Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 28 Oct 2020 15:14:02 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 250682] certctl(8)'s list command just says "GlobalSign" for five of the GlobalSign certificates
Message-ID:  <bug-250682-227-vyDeQp0ZQp@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-250682-227@https.bugs.freebsd.org/bugzilla/>
References:  <bug-250682-227@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=250682

--- Comment #1 from Kyle Evans <kevans@freebsd.org> ---
I will need to think on this one... unfortunately I didn't actually look at the
output of `certctl list` all that much when I took it over, besides just
grabbing a random cert from the list to try blacklisting. I also note that some
others are suboptimal:

f081611a.0      subject=C = US, O = "The Go Daddy Group, Inc.", OU = Go Daddy
Class 2 Certification Authority

This one has no commonName, so we fail and just print the entire subject. The
output of `certctl -v list` gives a nice preview for what it would look like if
we were to do that for all, which is also not spectacular. OTOH, it feels wrong
to special-case GlobalSign.

-- 
You are receiving this mail because:
You are on the CC list for the bug.


Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-250682-227-vyDeQp0ZQp>