diff options
| author | geoffroy desvernay <dgeo@centrale-med.fr> | 2026-08-26 17:58:08 +0000 |
|---|---|---|
| committer | Roman Bogorodskiy <novel@FreeBSD.org> | 2026-09-20 12:16:03 +0000 |
| commit | 94d525cb7bc4bf294fcaf503ab09206471b4e7a0 (patch) | |
| tree | d95d75344c5c116e3ab344bdcf74a56f9347da22 /security/py-python-jose | |
| parent | ccf812cd75762284a9b2447034f9c3c66a1bed9d (diff) | |
Currently p11-kit already uses base-system certificates from /usr/share/certs
(since 8672992ef7f072f87304e953231de77179143f1d 2023-02-01 11:05:18 +0000).
Base system's certctl tool allows administrator to add locally trusted anchors
in /usr/local/share/certs, but p11-kit's current behaviour will ignore them.
Use system's consolidated certificates in /etc/ssl/certs and
/etc/ssl/untrusted instead of /usr/share/certs/trusted and
/usr/share/certs/untrusted.
These directories (/etc/ssl/ ones) are managed by system's certctl tool,
and reflects the same content plus admin's managed trusted/untrusted certs.
This change should not break any current behaviour on FreeBSD > 12.2.
This is also coherent with debian's behaviour (on debian, p11_trust_paths
is set to /etc/ssl/certs/ca-certificates.crt, updated by system's
update-ca-certificate which allows custom anchors listed in
/etc/ca-certificates.conf).
PR: 297759
Approved by: novel (maintainer)
Differential Revision: https://reviews.freebsd.org/D59200
Diffstat (limited to 'security/py-python-jose')
0 files changed, 0 insertions, 0 deletions