mirror of
https://github.com/lucaspalomodevelop/core.git
synced 2026-03-17 10:04:41 +00:00
Neither OpenSSL base (/etc/ssl) nor ports (/usr/local/openssl) need the bundle file now that we use the directory trust store. The downside is that as soon as the bundle exists OpenSSL library will read both the directory and the bundle by default defeating the purpose of a single location and the directory being faster. Keep the fringe ca_root_nss location /usr/local/etc/ssl since that is still seeded by the package but controlled and topped up by the user configured authorities.