]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
certctl(8): let one blacklist based on hashed filenames
authorKyle Evans <kevans@FreeBSD.org>
Thu, 3 Oct 2019 20:45:52 +0000 (20:45 +0000)
committerKyle Evans <kevans@FreeBSD.org>
Thu, 3 Oct 2019 20:45:52 +0000 (20:45 +0000)
commit94a5245c4ccc7cd4706ca5a7fe6c9f3be33327bc
tree1528d073e94cb7a96d5838fb0fd4dbc6bd293931
parent5989470c37b574add0f73e184dffa9c88f24d18b
certctl(8): let one blacklist based on hashed filenames

It seems reasonable to allow, for instance:

$ certctl list
# reviews output -- ah, yeah, I don't trust that one
$ certctl blacklist ce5e74ef.0
$ certctl rehash

We can unambiguously determine what cert "ce5e74ef.0" refers to, and we've
described it to them in `certctl list` output -- I see little sense in
forcing another level of filesystem inspection to determien what cert file
this physically corresponds to.
usr.sbin/certctl/certctl.sh