PR/60932 CVS commit: [netbsd-10] src/usr.sbin/postinstall

["Martin Husemann" <martin%netbsd.org@localhost>]

The following reply was made to PR bin/60932; it has been noted by GNATS.

From: "Martin Husemann" <martin%netbsd.org@localhost>
To: gnats-bugs%gnats.NetBSD.org@localhost
Cc: 
Subject: PR/60932 CVS commit: [netbsd-10] src/usr.sbin/postinstall
Date: Thu, 29 Oct 2026 16:12:55 +0000

 Module Name:	src
 Committed By:	martin
 Date:		Thu Oct 29 16:12:55 UTC 2026
 
 Modified Files:
 	src/usr.sbin/postinstall [netbsd-10]: postinstall.in
 
 Log Message:
 Pull up following revision(s) (requested by riastradh in ticket #1406):
 
 	usr.sbin/postinstall/postinstall.in: revision 1.56
 	usr.sbin/postinstall/postinstall.in: revision 1.57
 	usr.sbin/postinstall/postinstall.in: revision 1.73
 
 postinstall(8): Modify default certs.conf.
 
 When manually configured /etc/openssl/certs is detected, just
 uncomment the `#manual' line in the default certs.conf rather than
 writing a new one.  That way, you can switch to certctl-managed and
 still get the default path by just deleting /etc/openssl/certs and
 re-commenting the `manual' line.
 
 postinstall(8): Use /usr/sbin/certctl.
 
 Obviates need to have /usr/sbin in PATH when running this.
 
 postinstall(8): Do obsolete _then_ opensslcertsrehash.
 
 Otherwise any certificates removed by an update will remain in
 /etc/openssl/certs/ca-certificates.crt, which is very bad!
 
 PR bin/60932: postinstall obsolete + opensslcertsrehash interact badly
 
 
 To generate a diff of this commit:
 cvs rdiff -u -r1.51.2.4 -r1.51.2.5 src/usr.sbin/postinstall/postinstall.in
 
 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.