bin/57456: ftp fails for https in netbsd-10 due to missing certificates

[abs%absd.org@localhost]

>Number:         57456
>Category:       bin
>Synopsis:       ftp fails for https in netbsd-10 due to missing certificates
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    bin-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Thu Jun 08 09:05:00 +0000 2023
>Originator:     David Brownlee
>Release:        NetBSD-10
>Organization:
-
>Environment:
NetBSD iris.absd.org 10.0_BETA NetBSD 10.0_BETA (GENERIC) #0: Mon May 15 10:40:13 UTC 2023  mkrepro%mkrepro.NetBSD.org@localhost:/usr/src/sys/arch/amd64/compile/GENERIC amd64

>Description:
ftp on netbsd-10 has started to fail against https URLs with the following error

4294967295:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/external/bsd/openssl/dist/ssl/statem/statem_clnt.c:1919:

Running "env FTPSSLNOVERIFY=1 ftp ..." works around the issue
>How-To-Repeat:
Try to use ftp on the latest netbsd-10 to download an https URL
>Fix:
Add basic root ssl certificates to netbsd-10?