diff options
author | Kyle Evans <kevans@FreeBSD.org> | 2020-09-02 12:57:34 +0000 |
---|---|---|
committer | Kyle Evans <kevans@FreeBSD.org> | 2020-09-02 12:57:34 +0000 |
commit | 8e0dc55e68e2222f703e2d0149d74278eb8ce532 (patch) | |
tree | c9e30a79fc0d94ebdd088c08aa26e7cdc753a518 /UPDATING | |
parent | d14897f960ed0bc4d65e67d7a40f10fd89651d16 (diff) | |
download | src-test-8e0dc55e68e2222f703e2d0149d74278eb8ce532.tar.gz src-test-8e0dc55e68e2222f703e2d0149d74278eb8ce532.zip |
caroot: properly remove old distrusted roots
The proper procedure was not followed in r364943; all of these that were
deleted should have instead been moved over to the blacklist so that certctl
can DTRT.
Users must still `certctl rehash` after this, but this should generally be
done by one of mergemaster/etcupdate/freebsd-update/pkgbase already; note
that freebsd-update doesn't come into play for this particular update, as
these have not yet made it into a release.
Future work (after svn -> git) will likely change the script that updatecert
invokes to facilitate the process, rather than trusting that kevans or
whomever updates in the future will remember.
Reported by: Helge Oldach <freebsd oldach net>
MFC after: 3 days
Notes
Notes:
svn path=/head/; revision=365248
Diffstat (limited to 'UPDATING')
0 files changed, 0 insertions, 0 deletions