[Bug 274322] security/ca_root_nss and net/openntpd failed to load constraint

From: <bugzilla-noreply_at_freebsd.org>
Date: Sat, 07 Oct 2023 09:45:42 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=274322

--- Comment #3 from Christian Weisgerber <naddy@FreeBSD.org> ---
(In reply to Herbert J. Skuhra from comment #1)

Actually, CONSTRAINT_CA is not used anywhere.

net/openntpd does this:
  tls_load_file(tls_default_ca_cert_file(), ...)

tls_default_ca_cert_file() is from security/libretls, where it is a wrapper
around X509_get_default_cert_file() from OpenSSL. X509_get_default_cert_file()
returns X509_CERT_FILE, which is defined to "/etc/ssl/cert.pem".

-- 
You are receiving this mail because:
You are the assignee for the bug.