[Bug 284749] certctl: add support for generating cert.pem CAfiles

From: <bugzilla-noreply_at_freebsd.org>
Date: Thu, 13 Feb 2025 17:07:33 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=284749

--- Comment #5 from Mel Pilgrim <ports.maintainer@evilphi.com> ---
(In reply to Michael Osipov from comment #4)

* Why is there a BUNDLECMD?

Fair enough.  Rewriting for more strict consistency.

* we should have only one CERTDESTFILE

I'll make /etc/ssl/cert.pem the canonical file.  This is a departure from
ca_root_nss with its ETCSYMLINK behaviour, but if /etc/ssl/cert.pem is always
equivalent to /etc/ssl/certs, it shouldn't be a problem.

Patch to follow.

-- 
You are receiving this mail because:
You are the assignee for the bug.