FreeBSD
/
src
mirror of https://git.FreeBSD.org/src.git
1
0
Fork 1
Code Releases Activity
src/lib
History
Michael Osipov 09f5c1e118 libfetch: don't rely on ca_root_nss for certificate validation 
Before certctl(8), there was no system trust store, and libfetch
relied on the CA certificate bundle from the ca_root_nss port to
verify peers.

We now have a system trust store and a reliable mechanism for
manipulating it (to explicitly add, remove, or revoke certificates),
but if ca_root_nss is installed, libfetch will still prefer that to
the system trust store.

With this change, unless explicitly overridden, libfetch will rely on
OpenSSL to pick up the default system trust store.

PR:		256902
MFC after:	3 days
Reviewed by:	kevans
Differential Revision:	https://reviews.freebsd.org/D42059
 		2023-10-03 07:53:20 +02:00
..
atf
…
clang pkgbase: Move headers and libs out of runtime and utilities 2023-09-12 13:22:21 +01:00
csu pkgbase: Move headers and libs out of runtime and utilities 2023-09-12 13:22:21 +01:00
flua Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
geom glabel.8: Warn against using generic labels on a shared device 2023-09-27 08:39:31 -04:00
googletest Fix GoogleTest 1.14.0 import 2023-08-18 19:33:58 -07:00
lib9p
…
lib80211 Purge more stray embedded $FreeBSD$ strings 2023-09-25 07:54:56 -07:00
libalias
…
libarchive
…
libauditd
…
libbe Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libbearssl
…
libbegemot
…
libblacklist
…
libblocksruntime
…
libbluetooth Remove $FreeBSD$: one-line nroff pattern 2023-08-16 11:55:15 -06:00
libbsddialog
…
libbsdstat
…
libbsm
…
libbsnmp
…
libbz2
…
libc lib/libc/tests/string: expand memcmp test to bcmp, timingsafe_{b,mem}cmp 2023-10-02 15:25:31 -04:00
libc++
…
libc++experimental
…
libc_nonshared
…
libcalendar Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libcam Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libcapsicum Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libcasper libcasper: reference system.fileargs service 2023-09-06 09:53:01 -04:00
libcbor
…
libclang_rt pkgbase: Move headers and libs out of runtime and utilities 2023-09-12 13:22:21 +01:00
libcom_err
…
libcompat Remove $FreeBSD$: one-line nroff pattern 2023-08-16 11:55:15 -06:00
libcompiler_rt Merge commit 4bb2416d42eb from llvm-project (by Jessica Clarke): 2023-09-04 09:33:27 +01:00
libcrypt Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libcuse Remove $FreeBSD$: one-line nroff pattern 2023-08-16 11:55:15 -06:00
libcxxrt
…
libdevctl Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libdevdctl
…
libdevinfo Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libdevstat Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libdl
…
libdpv Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libdwarf
…
libedit
…
libefivar Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libelf
…
libelftc
…
libevent1
…
libexecinfo
…
libexpat Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libfetch libfetch: don't rely on ca_root_nss for certificate validation 2023-10-03 07:53:20 +02:00
libfido2 libfido2: update to 1.13.0 2023-09-19 13:06:12 -04:00
libfigpar Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libgcc_eh
…
libgcc_s
…
libgeom Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libgpio Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libgssapi Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libiconv_modules
…
libifconfig
…
libipsec Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libipt
…
libiscsiutil
…
libjail Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libkiconv Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libkvm Remove $FreeBSD$: one-line nroff pattern 2023-08-16 11:55:15 -06:00
libldns
…
liblua
…
liblutok
…
liblzma
…
libmagic Disable byteswap.h for now. 2023-09-11 23:24:08 -07:00
libmd Remove $FreeBSD$: one-line nroff pattern 2023-08-16 11:55:15 -06:00
libmemstat Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libmilter
…
libmixer Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libmp Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libmt Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libnetbsd Remove $FreeBSD$: one-line bare tag 2023-08-16 11:55:20 -06:00
libnetgraph Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libnetmap
…
libnv
…
libomp
…
libopenbsd Remove $FreeBSD$: one-line bare tag 2023-08-16 11:55:20 -06:00
libopencsd
…
libpam Remove $FreeBSD$: one-line bare tag 2023-08-16 11:55:20 -06:00
libpathconv Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libpcap
…
libpe
…
libpfctl libpfctl: implement status counter accessor functions 2023-08-31 10:56:31 +02:00
libpjdlog
…
libpmc pmc: better distinguish pmu-events allocation path 2023-09-03 13:27:21 -07:00
libpmcstat
…
libproc
…
libprocstat libprocstat: style: space after switch 2023-10-02 22:50:00 +01:00
libradius Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libregex
…
librpcsec_gss Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
librpcsvc
…
librss Remove $FreeBSD$: one-line nroff pattern 2023-08-16 11:55:15 -06:00
librt librt: Hoist SHLIBDIR?= so it actually works 2023-08-28 20:27:50 +01:00
librtld_db Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libsbuf
…
libsdp Remove $FreeBSD$: one-line nroff pattern 2023-08-16 11:55:15 -06:00
libsecureboot Remove $FreeBSD$: one-line bare tag 2023-08-16 11:55:20 -06:00
libsm
…
libsmb
…
libsmdb
…
libsmutil
…
libsqlite3
…
libssp
…
libssp_nonshared
…
libstats
…
libstdbuf Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libstdthreads Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libsysdecode Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libtacplus Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libtelnet
…
libthr libc: export pthread_getname_np stub 2023-08-21 01:44:17 +03:00
libthread_db
…
libucl
…
libufs Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libugidfw Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libulog Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libunbound unbound: Vendor import 1.18.0 2023-09-18 21:17:09 -07:00
libusb Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libusbhid Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libutil login_cap.c: Don't set errno to ERANGE on memory allocation failure 2023-10-02 16:41:22 -04:00
libveriexec Add mac_grantbylabel 2023-08-24 17:42:11 -07:00
libvgl Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libvmmapi
…
libwrap
…
libxo Remove $FreeBSD$: one-line nroff pattern 2023-08-16 11:55:15 -06:00
liby
…
libypclnt
…
libz Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
libzstd libzstd: Explicitly define ZSTD_DISABLE_ASM 2023-08-22 21:01:03 +01:00
msun Purge more stray embedded $FreeBSD$ strings 2023-09-25 07:54:56 -07:00
ncurses ncurses: avoid hardcoded assumptions about the layout of .OBJDIR 2023-09-12 16:00:45 -05:00
nss_tacplus nss_tacplus: Provide dummy setpwent(), getpwent_r(), endpwent(). 2023-08-31 07:49:57 +00:00
ofed
…
tests
…
Makefile
…
Makefile.inc
…