74 	"/usr/share/certs/trusted",
75 	"%L/share/certs/trusted",
248 static struct cert_tree trusted = RB_INITIALIZER(&trusted);  variable
634  * Load trusted certificates.
644 	/* load external trusted certs */  in load_trusted()
646 		ret = read_certs(trusted_paths[i], &trusted, exclude);  in load_trusted()
651 	/* load installed trusted certs */  in load_trusted()
652 	ret = read_certs(trusted_dest, &trusted, exclude);  in load_trusted()
656 	info("%d trusted certificates found", n);  in load_trusted()
702  * Save trusted certificates.
712 	ret = write_certs(trusted_dest, &trusted);  in save_trusted()
750 	ret = write_bundle(dir, file, &trusted);  in save_bundle()
790  * Load installed trusted certificates, then list them.
799 	/* load trusted certificates */  in certctl_list()
802 	list_certs(&trusted);  in certctl_list()
803 	free_certs(&trusted);  in certctl_list()
826  * Load trusted and untrusted certificates from all sources, then
847 	/* load trusted certs, excluding any that are already untrusted */  in certctl_rehash()
855 	free_certs(&trusted);  in certctl_rehash()
862  * Manually add one or more certificates to the list of trusted certificates.
880 	/* load trusted certs, excluding any that are already untrusted */  in certctl_trust()
883 	/* now load the additional trusted certificates */  in certctl_trust()
886 		ret = read_cert(argv[i], &extra, &trusted);  in certctl_trust()
891 		warnx("no new trusted certificates found");  in certctl_trust()
893 		free_certs(&trusted);  in certctl_trust()
899 	 * For each new trusted cert, move it from the extra list to the  in certctl_trust()
900 	 * trusted list, then check if a matching certificate exists on  in certctl_trust()
906 		RB_INSERT(cert_tree, &trusted, cert);  in certctl_trust()
919 	free_certs(&trusted);  in certctl_trust()
954 	/* load trusted certs, excluding any that are already untrusted */  in certctl_untrust()
962 	free_certs(&trusted);  in certctl_untrust()