Re: CVS commit: pkgsrc/security/mozilla-rootcerts

[nia <nia%NetBSD.org@localhost>]

On Fri, Mar 27, 2020 at 01:33:08PM +0000, Greg Troxel wrote:
> +NB: This package provides certificates, but does not configure them as
> +trust anchors in any particular SSL/TLS implementation.  See also
> +Mozilla-rootcerts-openssl for a package that configures these
> +certificates as trust anchors in OpenSSL.

Can we agree to use the phrase 'configure them as trust anchors' less?

This raises more questions than it answers for users who are wondering
why curl'ing a https URL doesn't work.

Since this is a package that practically every pkgsrc user will have
installed, I don't think it makes sense to overcomplicate the
description. The description should describe the common use case,
that is, installing a complete set of certificates so valiation works.

I'm not actually sure focusing on OpenSSL is helpful either, since
other TLS implementations will use the same certificate store.