git: def6ee77dbc2 - main - certctl.8: document LOCALBASE

The branch main has been updated by brooks:

URL: https://cgit.FreeBSD.org/src/commit/?id=def6ee77dbc2ab7d4314002f01367e84e69b0a23

commit def6ee77dbc2ab7d4314002f01367e84e69b0a23
Author:     Brooks Davis <brooks@FreeBSD.org>
AuthorDate: 2023-10-16 22:35:34 +0000
Commit:     Brooks Davis <brooks@FreeBSD.org>
CommitDate: 2023-10-20 19:52:10 +0000

    certctl.8: document LOCALBASE
    
    Document the LOCALBASE variable and that it's set to user.localbase by
    default.  Update path defaults that depend on it.
    
    Reviewed by:    bcr
    Differential Revision:  https://reviews.freebsd.org/D40529
---
 usr.sbin/certctl/certctl.8 | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/usr.sbin/certctl/certctl.8 b/usr.sbin/certctl/certctl.8
index 4ce61916d79a..286072c1b4d6 100644
--- a/usr.sbin/certctl/certctl.8
+++ b/usr.sbin/certctl/certctl.8
@@ -24,7 +24,7 @@
 .\" IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
 .\" POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd July 13, 2022
+.Dd October 10, 2023
 .Dt CERTCTL 8
 .Os
 .Sh NAME
@@ -98,18 +98,22 @@ Remove the specified file from the untrusted list.
 Alternate destination directory to operate on.
 .It Ev DISTBASE
 Additional path component to include when operating on certificate directories.
+.It Ev LOCALBASE
+Location for local programs.
+Defaults to the value of the user.localbase sysctl which is usually
+.Pa /usr/local .
 .It Ev TRUSTPATH
 List of paths to search for trusted certificates.
 Default:
 .Pa <DESTDIR><DISTBASE>/usr/share/certs/trusted
 .Pa <DESTDIR><DISTBASE>/usr/local/share/certs
-.Pa <DESTDIR><DISTBASE>/usr/local/etc/ssl/certs
+.Pa <DESTDIR><DISTBASE><LOCALBASE>/etc/ssl/certs
 .It Ev UNTRUSTPATH
 List of paths to search for untrusted certificates.
 Default:
 .Pa <DESTDIR><DISTBASE>/usr/share/certs/untrusted
-.Pa <DESTDIR><DISTBASE>/usr/local/etc/ssl/untrusted
-.Pa <DESTDIR><DISTBASE>/usr/local/etc/ssl/blacklisted
+.Pa <DESTDIR><DISTBASE><LOCALBASE>/etc/ssl/untrusted
+.Pa <DESTDIR><DISTBASE><LOCALBASE>/etc/ssl/blacklisted
 .It Ev CERTDESTDIR
 Destination directory for symbolic links to trusted certificates.
 Default: