bsdinstall: do a `certctl rehash` upon installation of configuration

[kevans]

Summary

If certctl is installed on the system we're configuring, do a certctl rehash.

Note that certctl may not be present if the world we've installed was built either WITHOUT_OPENSSL or WITHOUT_CAROOT. In this scenario, we don't currently see if the host has a certctl as this may be an indication that the system *shouldn't* have certs installed into /etc/ssl.

[allanjude]

This looks good to me. Although I wonder if we might not want a solution that also covers people who don't run the installer. So that things like the VM Images that are generated by the release have the certs setup

[kevans]

In D24640#542360, @allanjude wrote:

This looks good to me. Although I wonder if we might not want a solution that also covers people who don't run the installer. So that things like the VM Images that are generated by the release have the certs setup

Based on discussion from IRC, I think we're leaning towards doing the rehash in installworld after the new certs are installed (since they aren't configuration files), which should put them onto the install media and in the base.txz generated by release(7). That should be sufficient to not need this, right?

[dteske]

LGTM