freebsd-skq/secure
kevans e6c96ba15c caroot: properly remove old distrusted roots
The proper procedure was not followed in r364943; all of these that were
deleted should have instead been moved over to the blacklist so that certctl
can DTRT.

Users must still `certctl rehash` after this, but this should generally be
done by one of mergemaster/etcupdate/freebsd-update/pkgbase already; note
that freebsd-update doesn't come into play for this particular update, as
these have not yet made it into a release.

Future work (after svn -> git) will likely change the script that updatecert
invokes to facilitate the process, rather than trusting that kevans or
whomever updates in the future will remember.

Reported by:	Helge Oldach <freebsd oldach net>
MFC after:	3 days
2020-09-02 12:57:34 +00:00
..
caroot caroot: properly remove old distrusted roots 2020-09-02 12:57:34 +00:00
lib Regen X86 assembly files after r364822. 2020-08-26 16:56:44 +00:00
libexec Upgrade to OpenSSH 7.8p1. 2018-09-10 16:20:12 +00:00
tests
usr.bin Merge OpenSSL 1.1.1g. 2020-04-21 19:38:32 +00:00
usr.sbin Update Makefile.depend files 2019-12-11 17:37:53 +00:00
Makefile [1/3] Initial infrastructure for SSL root bundle in base 2019-10-02 01:05:29 +00:00
Makefile.inc crypto: normalize paths using SRCTOP-relative paths or :H when possible 2017-03-04 11:35:30 +00:00