bsdinstall: do a certctl rehash upon installation of configuration

If certctl is installed on the system we're configuring, do a certctl
rehash.

Note that certctl may not be present if the world we've installed was built
either WITHOUT_OPENSSL or WITHOUT_CAROOT. In this scenario, we don't
currently see if the host has a certctl as this may be an indication that
the system *shouldn't* have certs installed into /etc/ssl.

Reviewed by:	allanjude, dteske
MFC after:	3 days
Differential Revision:	https://reviews.freebsd.org/D24640
This commit is contained in:
Kyle Evans 2020-05-19 15:19:39 +00:00
parent 022f27959e
commit 1840a4fa01
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=361257

View File

@ -55,6 +55,9 @@ cp $BSDINSTALL_TMPBOOT/* $BSDINSTALL_CHROOT/boot
# Set up other things from installed config
chroot $BSDINSTALL_CHROOT /usr/bin/newaliases > /dev/null 2>&1
if [ -x $BSDINSTALL_CHROOT/usr/sbin/certctl ]; then
chroot $BSDINSTALL_CHROOT /usr/sbin/certctl rehash
fi
exit 0