en Copyright 2015 Java http://kernelsources.org:8080/source/history/freebsd/usr.sbin/certctl/Makefile#c340ef28fd384b567e35882d04ce17fa31b7384f certctl: Reimplement in CNotable changes include:* We no longer forget manually untrusted certificates when rehashing.* Rehash will now scan the existing directory and progressively replace its contents with those of the new trust store. The trust store as a whole is not replaced atomically, but each file within it is.* We no longer attempt to link to the original files, but we don't copy them either. Instead, we write each certificate out in its minimal form.* We now generate a trust bundle in addition to the hashed diretory. This also contains only the minimal DER form of each certificate. This allows e.g. Unbound to preload the bundle before chrooting.* The C version is approximately two orders of magnitude faster than the sh version, with rehash taking ~100 ms vs ~5-25 s depending on whether ca_root_nss is installed.* We now also have tests.Reviewed by: kevans, markjDifferential Revision: https://reviews.freebsd.org/D42320Differential Revision: https://reviews.freebsd.org/D51896 List of files: /freebsd/usr.sbin/certctl/Makefile Mon, 18 Aug 2025 16:26:29 +0200 Dag-Erling Smørgrav <des@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/usr.sbin/certctl/Makefile#31ac42b486ebb5609c94cfd8a9bec86e457f9b53 Revert certctl reimplementation and follow-upsThe reimplementation of certctl, while much needed, broke the releasebuild and 72 hours later corrections are still under review (D51896).This revert should be reverted once that is ready to land; I just needthis out of the tree temporarily because breakage is interfering withrelease engineering for the upcoming 15.0-RELEASE.Unsquashed reversions:Revert "etc: add missing mtree entry for certctl tests"This reverts commit f751757259158a8d3b81d4fb7576b3ebe226dece.Revert "certctl: Fix bootstrap build"This reverts commit c989e3cc3da1bfd8ac3ec5a05d1e86ab8ff719f7.Revert "certctl: Reimplement in C"This reverts commit 81d8827ad8752e35411204541f1f09df1481e417.With hat: re@ List of files: /freebsd/usr.sbin/certctl/Makefile Sun, 17 Aug 2025 02:17:03 +0200 Colin Percival <cperciva@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/usr.sbin/certctl/Makefile#c989e3cc3da1bfd8ac3ec5a05d1e86ab8ff719f7 certctl: Fix bootstrap buildFixes: 81d8827ad875 ("certctl: Reimplement in C") List of files: /freebsd/usr.sbin/certctl/Makefile Thu, 14 Aug 2025 00:38:52 +0200 Dag-Erling Smørgrav <des@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/usr.sbin/certctl/Makefile#2f8bbfe5873bf652619e7e433cff17ac18c9d4fa Revert "certctl: Fix bootstrap build"This reverts commit 42ac41983ee184e818f6e8da791a5c6c7530f87e. List of files: /freebsd/usr.sbin/certctl/Makefile Thu, 14 Aug 2025 00:37:52 +0200 Dag-Erling Smørgrav <des@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/usr.sbin/certctl/Makefile#42ac41983ee184e818f6e8da791a5c6c7530f87e certctl: Fix bootstrap buildFixes: 81d8827ad875 ("certctl: Reimplement in C") List of files: /freebsd/usr.sbin/certctl/Makefile Thu, 14 Aug 2025 00:35:17 +0200 Dag-Erling Smørgrav <des@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/usr.sbin/certctl/Makefile#81d8827ad8752e35411204541f1f09df1481e417 certctl: Reimplement in CNotable changes include:* We no longer forget manually untrusted certificates when rehashing.* Rehash will now scan the existing directory and progressively replace its contents with those of the new trust store. The trust store as a whole is not replaced atomically, but each file within it is.* We no longer attempt to link to the original files, but we don't copy them either. Instead, we write each certificate out in its minimal form.* We now generate a trust bundle in addition to the hashed diretory. This also contains only the minimal DER form of each certificate.* The C version is approximately two orders of magnitude faster than the sh version, with rehash taking ~100 ms vs ~5-25 s depending on whether ca_root_nss is installed.* The DISTBASE concept has been dropped; the same effect can be achieved by adjusting DESTDIR.* We now also have rudimentary tests.Reviewed by: kevansDifferential Revision: https://reviews.freebsd.org/D42320 List of files: /freebsd/usr.sbin/certctl/Makefile Thu, 14 Aug 2025 00:25:27 +0200 Dag-Erling Smørgrav <des@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/usr.sbin/certctl/Makefile#e9ac41698b2f322d55ccf9da50a3596edb2c1800 Remove residual blank line at start of MakefileThis is a residual of the $FreeBSD$ removal.MFC After: 3 days (though I'll just run the command on the branches)Sponsored by: Netflix List of files: /freebsd/usr.sbin/certctl/Makefile Mon, 15 Jul 2024 06:46:32 +0200 Warner Losh <imp@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/usr.sbin/certctl/Makefile#d0b2dbfa0ecf2bbc9709efc5e20baf8e4b44bbbf Remove $FreeBSD$: one-line sh patternRemove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/ List of files: /freebsd/usr.sbin/certctl/Makefile Wed, 16 Aug 2023 19:55:03 +0200 Warner Losh <imp@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/usr.sbin/certctl/Makefile#1d7ffb373c9d639c9645a6b09ae46b2b92adb2e3 pkgbase: reorganise caroot and openssl packagesThis splits out the certctl utility into a new certctl package and theopenssl libs into an openssl-lib package.PR: 272816Reviewed by: manuDifferential Revision: https://reviews.freebsd.org/D41321 List of files: /freebsd/usr.sbin/certctl/Makefile Mon, 31 Jul 2023 16:38:45 +0200 Doug Rabson <dfr@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/usr.sbin/certctl/Makefile#380073af3aa3048e3e19abe57e64bff4481d829f pkgbase: Put certctl in the FreeBSD-caroot packageThere is no reason that this shouldn't be there.Change the dependency of caroot from utilities to openssl as it'sthe only command that it uses not in runtime.MFC after: 2 weeksSponsored by: Beckhoff Automation GmbH & Co. KGDifferential Revision: https://reviews.freebsd.org/D33458 List of files: /freebsd/usr.sbin/certctl/Makefile Wed, 15 Dec 2021 11:38:18 +0100 Emmanuel Vadot <manu@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/usr.sbin/certctl/Makefile#8b3bc70a2b2d3889f9163e5e5a24747cea6417e6 Merge ^/head r352764 through r353315. List of files: /freebsd/usr.sbin/certctl/Makefile Tue, 08 Oct 2019 20:17:02 +0200 Dimitry Andric <dim@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/usr.sbin/certctl/Makefile#ccdcb388ba6deff15ab24b8775cbd2efd29b7790 [2/3] Add certctl(8)This is a simple utility to hash all trusted on the system into/etc/ssl/certs. It also allows the user to blacklist certificates they donot trust.This work was done primarily by allanjude@, with minor contributions bymyself.No objection from: secteamDifferential Revision: https://reviews.freebsd.org/D16857 List of files: /freebsd/usr.sbin/certctl/Makefile Wed, 02 Oct 2019 03:05:53 +0200 Kyle Evans <kevans@FreeBSD.org>