Re: net/openntpd with constraint stops working after recent security/ca_root_nss upgrade

From: Michael Grimm <trashcan_at_ellael.org>
Date: Sat, 07 Oct 2023 15:22:19 UTC
Herbert J. Skuhra <herbert@gojira.at> wrote:
> 
> 
> On Sat, Oct 07, 2023 at 04:59:31PM +0200, Michael Grimm wrote:
>> Hi
>> 
>> I am running net/openntpd with a constraint:
>> 
>> …
>> constraint from "9.9.9.9"
>> 
>> After the recent upgrade of security/ca_root_nss to 3.93_1 I noticed a lot of warning messages (see end of mail).
>> 
>> Now, net/openntpd 6.8p1_7,2 stopped working:
>> 
>> Oct  7 09:39:53 <daemon.err> kaan-bock ntpd[932]: constraints configured but none available
>> Oct  7 09:39:53 <daemon.crit> kaan-bock ntpd[934]: constraint: failed to load constraint ca
>> 
>> I had to remove that constraint from ntpd.conf in order to get ntpd working again.
>> 
>> Is this a bug or feature with recent security/ca_root_nss?
> 
> https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=274322

Ah! 

Thanks, Michael