On Wed, Aug 05, 2015 at 03:07:04PM -0700, Kevin Oberman wrote: > ... > > Which version of ca_root_nss do you have? Mine is 3.19.1_1, and it > > definitely has the above root CA in /etc/ssl/cert.pem. > > > > -Dimitry > > > > Thanks for the quick response! I'm still confused, though. > > I have 3.19.2, so it is just a bit newer. But I don't have > /etc/ssl/cert.pem. The root certs are installed in > /usr/local/share/certs/ca-root-nss.crt. Is something required to get them > into /etc/ssl? I confirm that the fingerprints match.
Looks as if the relevant option (on the port) is:
ETCSYMLINK=off: Add symlink to /etc/ssl/cert.pem
Apparently I had that on at one point (perhaps it was a default), as:
g1-245(10.2-P)[7] ls -lT /etc/ssl/cert.pem
lrwxr-xr-x 1 root wheel 38 Feb 12 13:17:49 2015 /etc/ssl/cert.pem ->
/usr/local/share/certs/ca-root-nss.crt
>...
Peace,
david
--
David H. Wolfskill [email protected]
Those who would murder in the name of God or prophet are blasphemous cowards.
See http://www.catwhisker.org/~david/publickey.gpg for my public key.
pgpzorwsA1kNQ.pgp
Description: PGP signature
