Re: git: e11bc4726338 - main - mail/opensmtpd: Use the correct OpenSSL idiom to load the trust store.

From: Pietro Cerutti <gahr_at_FreeBSD.org>
Date: Mon, 30 Oct 2023 07:38:21 UTC
On Oct 27 2023, 09:16 UTC, Dag-Erling Smørgrav <des@FreeBSD.org> wrote:
>The branch main has been updated by des:
>
>URL: https://cgit.FreeBSD.org/ports/commit/?id=e11bc472633868a658ecbb8176b2b3ede4ae6e0d
>
>commit e11bc472633868a658ecbb8176b2b3ede4ae6e0d
>Author:     Dag-Erling Smørgrav <des@FreeBSD.org>
>AuthorDate: 2023-10-27 09:16:29 +0000
>Commit:     Dag-Erling Smørgrav <des@FreeBSD.org>
>CommitDate: 2023-10-27 09:16:43 +0000
>
>    mail/opensmtpd: Use the correct OpenSSL idiom to load the trust store.
>
>    Fixes:          bde578cbfcf9
>    PR:             274322
>    MFH:            2023Q4
>    Approved by:    fluffy
>    Differential Revision:  https://reviews.freebsd.org/D42123

Hi, thanks for working on this. I thought this would be enough to run 
OpenSMTPD without ca_root_nss, but apparently that is not the case:

I upgraded to 7.3.0_2,1, remove ca_root_nss, restarted smtpd, and got

tls_config_set_ca_file: failed to open CA file '/etc/ssl/cert.pem': No 
such file or directory

-- 
Pietro Cerutti
I have pledged to give 10% of income to effective charities
and invite you to join me - https://givingwhatwecan.org