Franco Fichtner
1abc6bb686
/usr/local/openssl/cert.pem is the default location for security/openssl so it should be handled just like /etc/ssl/cert.pem base OpenSSL. To avoid having samples and copies with differing contents point both files to the actual /usr/local/etc/ssl/cert.pem created by the sample. If users have set their own content that is likely intended and should be enforced across all three files. MFH: 2025Q1 PR: 283161 Differential Revision: https://reviews.freebsd.org/D47908
8 lines
300 B
Plaintext
8 lines
300 B
Plaintext
%%CERTDIR%%/ca-root-nss.crt
|
|
@sample etc/ssl/cert.pem.sample
|
|
%%ETCSYMLINK%%openssl/cert.pem
|
|
%%ETCSYMLINK%%/etc/ssl/cert.pem
|
|
@postexec certctl rehash
|
|
@postunexec certctl rehash
|
|
@postexec [ ! -e %%LOCALBASE%%/bin/cert-sync ] || %%LOCALBASE%%/bin/cert-sync --quiet %%PREFIX%%/share/certs/ca-root-nss.crt
|