From owner-freebsd-stable@freebsd.org Sat Jun 18 09:15:36 2016 Return-Path: Delivered-To: freebsd-stable@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id AAA4DA778FE for ; Sat, 18 Jun 2016 09:15:36 +0000 (UTC) (envelope-from kpaasial@gmail.com) Received: from mail-oi0-x235.google.com (mail-oi0-x235.google.com [IPv6:2607:f8b0:4003:c06::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 6E5E42E3C for ; Sat, 18 Jun 2016 09:15:36 +0000 (UTC) (envelope-from kpaasial@gmail.com) Received: by mail-oi0-x235.google.com with SMTP id v7so38067480oig.2 for ; Sat, 18 Jun 2016 02:15:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=OIp0xCu2QinrCYq5MmD/ncL3KVbxlnFcGY5w2e1CYmw=; b=jAzsSLxI/1y4OFak4Ed3U3E3w1PkRQNIy83ZTfXc4gMXUlum1P0WCXpqCy4fbJ0rvE twOt/R0klYfDtDRJcnwQCGfyfk8WQuo51ydE7/Q0qUhnw/+eoXhQJIHQADZfaZDtrLQV oyOvnV+Y/VAYIhj4iWGDlFvaHe3gkZ7yEaaqwOPdonDCr+u2D828V6klT8ZeB9CsuCZY fi0gSXQ8q6YgLztgdzii6oIduTCZr30xbWaomBsTYD922gFuuc6jHkvt+cS1ORtGFVZw pNGgv+xDQrGdP9QmDD0hoNxHFx+1ZOU6hTbhoUZv6DRovFHq/KqMvuTAR8S3BMqy0Sey estw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=OIp0xCu2QinrCYq5MmD/ncL3KVbxlnFcGY5w2e1CYmw=; b=adAuYveFyr0c6Kr2hxQTyv90nkDf/6oGKn8kwSplA2R4s8phd8We03bmA3Ja3UFWjk 0HdeD3pX0Tiugp8sBwmmv9fFJWxL6QOroTmB/hbWx/LXzJ//ctOsPH44AvfvXqN807Dd gLYIMaW7HWawi6RfMr2Y44B+oK9F2iEcjM64sZ+PUJUASba7KlNDi0fNWpuFn/8Vjf7l a9U+kaKZFGfq+E756xcWTLEqplsPuS7Sr/QuZNj/J4fBxrOPtgJD0eTr+DpoxU3AKY3M aDT9Q7M7Nt6A+tFz0ZCtjqCuO8YhXWU/Nv2zD5M/0GW+yyKGTtkY9sa3q6Shyf0rzCp5 2WXQ== X-Gm-Message-State: ALyK8tJ2YsktE8u2dhJJTSQ/dPYa6EyvcLyJAPA+54CuOpxWAoKMM/rZ0J9+D+lxvs28ZfCg/w5Ejr+lSNKtRQ== X-Received: by 10.202.4.206 with SMTP id 197mr3809797oie.141.1466241335637; Sat, 18 Jun 2016 02:15:35 -0700 (PDT) MIME-Version: 1.0 Received: by 10.157.16.76 with HTTP; Sat, 18 Jun 2016 02:15:35 -0700 (PDT) In-Reply-To: <69edafc5-a368-77f6-aee7-81ab3c845e18@precisionforesight.com> References: <69edafc5-a368-77f6-aee7-81ab3c845e18@precisionforesight.com> From: Kimmo Paasiala Date: Sat, 18 Jun 2016 12:15:35 +0300 Message-ID: Subject: Re: new certificate for svn.freebsd.org? To: Ben Steel Cc: "freebsd-stable@freebsd.org" Content-Type: text/plain; charset=UTF-8 X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 18 Jun 2016 09:15:36 -0000 On Sat, Jun 18, 2016 at 7:40 AM, Ben Steel via freebsd-stable wrote: > It's not just you, Wolfgang. See bug 210332 at bugs.freebsd.org. > The new certificate is in place on the 4 mirrors that I found (US East, US > West, UK, Russia) but didn't verify cleanly and wasn't in the documentation. > > For me, the fix was in Dimitry's mail, a step I probably missed when > installing security/ca_root_nss: > > sudo ln -s /usr/local/share/certs/ca-root-nss.crt /etc/ssl/cert.pem > > Hope this helps, > > Ben > You might have saved options for security/ca_root_nss which tell the port not to install the symlink. The ETCSYMLINK option has been on by default for quite a long time. Delete the saved options or change them to have the port control the symlink. -Kimmo