From owner-freebsd-questions@freebsd.org Thu Jan 21 07:59:07 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 05063A8A884 for ; Thu, 21 Jan 2016 07:59:07 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3cd3:cd67:fafa:3d78]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 8CAE71377 for ; Thu, 21 Jan 2016 07:59:06 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from liminal.local (liminal.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3636:3bff:fed4:b0d6]) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.15.2/8.15.2) with ESMTPSA id u0L7wwQG030838 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Thu, 21 Jan 2016 07:58:58 GMT (envelope-from matthew@FreeBSD.org) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=FreeBSD.org X-Authentication-Warning: lucid-nonsense.infracaninophile.co.uk: Host liminal.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3636:3bff:fed4:b0d6] claimed to be liminal.local Subject: Re: Downloading 10.2-RELEASE-p10 source without prayer To: mfv@bway.net, Anton Sayetsky References: <569F4344.5020907@FreeBSD.org> <20160120115808.6133c482@gecko4> <569FC320.1080906@freebsd.org> <20160120181129.08eedbbc@gecko4> Cc: FreeBSD Questions From: Matthew Seaman X-Enigmail-Draft-Status: N1110 Message-ID: <56A08FC1.1080701@FreeBSD.org> Date: Thu, 21 Jan 2016 07:58:57 +0000 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: <20160120181129.08eedbbc@gecko4> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="qeL4vSLBfQGkExULmurbf9o0MjplQ86du" X-Virus-Scanned: clamav-milter 0.99 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Jan 2016 07:59:07 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --qeL4vSLBfQGkExULmurbf9o0MjplQ86du Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 20/01/2016 23:11, mfv wrote: > I do not know how ca_root_nss works but will save that for another day.= > Right now, it just works, without any intervention on my part. Kudos > to the developers. ca_root_nss is just a list of Certification Authority certificates, which OpenSSL will trust by default. It's derived from the list of certificates that is built into Firefox for the same purpose. 'Trust' in this sense means that you're trusting the CA to verify that the identity they've signed a certificate for is legitimately the property of the people requesting it. Various CAs have been expelled from that list over time, due to incompetence or because they were found to be the tools of a repressive regime, so it's important to keep ca-root_nss up to date. Cheers, Matthew --qeL4vSLBfQGkExULmurbf9o0MjplQ86du Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2 iQJ8BAEBCgBmBQJWoI/CXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ2NTNBNjhCOTEzQTRFNkNGM0UxRTEzMjZC QjIzQUY1MThFMUE0MDEzAAoJELsjr1GOGkATtLkP+wRNRoVdFdwYzyw4DmRkLot/ gPeyrfji+GhKYg2aVETWYTqBhnuzlB7SHWk24v983ofe01h2ENfHMouHS/rL47kV GvoYEBTLkK57xTzLrtTNgpJApMUNCrpp6n6OgyvqJdJavhPrOJ5aOINz2k7zZHIr 82ponUqFQGTli4Brlga3/CywLIb63rjrasP4Ew2pEXI1wmBt+mfMDGzJqd5JzM4I 4TpX0M4eLM5kwcchUS+hldNiCPCypGmKEY0vJ4Mh6qd4i9c7KOc2N6PS4DK5H7yb aGkusBUG5mzEnNFIhlA2lH23gbuKFwX7LBLxc6eq3OJwPAvjsfjWiY+N3/Ir+j4F GNVQXxb71IgJ7nnoihou+wPg7ExUrFzReNzxWQRwheg7lepcUrURdOt8sG8qvt4G 4GnNFS2C3uweW5o2GdsJnawkEPE3E6CtVO/gYdgKdVblD9V/DA8d/7YDoEjt3HFa rfcaWO/iJImZt/dQJtBGce+ssa41ZRwY8Qq9LpEs1bdw+u6res8Z8/57QWxwiGWu HJNQyOhDEOLjOJ+WdI9uRFLlBkndQFV8tgGt3O+MoUd6W+gmo7CJdU515uru5F5i icf6U7NClzFbeh1IfSC3/upQUnTfdmRXEPldJUqM0w+AgQn8MBrjlfuQmC74RJI/ T9bmplE8hhHdZEJ9qE+L =3iLR -----END PGP SIGNATURE----- --qeL4vSLBfQGkExULmurbf9o0MjplQ86du--