Re: security/mozilla-rootcerts-openssl post certificate inclusion in base

[Greg Troxel <gdt%lexort.com@localhost>]

Chavdar Ivanov <ci4ic4%gmail.com@localhost> writes:

> lack cause anything? On top of this, I seem not to be able to remove
> mozilla-rootcerts-openssl, as it is required by hs-x509-system, itself
> required eventually by converters/pandoc. (I sorted this out by

That's a bug.  It is against policy for a package to require
mozilla-rootcerts-openssl.

> replacing the latter package after cvs updating - the NetBSD
> condiitional in the Makefile has been removed so after that nothing
> stopped me from removing mozilla-rootcerts-openssl; leaving the
> comments in the mail as someone else may find himself in the same
> situation).

And it's fixed.

> The query is then about the 198 certificates present in the package
> but missing in base - are they likely to cause any problems?

I would uninstall mozilla-rootcerts-openssl and then make sure your cert
dir is ok.

Are you saying that mozilla-rootcerts-openssl has CAs that base does
not, separately from the history of how your system got be how it is?