From nobody Wed Oct 18 14:18:11 2023
X-Original-To: current@mlmmj.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
	by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4S9Xxy38Q4z4x55F
	for <current@mlmmj.nyi.freebsd.org>; Wed, 18 Oct 2023 14:18:14 +0000 (UTC)
	(envelope-from des@freebsd.org)
Received: from smtp.freebsd.org (smtp.freebsd.org [IPv6:2610:1c1:1:606c::24b:4])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
	 client-signature RSA-PSS (4096 bits) client-digest SHA256)
	(Client CN "smtp.freebsd.org", Issuer "R3" (verified OK))
	by mx1.freebsd.org (Postfix) with ESMTPS id 4S9Xxy2LYMz3J71;
	Wed, 18 Oct 2023 14:18:14 +0000 (UTC)
	(envelope-from des@freebsd.org)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim;
	t=1697638694;
	h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
	 to:to:cc:cc:mime-version:mime-version:content-type:content-type:
	 content-transfer-encoding:content-transfer-encoding:
	 in-reply-to:in-reply-to:references:references;
	bh=La6Ms+KhMcgTM/Xvz/J+9Vbt30ry1UePy+xauM2tUKg=;
	b=u0PVgnIq1/wPB4XPffUH3rxsO+5aP0Tiwcfi/39ChO5FT412E1OVYNJu+ZH+jKjcrqXVJ2
	MVFJxe6gOoU8mNK2eg2YQM9k1ZxHi+c/G8HupryJUDo4XGQOX3ujZPgbNnzKRUj8dDCtN5
	Rrzc0Yff5zXG1kNOe3dhcvKkc5q5tGcjQ0y1R5VZrQvktMVV9yp9ye7FFsJpKRnwIMhBRa
	bLxH+iHLpbp4PZtWiXn/HNQmQMqyqvJdwm2hEKY1Qrq1LFkVdfnTX4hDd6vpY4a3wJX4vm
	brZE8MTMNNbrAP+KFoINHNyRzpoXFc2Z4UC5llLFhI5535toVkwCJHlHQxtYqw==
ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1697638694; a=rsa-sha256; cv=none;
	b=IKTsF47sHelJZVyz63ZSZ2UuYSxHjbPkR1dNzUGBTfuOd5mEAFzxuthbIwLmWorE7iuoL3
	0tAeSvHEvq919Aldgrn8csA5PeEBXRJ8gzlaY8McTVWEpddOFShFOi1DROrUb0KRMcv/uc
	tKguMolTjvVvcQGpB4h3rCqHZfWoyiXa/+qAk4QPEWvY589uBmsLoIn2OCCMVBtQaHXLfb
	OhRhcIjEesvNdRoXmKZUVBKK5T3vtqUeJc9vEE6bMCKyHpsJDJgwB1xDVWPIbvgtf4cq16
	rdocsksmiDxUuXxDQwmmgfLYjs8cptl9JTp1M9e1yYw1f03RpGwLV7rWoevhAw==
ARC-Authentication-Results: i=1;
	mx1.freebsd.org;
	none
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org;
	s=dkim; t=1697638694;
	h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
	 to:to:cc:cc:mime-version:mime-version:content-type:content-type:
	 content-transfer-encoding:content-transfer-encoding:
	 in-reply-to:in-reply-to:references:references;
	bh=La6Ms+KhMcgTM/Xvz/J+9Vbt30ry1UePy+xauM2tUKg=;
	b=uwJDEbh743cjDPaekJcpKquPX1phInKPvv7IAB9OUpMlCHqylrIMgC0vONLoNZz5oi+zuq
	1doub4VNcssn1ATLpI4KtztO9pMmu4XpA/lnYKS15fWOtsqiM2dZaj3nGXT6yQcUkgjF3f
	lDACC4HjpVeULgAPQvKc5YuLYC+sMVw7nin4WJqYDei5ieHj+jvFdLB+Eka7VQjfLc+5ft
	8J5tRRPAkfmw1d8CaY9eWCe/jabjW4ga+6quZfq91gXvjGdjXNanyQ9Z+dV7dmxGhVBSDh
	KahhUbZ6kcju/cUxteik/KU5AcldTSWZ0QRhhDLZdkyzYGIZ5wkAH/Nrt1gVNg==
Received: from ltc.des.no (48.115.65.81.rev.sfr.net [81.65.115.48])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)
	(Client did not present a certificate)
	(Authenticated sender: des)
	by smtp.freebsd.org (Postfix) with ESMTPSA id 4S9Xxy0SBPz8cc;
	Wed, 18 Oct 2023 14:18:14 +0000 (UTC)
	(envelope-from des@freebsd.org)
Received: by ltc.des.no (Postfix, from userid 1001)
	id 838997624C; Wed, 18 Oct 2023 16:18:11 +0200 (CEST)
From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= <des@FreeBSD.org>
To: Alexander Leidinger <Alexander@Leidinger.net>
Cc: Current <current@freebsd.org>
Subject: Re: issue: poudriere jail update fails after recent changes around
 certctl
In-Reply-To: <24e275f3b561c096577c00c001f3ec57@Leidinger.net> (Alexander
	Leidinger's message of "Sat, 14 Oct 2023 16:26:16 +0200")
References: <7b44912e0d3ff033ab27923aeeae5caf@Leidinger.net>
	<86cyxi34wc.fsf@ltc.des.no>
	<24e275f3b561c096577c00c001f3ec57@Leidinger.net>
User-Agent: Gnus/5.13 (Gnus v5.13)
Date: Wed, 18 Oct 2023 16:18:11 +0200
Message-ID: <868r802evw.fsf@ltc.des.no>
List-Id: Discussions about the use of FreeBSD-current <freebsd-current.freebsd.org>
List-Archive: https://lists.freebsd.org/archives/freebsd-current
List-Help: <mailto:freebsd-current+help@freebsd.org>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Subscribe: <mailto:freebsd-current+subscribe@freebsd.org>
List-Unsubscribe: <mailto:freebsd-current+unsubscribe@freebsd.org>
Sender: owner-freebsd-current@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Alexander Leidinger <Alexander@Leidinger.net> writes:
> If FreeBSD provides some certs as trusted (as part of
> e.g. installworld), and I have some of them listed in untrusted, I
> would not expect an error case, but a failsafe action of not trusting
> them and not complaining... am I doing something wrong?

No, this is definitely something we want to support.

DES
--=20
Dag-Erling Sm=C3=B8rgrav - des@FreeBSD.org