From a1601457564fa802f8beafc6012798866cf91ac6 Mon Sep 17 00:00:00 2001
From: rcritten <>
Date: Sep 06 2005 14:52:49 +0000
Subject: Add information about how to use built-in CA's via libnssckbi.so


---

diff --git a/README b/README
index 0d82eb4..ce6736d 100644
--- a/README
+++ b/README
@@ -36,7 +36,7 @@ BUILDING
  Include conf/nss.conf
 
  You'll need to change the default ports in nss.conf from 443 to
- something else if you aren't starting this as root.
+ something else if you aren't starting the server as root.
 
 CONFIGURING NSS
 
@@ -64,6 +64,13 @@ CONFIGURING NSS
 
  internal:netscape
 
+BUILT-IN ROOT CAs
+
+NSS provides a list of built-in CA's (VeriSign, Thawte, etc). This takes the
+form of a shared library, libnssckbi.so. If this library is placed in the
+same directory as the certificate database then it will be loaded
+automatically when the server starts.
+
 DOCUMENTATION
 
  See docs/mod_nss.html for additional information.