[Bug 296517] secure/caroot: ePKI_Root_Certification_Authority.pem should be untrusted rather than trusted

From: <bugzilla-noreply_at_freebsd.org>
Date: Sat, 04 Jul 2026 15:45:00 UTC 
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296517

            Bug ID: 296517
           Summary: secure/caroot: ePKI_Root_Certification_Authority.pem
                    should be untrusted rather than trusted
           Product: Base System
           Version: CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: misc
          Assignee: bugs@FreeBSD.org
          Reporter: freebsd@oldach.net

When manually updating certificates from the Mozilla NSS_3_123_1_RTM repo (in
${SRCTOP}/secure/caroot), I noticed that ePKI_Root_Certification_Authority.pem
lands in the untrusted category. However, our git tree has it in the trusted
subdirectory. Seems weird - is that intentional?

-- 
You are receiving this mail because:
You are the assignee for the bug.