Re: issue: poudriere jail update fails after recent changes around certctl

On 13/10/23 17:42, Dag-Erling Smørgrav wrote:
> Alexander Leidinger <Alexander@Leidinger.net> writes:
>> some change around certctl (world from 2023-10-09) has broken the
>> poudriere jail update command. The complete install finishes, certctl
>> is run, and then there is an exit code 1. This is because I have some
>> certs listed as untrusted, and this seems to give a retval of 1 inside
>> certctl.
> 
> This only happens if a certificate is listed as both trusted and
> untrusted, and I'm pretty sure the previous version would return 1 in
> that case as well.  Can you check?
> 

ON an unrelated note, I noticed the new certctl in head requires .pem 
(and any other extension, if I remember correctly) files to contain a 
"Certificate:" line.

While I have no objection to the requirement, it is not documented in 
the man page, or anywhere else, I did have to look at the script source 
to discover this.

Maybe a little note about this requirement in the man page should be added.

-- 
Guido Falsi <mad@madpilot.net>