate.

Ya, kind of wordy but the combination of the hard to see back ticks and DotZERO leaves lots of room for error.

Also, I don't the PEM method works for anyone. OpenSSL requires them to be named the same value as their hash made in that strange way. It is important to push this upstream. Many, many people and organizations use in-hose PKI systems.

Public CA's have proven themselves to be untrustworthy, and it's free.

-- I also created an Archlinux PKGBUILD, but I don't expect you to pull that. On second though, it may serve to be a good example. At least I hope it is good :p