- Edit the smime_default_key line in your muttrc, replacing the keyid with your
own.
-- You probably want to import trusted root certificates from Mozilla or
- the system. This makes you trust anything that was ultimately signed by
- one of them. You can use "smime_keys add_root" to do so, or just download
- https://curl.haxx.se/ca/cacert.pem into the place you point neomutt's
+- There is no more ca-bundle.crt file with the trusted roots to import shipped
+ in neomutt. The upstream file is out-dated and user is encouraged to use
+ ca-bundle.crt from ca-certificate package. This makes you trust anything
+ that was ultimately signed by one of them. You can use "smime_keys add_root"
+ to do so, or just copy ca-bundle.crt into the place you point neomutt's
smime_ca_location variable to.
-
Other notes
Key management is done in a way similar to OpenSSL's CA directory. Private