Re: Cannot git-clone pkgsrc: SSL certificate problem: unable to get local issuer certificate

[Greg Troxel <gdt%lexort.com@localhost>]

Keep in mind also that "work" is complicated.

For git's treatment of certs issued by CAs to "work" in terms of meeting
both security and availability requirements, it must:

  accept certificates properly issued by CAs in the community consensus
  default trust anchor set, and

  decline to accept any certificate that was improperly issued, even if
  signed by one of the previous CAs.

and..

  continue to accept certificates that are used to sign browser
  extensions, when in fact the keys were not compromised and the
  certificates would have been reissued had anyone realized that was
  necessary

(all sort of a joke, but this points how how difficult the issue is)