FreeBSD-EN-21:07.caroot.asc question

[Greg Balfour]

On Wed, Feb 24, 2021 at 7:21 PM Herbert J. Skuhra <herbert at gojira.at> wrote:
>
> On Wed, Feb 24, 2021 at 06:42:17PM -0600, Greg Balfour wrote:
> > After installing the security and errata patches that came out today
> > on my 12.2-RELEASE system, I see the following during the "make
> > installworld" step.  Is this the expected output after removing
> > certificates from the root certificate bundle or did something go
> > wrong?
...
> > unable to load certificate
> > 34371108864:error:0909006C:PEM routines:get_name:no start
> > line:/usr/src/crypto/openssl/crypto/pem/pem_lib.c:745:Expecting:
> > TRUSTED CERTIFICATE
> > Error: /usr/share/certs/trusted/GeoTrust_Global_CA.pem
...
> Patch does not remove empty files unless "-E" switch is used.
>
> The pem files above are propably empty and you have to remove them
> manually (both in /usr/src and /usr/share).
>
> Why are you not using svn/git to update /usr/src?
>
> --
> Herbert

Applying the patch with the -E option does fix the problem.  Thanks.