[CentOS] Can we trust RedHAt encryption tools?

[John Doe]

From: Liam O'Toole <liam.p.otoole at gmail.com>

> That sounds worrying. Could you elaborate, or provide a citation?

Remember this?
http://nakedsecurity.sophos.com/2013/12/09/serious-security-google-finds-fake-but-trusted-ssl-certificates-for-its-domains-made-in-france/
The whole SSL certificates system is not to be trusted if (some of) the guys who manage it are corrupt.

JD