en Copyright 2015 Java http://172.16.0.5:8080/history/freebsd-14.2/secure/caroot/Makefile#d0b2dbfa Remove $FreeBSD$: one-line sh patternRemove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/ List of files: /freebsd-14.2/secure/caroot/Makefile Wed, 16 Aug 2023 17:55:03 +0000 Warner Losh <imp@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/secure/caroot/Makefile#64e6e1e4 secure/caroot, certctl: Rename secure/caroot/blacklistedOld certctl commands still work for compatability, but are deprecated.Approved by: secteam (gordon)Differential Revision: https://reviews.freebsd.org/D30807 List of files: /freebsd-14.2/secure/caroot/Makefile Fri, 18 Jun 2021 12:29:15 +0000 Ceri Davies <ceri@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/secure/caroot/Makefile#fbd46fe9 pkgbase: fix caroot packaging and add post-install scriptThe original intention for caroot was to be packaged separately, perhaps sothat users can have a more/less conservative upgrade policy for thisseparated from the rest of base.secure/caroot/Makefile doesn't have anything interesting to package, but itssubdirectories might. Move the PACKAGE= to Makefile.inc so both blacklistedand trusted get packaged consistently into the correct one rather than thedefault -utilities. Also tag the directories for package=caroot, as theycould also be empty; blacklisted is empty by default, but trusted is not.Add a post-install script to do certctl rehash, along with a note should weeventually come up with a way to detect that files have been added orremoved that requires a rehash.-caroot gets a dependency on -utilities, as that's where we provide certctlat the moment. We can perhaps reconsider this and put certctl into thispackage in the future, but there are some bits within -utilities thatunconditionally invoke certctl so let's hold off for now.Reviewed by: manu (earlier version, before -utilities dep added)Differential Revision: https://reviews.freebsd.org/D23352 List of files: /freebsd-14.2/secure/caroot/Makefile Wed, 29 Jan 2020 18:47:08 +0000 Kyle Evans <kevans@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/secure/caroot/Makefile#0428b669 caroot: use bsd.obj.mk, not bsd.prog.mkThis directory stages certdata into .OBJDIR and processes it, but does notactually build a prog-shaped object; bsd.obj.mk provides the minimal supportthat we actually need, an .OBJDIR and descent into subdirs. This isadmittedly the nittiest of nits. List of files: /freebsd-14.2/secure/caroot/Makefile Fri, 24 Jan 2020 16:43:02 +0000 Kyle Evans <kevans@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/secure/caroot/Makefile#f27f39db [1/3] Initial infrastructure for SSL root bundle in baseThis setup will add the trusted certificates from the Mozilla NSS bundleto base.This commit includes:- CAROOT option to opt out of installation of certs- mtree amendments for final destinations- infrastructure to fetch/update certs, along with instructionsA follow-up commit will add a certctl(8) utility to give the user controlover trust specifics. Another follow-up commit will actually commit theinitial result of updatecerts.This work was done primarily by allanjude@, with minor contributions bymyself.No objection from: secteamRelnotes: yesDifferential Revision: https://reviews.freebsd.org/D16856 List of files: /freebsd-14.2/secure/caroot/Makefile Wed, 02 Oct 2019 01:05:29 +0000 Kyle Evans <kevans@FreeBSD.org>