freebsd-skq/secure
Kyle Evans c3510c941c caroot: update CA bundle processor
Our current processor was identified as trusting cert not explicitly
marked for SERVER_AUTH, as well as certs that were tagged with
DISTRUST_AFTER.

Update the script to handle both scenarios. This patch was originally
authored by mandree@ for ports, and it was subsequently ported to base
caroot.

MFC after:	3 days
2021-04-13 16:59:24 -05:00
..
caroot caroot: update CA bundle processor 2021-04-13 16:59:24 -05:00
lib OpenSSL: Regen manual pages for 1.1.1k 2021-03-25 12:17:52 -04:00
libexec Upgrade to OpenSSH 7.8p1. 2018-09-10 16:20:12 +00:00
tests
usr.bin OpenSSL: Regen manual pages for 1.1.1k 2021-03-25 12:17:52 -04:00
usr.sbin Update Makefile.depend files 2019-12-11 17:37:53 +00:00
Makefile [1/3] Initial infrastructure for SSL root bundle in base 2019-10-02 01:05:29 +00:00
Makefile.inc crypto: normalize paths using SRCTOP-relative paths or :H when possible 2017-03-04 11:35:30 +00:00