Greg Stark <stark(at)mit(dot)edu> writes:
> However I have a different question. Are the system certificates
> intended or general purpose certificates? Do they have their intended
> uses annotated on the certificates? Does SSL Verification have any
> logic deciding which certificates are appropriate for signing servers?
AFAIK, once you've stuck a certificate into the system store, it
will be trusted by every service on your machine. Most distros
ship system-store contents that are basically just designed for
web browers, because the web is the only widely-applicable use
case. Like you said, chicken and egg problem.
regards, tom lane