|
Revision tags: release/12.4.0, release/13.1.0, release/12.3.0, release/13.0.0 |
|
| #
62aaa701 |
| 30-Mar-2021 |
Kyle Evans <[email protected]> |
caroot: cumulative cert update
This adds a note in all existing certs that they are explicitly trusted for server auth, and also:
- Seven (7) added - Nineteen (19) removed
(cherry picked from comm
caroot: cumulative cert update
This adds a note in all existing certs that they are explicitly trusted for server auth, and also:
- Seven (7) added - Nineteen (19) removed
(cherry picked from commit 446169e0b6f04b96960540784539c218f5a14c86) (cherry picked from commit 3016c5c2bf68d8c6ebf303939f20092478e7a4ca) (cherry picked from commit fac832b27105d926d9f8728d7147adb547b937d8) (cherry picked from commit 76461921dac18b300489e326ba3df61d2809f364)
show more ...
|
| #
f20c0e33 |
| 28-Dec-2020 |
Kyle Evans <[email protected]> |
caroot: drop $FreeBSD$ expansion from root bundle
This debatably could have waited until the next update would have taken place, but it's easier to see what changes if we get it out of the way now.
caroot: drop $FreeBSD$ expansion from root bundle
This debatably could have waited until the next update would have taken place, but it's easier to see what changes if we get it out of the way now.
MFC after: 3 days
show more ...
|
|
Revision tags: release/12.2.0, release/11.4.0, release/12.1.0 |
|
| #
b25bf676 |
| 04-Oct-2019 |
Kyle Evans <[email protected]> |
caroot: commit initial bundle
Interested users can blacklist any/all of these with certctl(8), examples:
- mv /usr/share/certs/trusted/... /usr/share/certs/blacklisted/...; \ certctl rehash - c
caroot: commit initial bundle
Interested users can blacklist any/all of these with certctl(8), examples:
- mv /usr/share/certs/trusted/... /usr/share/certs/blacklisted/...; \ certctl rehash - certctl blacklist /usr/share/certs/trusted/*; \ certctl rehash
Certs can be easily examined after installation with `certctl list`, and certctl blacklist will accept the hashed filename as output by list or as seen in /etc/ssl/certs
No objection from: secteam Relnotes: Definite maybe
show more ...
|