[Bug 274549] local-unbound not resolving unless security/ca_root_nss installed

In reply to: bugzilla-noreply_a_freebsd.org: "[Bug 274549] local-unbound not resolving unless security/ca_root_nss installed"
Go to: [ bottom of page ] [ top of archives ] [ this month ]

From: <bugzilla-noreply_at_freebsd.org>
Date: Fri, 20 Oct 2023 19:51:42 UTC

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=274549

Dag-Erling Smørgrav <des@FreeBSD.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|New                         |Open

--- Comment #3 from Dag-Erling Smørgrav <des@FreeBSD.org> ---
Since unbound chroots, it is absolutely dependent on a bundle which it can
preload, while our system trust store is a hashed directory which is accessed
on demand and is not available after chroot.  I am currently working on
reimplementing certctl in C, and as part of that work I will make it generate a
bundle in addition to the hashed directory, rendering ca_root_nss's ETCSYMLINK
option obsolete.

-- 
You are receiving this mail because:
You are the assignee for the bug.