bin/58094: postinstall fix runs certctl too early

[Thomas Klausner <wiz%NetBSD.org@localhost>]

>Number:         58094
>Category:       bin
>Synopsis:       postinstall fix runs certctl too early
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    bin-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sun Mar 31 18:40:00 +0000 2024
>Originator:     Thomas Klausner
>Release:        NetBSD 10.0
>Organization:

>Environment:
	
	
Architecture: x86_64
Machine: amd64
>Description:
I just updated from rc2 to 10 release and I think that "postinstall fix"
should run "certctl" later.

After the first try, I had an error about a duplicate name; when I ran
'certctl rehash' it was fixed.

I think the obsolete-removal needs to run before certctl rehash.
>How-To-Repeat:
Upgrade from 10.0RC2 to 10.0, run postinstall fix.
>Fix:
Run certctl later.

>Unformatted: