Differential D42087

certctl: Split certificate bundles before processing.
ClosedPublic
Actions

Authored by des on Oct 5 2023, 11:22 AM.

Details

Reviewers

allanjude

Group Reviewers

security

Commits

rGa401c8cb26b2: certctl: Split certificate bundles before processing.

Summary

This allows 'certctl rehash' to do the right thing when ca_root_nss is
installed, instead of linking the entire bundle to the hash of the
first certificate it contains.

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Skipped

Unit

Tests Skipped

Build Status

Buildable 53849
Build 50740: arc lint + arc unit

Event Timeline

des created this revision.Oct 5 2023, 11:22 AM

Herald added a subscriber: imp. · View Herald TranscriptOct 5 2023, 11:22 AM

des requested review of this revision.Oct 5 2023, 11:22 AM

Harbormaster completed remote builds in B53849: Diff 128284.Oct 5 2023, 11:22 AM

des added a parent revision: D42086: certctl: Clean up..Oct 5 2023, 11:22 AM

(what I really want to do is rewrite certctl in C, but this will do for now)

reviewed-by: allanjude

This revision is now accepted and ready to land.Oct 5 2023, 12:50 PM

rebase

This revision now requires review to proceed.Oct 5 2023, 1:57 PM

Harbormaster completed remote builds in B53852: Diff 128289.Oct 5 2023, 1:57 PM

allanjude accepted this revision.Oct 5 2023, 2:00 PM

This revision is now accepted and ready to land.Oct 5 2023, 2:00 PM

Closed by commit rGa401c8cb26b2: certctl: Split certificate bundles before processing. (authored by des). · Explain WhyOct 5 2023, 3:13 PM

This revision was automatically updated to reflect the committed changes.

des added a commit: rGa401c8cb26b2: certctl: Split certificate bundles before processing..

Revision Contents
Changeset List

Path

Size

usr.sbin/

certctl/

certctl.sh

99 lines

Diff 128284

View Options

usr.sbin/certctl/certctl.sh

certctl: Split certificate bundles before processing.ClosedPublicActions