[Bug 284749] certctl: add support for generating cert.pem CAfiles

From: <bugzilla-noreply_at_freebsd.org>
Date: Thu, 13 Feb 2025 17:45:19 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=284749

--- Comment #7 from Michael Osipov <michaelo@FreeBSD.org> ---
(In reply to Mel Pilgrim from comment #6)

Went through, few more issues:

* NOOP is not obeyed
* Delete is, again, inconsistent because look at start of cmd_rehash(), if
checks for existence then it deletes it or creates if not present. You should
do this impliclitly again IF use requested to create a bundle.
* > find "$CERTDESTDIR" \( -type l -or -type f \) -exec cat \{\} + >>"$TMPFILE"
is wrong because only hashed links constitute the trust store, not notes; cat
arg should be quoted. Look at start of cmd_rehash().

-- 
You are receiving this mail because:
You are the assignee for the bug.