Re: bin/57456: ftp fails for https in netbsd-10 due to missing certificates

[Martin Husemann <martin%duskware.de@localhost>]

The following reply was made to PR bin/57456; it has been noted by GNATS.

From: Martin Husemann <martin%duskware.de@localhost>
To: gnats-bugs%netbsd.org@localhost
Cc: 
Subject: Re: bin/57456: ftp fails for https in netbsd-10 due to missing
 certificates
Date: Thu, 8 Jun 2023 13:56:20 +0200

 On Thu, Jun 08, 2023 at 11:45:02AM +0000, Michael van Elst wrote:
 >  You may install the cert package of your choice and update
 >  as necessary to track changes. I also suggest to make this
 >  part of the sysinst process (after seeding the random generator
 >  where necessary).
 
 That is too late.
 
 One of the options to install the base sets (and actually one of my
 personal favorites for many install media, especially as it gets me
 "latest" binaries instead of the ones that came with the [maybe older]
 installer) is to download them via https - which relies on ftp(1) on
 the install medium being able to download them.
 
 So some sets of certificates *must* be bundled with the installers
 or that feature in ftp(1) needs to be turned off by default again.
 
 Martin