Certificate authority management, such as it is, in 10.2 consists of the file/System/Library/Keychains/X509Anchors. Get root and stick your anchor certificate into that keychain file (using/usr/bin/certtool). That'll make it a trusted anchor for the entire system. Browse with Keychain Access (in Applications/Utilities). Support for more detailed control (say, different anchor sets for different programs) isn't in Jaguar; that'll arrive with some future release. (The APIs are in; just not the admin features to use them easily.) And yes, Safari needs to learn to ask and say, "Okay then, if you say so..."
Certificate authority management, such as it is, in 10.2 consists of the file /System/Library/Keychains/X509Anchors. Get root and stick your anchor certificate into that keychain file (using /usr/bin/certtool). That'll make it a trusted anchor for the entire system. Browse with Keychain Access (in Applications/Utilities).
Support for more detailed control (say, different anchor sets for different programs) isn't in Jaguar; that'll arrive with some future release. (The APIs are in; just not the admin features to use them easily.)
And yes, Safari needs to learn to ask and say, "Okay then, if you say so..."