[Bug 274019] certctl(8): deprecate and remove usage of default extension of ".0"

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=274019

            Bug ID: 274019
           Summary: certctl(8): deprecate and remove usage of default
                    extension of ".0"
           Product: Base System
           Version: 12.4-STABLE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: bin
          Assignee: bugs@FreeBSD.org
          Reporter: michael.osipov@siemens.com

I have discussed this once with Kyle Evans (kevans@). *.n (e.g. *.0, *.1, etc.)
is OpenSSL private indexed output for certificates with the same subject hash.
They are not intended to be used a input.

See also https://www.openssl.org/docs/man1.1.1/man1/rehash.html:
rehash scans directories and calculates a hash value of each .pem, .crt, .cer,
or .crl file in the specified directory list ...

This extension should be (deprecated and) removed from the script.

-- 
You are receiving this mail because:
You are the assignee for the bug.