diff options
| author | Kyle Evans <kevans@FreeBSD.org> | 2020-01-28 03:02:18 +0000 |
|---|---|---|
| committer | Kyle Evans <kevans@FreeBSD.org> | 2020-01-28 03:02:18 +0000 |
| commit | bb302e707a4c5e2dddfa7be9a77b4ee979be7ffb (patch) | |
| tree | 1f7a9ec7ee373c2d6bad4aec735a297fea30dad4 /secure/caroot | |
| parent | c59b9a4f8d2c7a34782a3885f1c76fb1decea174 (diff) | |
| download | src-bb302e707a4c5e2dddfa7be9a77b4ee979be7ffb.tar.gz src-bb302e707a4c5e2dddfa7be9a77b4ee979be7ffb.zip | |
caroot: blacklisted: automatically pick up *.pem in the tree
This kind of automagica got picked up in trusted/ prior to the initial
commit, but never got applied over in blacklisted. Ideally no one will be
using blacklisted/ to store arbitrary certs that they don't intend to
blacklist, so we should just install anything that's in here rather than
force consumer to first copy cert into place and then modify the file
listing in the Makefile.
Wise man once say: "it is better to restrict too much, than not enough.
sometimes."
Notes
Notes:
svn path=/head/; revision=357193
Diffstat (limited to 'secure/caroot')
| -rw-r--r-- | secure/caroot/blacklisted/Makefile | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/secure/caroot/blacklisted/Makefile b/secure/caroot/blacklisted/Makefile index 7691993416b3..ab93d2779380 100644 --- a/secure/caroot/blacklisted/Makefile +++ b/secure/caroot/blacklisted/Makefile @@ -2,6 +2,8 @@ BINDIR= /usr/share/certs/blacklisted -FILES= +BLACKLISTED_CERTS!= ls ${.CURDIR}/*.pem 2> /dev/null || true + +FILES+= ${BLACKLISTED_CERTS} .include <bsd.prog.mk> |