Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 22 Sep 2023 08:11:14 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 274019] certctl(8): deprecate and remove usage of default extension of ".0"
Message-ID:  <bug-274019-227@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D274019

            Bug ID: 274019
           Summary: certctl(8): deprecate and remove usage of default
                    extension of ".0"
           Product: Base System
           Version: 12.4-STABLE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: bin
          Assignee: bugs@FreeBSD.org
          Reporter: michael.osipov@siemens.com

I have discussed this once with Kyle Evans (kevans@). *.n (e.g. *.0, *.1, e=
tc.)
is OpenSSL private indexed output for certificates with the same subject ha=
sh.
They are not intended to be used a input.

See also https://www.openssl.org/docs/man1.1.1/man1/rehash.html:
rehash scans directories and calculates a hash value of each .pem, .crt, .c=
er,
or .crl file in the specified directory list ...

This extension should be (deprecated and) removed from the script.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-274019-227>