[Bug 284749] certctl: add support for generating cert.pem CAfiles

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=284749

--- Comment #12 from Michael Osipov <michaelo@FreeBSD.org> ---
> * NOOP is not obeyed
Point taken. Resolved.

> * Delete is, again, inconsistent
Resolved.

> * cat arg should be quoted
Agreed.

I do not understand why -B is necessary at all, I mean:
Aren't "if [ $WANTCERTDESTFILE -a -e "$CERTDESTFILE" ]" + "if [
$WANTCERTDESTFILE ]" later enough? Don't touch want we aren't unstructed to
touch or haven't created.

==

Regarding the dreaded SPLITDIR and multiple certs in one file:
I do not like that at all and I told des@ already that our tool should be as
close as possible to openssl-rehash for consistency and POLA. openssl-rehash
will skip everything after the first certificate in a file.
But this is a different dicussion.

-- 
You are receiving this mail because:
You are the assignee for the bug.