Each directory in these paths will contain certificates (site, CA or
personal) for the user (LOCAL) and the entire system (
SHARED). Additional sub-structure may be added here at the
discretion of the implementor. The files here should be directly
usable by SSLeay utilities which are part of SSLeay. For this
reason, certificates will be stored in the directories as PEM encoded
ASCII files.
The posibility of storing the certificates with the PKCS #7 specification was considered. It is rumored that Netscape Communicator will support that this format (or PKCS #12), so using it would allow Communicator and lynx-cert to share certificates. There is currently little support for the PKCS standards in SSLeay -- if such support is added to SSLeay, that support may optionally be added to lynx-cert. This support might significantly change the structure of the trust parameters file below.