From owner-freebsd-current@freebsd.org Sat Jul 8 16:27:45 2017 Return-Path: Delivered-To: freebsd-current@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CE1C4D9D5FA for ; Sat, 8 Jul 2017 16:27:45 +0000 (UTC) (envelope-from bsam@passap.ru) Received: from forward15p.cmail.yandex.net (forward15p.cmail.yandex.net [IPv6:2a02:6b8:0:1465::bd]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "forwards.mail.yandex.net", Issuer "Yandex CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 8AB0FBE for ; Sat, 8 Jul 2017 16:27:45 +0000 (UTC) (envelope-from bsam@passap.ru) Received: from smtp1m.mail.yandex.net (smtp1m.mail.yandex.net [IPv6:2a02:6b8:0:2519::121]) by forward15p.cmail.yandex.net (Yandex) with ESMTP id 21F122116E for ; Sat, 8 Jul 2017 19:27:34 +0300 (MSK) Received: from smtp1m.mail.yandex.net (localhost.localdomain [127.0.0.1]) by smtp1m.mail.yandex.net (Yandex) with ESMTP id 9EB3A63C0DE2 for ; Sat, 8 Jul 2017 19:27:33 +0300 (MSK) Received: by smtp1m.mail.yandex.net (nwsmtp/Yandex) with ESMTPSA id FZDtz9OtSR-RWI4TAQR; Sat, 08 Jul 2017 19:27:32 +0300 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client certificate not present) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=passap.ru; s=mail; t=1499531252; bh=A7roRvzUWdAoHa1NO8ucR+OXfqVk676n2GU+MmJ5fAQ=; h=To:From:Subject:Message-ID:Date; b=BlcAn5UJN2VAIxHVfKrk9Cl9BPPLwCVAtRX4pdgijHW2R0FhuAfYSBaEiUMNghVyC g9x1r6Y4C+6xaZLv2oUM57voU2WHUU6e/fIG83vN5NMDH5pu/6TMAsqBsAE+70E09t RkZj5QV3GqMM14Qbh93Ff58t9ss2rMO/nVD0gIzo= Authentication-Results: smtp1m.mail.yandex.net; dkim=pass header.i=@passap.ru X-Yandex-Suid-Status: 1 0 To: freebsd-current@FreeBSD.org From: Boris Samorodov Subject: pkg, repos and cached certificates Message-ID: <8c2e8a80-8f50-976b-913e-a9c0e617d675@passap.ru> Date: Sat, 8 Jul 2017 19:27:32 +0300 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Thunderbird/52.2.1 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 8bit X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 08 Jul 2017 16:27:45 -0000 Hi All, I use own pkg base repository. Today I tried to install packages on a new system. However, pkg refused to use my repo, since it's certificate is expired (several days). That's good. However, pkg happily update packages at other systems. So, seems that pkg does not perform checks / validates known certificates. Which seems not as good. Thanks, -- WBR, bsam