CVS commit: [netbsd-10] src/usr.sbin/postinstall

["Martin Husemann" <martin%netbsd.org@localhost>]

Module Name:    src
Committed By:   martin
Date:           Thu Oct 29 16:12:55 UTC 2026

Modified Files:
        src/usr.sbin/postinstall [netbsd-10]: postinstall.in

Log Message:
Pull up following revision(s) (requested by riastradh in ticket #1406):

        usr.sbin/postinstall/postinstall.in: revision 1.56
        usr.sbin/postinstall/postinstall.in: revision 1.57
        usr.sbin/postinstall/postinstall.in: revision 1.73

postinstall(8): Modify default certs.conf.

When manually configured /etc/openssl/certs is detected, just
uncomment the `#manual' line in the default certs.conf rather than
writing a new one.  That way, you can switch to certctl-managed and
still get the default path by just deleting /etc/openssl/certs and
re-commenting the `manual' line.

postinstall(8): Use /usr/sbin/certctl.

Obviates need to have /usr/sbin in PATH when running this.

postinstall(8): Do obsolete _then_ opensslcertsrehash.

Otherwise any certificates removed by an update will remain in
/etc/openssl/certs/ca-certificates.crt, which is very bad!

PR bin/60932: postinstall obsolete + opensslcertsrehash interact badly


To generate a diff of this commit:
cvs rdiff -u -r1.51.2.4 -r1.51.2.5 src/usr.sbin/postinstall/postinstall.in

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.