[Bug 250682] certctl(8)'s list command just says "GlobalSign" for five of the GlobalSign certificates

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Wed Oct 28 15:14:04 UTC 2020


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=250682

--- Comment #1 from Kyle Evans <kevans at freebsd.org> ---
I will need to think on this one... unfortunately I didn't actually look at the
output of `certctl list` all that much when I took it over, besides just
grabbing a random cert from the list to try blacklisting. I also note that some
others are suboptimal:

f081611a.0      subject=C = US, O = "The Go Daddy Group, Inc.", OU = Go Daddy
Class 2 Certification Authority

This one has no commonName, so we fail and just print the entire subject. The
output of `certctl -v list` gives a nice preview for what it would look like if
we were to do that for all, which is also not spectacular. OTOH, it feels wrong
to special-case GlobalSign.

-- 
You are receiving this mail because:
You are on the CC list for the bug.


More information about the freebsd-bugs mailing list