Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 07 Oct 2023 09:45:42 +0000
From:      bugzilla-noreply@freebsd.org
To:        ports-bugs@FreeBSD.org
Subject:   [Bug 274322] security/ca_root_nss and net/openntpd failed to load constraint
Message-ID:  <bug-274322-7788-n6bKH9LkNw@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-274322-7788@https.bugs.freebsd.org/bugzilla/>
References:  <bug-274322-7788@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D274322

--- Comment #3 from Christian Weisgerber <naddy@FreeBSD.org> ---
(In reply to Herbert J. Skuhra from comment #1)

Actually, CONSTRAINT_CA is not used anywhere.

net/openntpd does this:
  tls_load_file(tls_default_ca_cert_file(), ...)

tls_default_ca_cert_file() is from security/libretls, where it is a wrapper
around X509_get_default_cert_file() from OpenSSL. X509_get_default_cert_fil=
e()
returns X509_CERT_FILE, which is defined to "/etc/ssl/cert.pem".

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-274322-7788-n6bKH9LkNw>