3 Commits

Author	SHA1	Message	Date
Kyle Evans	3016c5c2bf	caroot: reroll the remaining certs ... This adds a specific note that these are explicitly trusted for server auth. MFC after: 3 days	2021-04-13 16:59:34 -05:00
Kyle Evans	f20c0e3319	caroot: drop $FreeBSD$ expansion from root bundle ... This debatably could have waited until the next update would have taken place, but it's easier to see what changes if we get it out of the way now. MFC after: 3 days	2020-12-27 21:47:41 -06:00
Kyle Evans	b25bf676f0	caroot: commit initial bundle ... Interested users can blacklist any/all of these with certctl(8), examples: - mv /usr/share/certs/trusted/... /usr/share/certs/blacklisted/...; \ certctl rehash - certctl blacklist /usr/share/certs/trusted/*; \ certctl rehash Certs can be easily examined after installation with `certctl list`, and certctl blacklist will accept the hashed filename as output by list or as seen in /etc/ssl/certs No objection from: secteam Relnotes: Definite maybe	2019-10-04 02:34:20 +00:00