certctl produces many duplicate warnings when security/ca_root_nss is installed
Needs RevisionPublic
Actions

Authored by michaelo on Feb 19 2025, 3:58 PM.

Tags

None

Referenced Files

	F164888739: D49062.diff
	Tue, Aug 4, 1:01 PM

	Unknown Object (File)
	Fri, Jul 24, 3:40 PM

	Unknown Object (File)
	Jul 1 2026, 11:55 AM

	Unknown Object (File)
	Jul 1 2026, 3:41 AM

	Unknown Object (File)
	Jul 1 2026, 3:33 AM

	Unknown Object (File)
	Jun 30 2026, 12:51 AM

	Unknown Object (File)
	Jun 28 2026, 4:40 PM

	Unknown Object (File)
	Jun 28 2026, 4:36 PM

View All 48 Files

Subscribers

imp

Details

Reviewers

jrm
otis
kevans
des

Summary

security/ca_root_nss duplicates CA certificates which come in the system at
/usr/share/certs/trusted/ and are sourced from Mozilla NSS anyway. Skip the
file altogether.

PR: 284901

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Skipped

Unit

Tests Skipped

Build Status

Buildable 62521
Build 59405: arc lint + arc unit

Event Timeline

michaelo created this revision.Feb 19 2025, 3:58 PM

Herald added a subscriber: imp. · View Herald TranscriptFeb 19 2025, 3:58 PM

michaelo requested review of this revision.Feb 19 2025, 3:58 PM

Harbormaster completed remote builds in B62521: Diff 151197.Feb 19 2025, 3:58 PM

Absolutely not.

This revision now requires changes to proceed.Feb 28 2025, 3:59 PM

In D49062#1121573, @des wrote:

Absolutely not.

Explain.

Revision Contents
Changeset List

Path

Size

usr.sbin/

certctl/

certctl.sh

2 lines

Diff 151197

View Options

usr.sbin/certctl/certctl.sh

certctl produces many duplicate warnings when security/ca_root_nss is installedNeeds RevisionPublicActions