Index: general.ent
===================================================================
--- general.ent	(revision 44e5e40bb4ce6cf1242c0292d0f454bfeb26dfdf)
+++ general.ent	(revision 68bc841a8578924906698ff1069cb373b1a4cbbe)
@@ -4,5 +4,5 @@
 -->
 
-<!ENTITY day          "05">                   <!-- Always 2 digits -->
+<!ENTITY day          "12">                   <!-- Always 2 digits -->
 <!ENTITY month        "03">                   <!-- Always 2 digits -->
 <!ENTITY year         "2009">
Index: introduction/welcome/changelog.xml
===================================================================
--- introduction/welcome/changelog.xml	(revision 44e5e40bb4ce6cf1242c0292d0f454bfeb26dfdf)
+++ introduction/welcome/changelog.xml	(revision 68bc841a8578924906698ff1069cb373b1a4cbbe)
@@ -43,4 +43,13 @@
 
     <listitem>
+      <para>March 12th, 2009</para>
+      <itemizedlist>
+        <listitem>
+          <para>[dj] - Added Root Certificates page.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
+
+    <listitem>
       <para>March 5th, 2009</para>
       <itemizedlist>
Index: postlfs/config/config.xml
===================================================================
--- postlfs/config/config.xml	(revision 44e5e40bb4ce6cf1242c0292d0f454bfeb26dfdf)
+++ postlfs/config/config.xml	(revision 68bc841a8578924906698ff1069cb373b1a4cbbe)
@@ -59,4 +59,3 @@
   <xi:include xmlns:xi="http://www.w3.org/2003/XInclude" href="netfs.xml"/>
 
-
 </chapter>
Index: postlfs/security/rootcerts.xml
===================================================================
--- postlfs/security/rootcerts.xml	(revision 68bc841a8578924906698ff1069cb373b1a4cbbe)
+++ postlfs/security/rootcerts.xml	(revision 68bc841a8578924906698ff1069cb373b1a4cbbe)
@@ -0,0 +1,51 @@
+<?xml version="1.0" encoding="ISO-8859-1"?>
+<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
+   "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
+  <!ENTITY % general-entities SYSTEM "../../general.ent">
+  %general-entities;
+]>
+
+<sect1 id="postlfs-config-rootcerts"  xreflabel="Root Certificates">
+  <?dbhtml filename="rootcerts.html"?>
+
+  <sect1info>
+    <othername>$LastChangedBy$</othername>
+    <date>$Date$</date>
+  </sect1info>
+
+  <title>Root Certificates</title>
+
+  <indexterm zone="postlfs-config-rootcerts">
+    <primary sortas="e-cabundle">ca-bundle.crt</primary>
+  </indexterm>
+
+  <para>The <filename>ca-bundle.crt</filename> file contains public
+  certificates from trusted root certificate authorities (CAs).  CAs guarantee
+  the authenticity of a host by issuing certificates that contain both the name
+  of the host and the owner's name, and are signed using the CA's private key.
+  In turn, a matching public key is provided by the CA that can be used to
+  verify the authenticity of any SSL certificate that is signed by that CA. The
+  list of CA certificates (with public keys) included in ca-bundle.crt
+  are provided by mozilla.org, and undergo an annual investigation and
+  auditing process, so that they can be trusted for general use.</para>
+
+  <para>The list of certificates is stored in PEM format, and is generated from
+  a DER formatted file, <filename>certdata.txt</filename>, that ships with
+  Mozilla products. A <ulink
+  url="http://cvs.fedoraproject.org/viewvc/rpms/ca-certificates/devel/mkcabundle.pl?view=co">
+  script</ulink> provided by RedHat converts the upstream
+  <filename>certdata.txt</filename> from DER to PEM format, so that it is
+  usable by applications that utilize SSL/TLS encryption.  Additional trusted
+  CAs can be added to the <filename>ca-bundle.crt</filename> by appending the
+  CA's public certificate (in PEM format) to the file.</para>
+
+  <para>Download a recent version of <ulink
+  url="&files-anduin;/ca-bundle.crt">ca-bundle.crt</ulink> and place it into
+  the <filename class="directory">/etc/ssl/certs</filename> directory and make
+  the file world readable by issuing the following commands as the 
+  <systemitem class="username">root</systemitem> user:</para>
+
+<screen role="root"><userinput>install -v -d /etc/ssl/certs &amp;&amp;
+install -m644 ca-bundle.crt /etc/ssl/certs</userinput></screen>
+
+</sect1>
Index: postlfs/security/security.xml
===================================================================
--- postlfs/security/security.xml	(revision 44e5e40bb4ce6cf1242c0292d0f454bfeb26dfdf)
+++ postlfs/security/security.xml	(revision 68bc841a8578924906698ff1069cb373b1a4cbbe)
@@ -40,4 +40,5 @@
   "signatures" and compares for files that have been changed.</para>
 
+  <xi:include xmlns:xi="http://www.w3.org/2003/XInclude" href="rootcerts.xml"/>
   <xi:include xmlns:xi="http://www.w3.org/2003/XInclude" href="openssl.xml"/>
   <xi:include xmlns:xi="http://www.w3.org/2003/XInclude" href="gnutls.xml"/>
