David Holland <dholland-pkgtech%netbsd.org@localhost> writes: > On Wed, Sep 29, 2021 at 08:03:20PM -0400, Greg Troxel wrote: > > data points and questions > > > > [...] > > What should be done with mozilla-rootcerts-openssl so that systems > with both base 1.1 and pkgsrc 3.0 (where both are meant to be live) > can feed both copies with certs? I don't think we did anything last > time around, but that was long enough ago that the issue was less > acute. My quick reaction is that it should configure certs for base openssl always, and pkgsrc openssl, if it is installed. That's icky with installing mozilla-rootcerts-openssl and then pkgsrc openssl, but having to deinstall/reinstall to fix seems not so bad compared to inventing new mechanisms.
Attachment:
signature.asc
Description: PGP signature