Bug 250299

Summary: 11.4-p3 update removes links & files under /etc/ssl/certs/
Product: Base System Reporter: heas
Component: miscAssignee: freebsd-bugs (Nobody) <bugs>
Status: New ---    
Severity: Affects Only Me CC: kevans, lwhsu, michael.osipov
Priority: ---    
Version: 11.4-RELEASE   
Hardware: Any   
OS: Any   

Description heas 2020-10-12 15:52:56 UTC
Installing 11.4-p3 removed files in /etc/ssl/certs.  From a zfs diff:

-       /etc/ssl/certs/apache.pem
-       /etc/ssl/certs/dovecot.pem
-       /etc/ssl/certs/postfix.pem
M       /etc/ssl/certs
-       /etc/ssl/certs/postfix.pem.old
-       /etc/ssl/certs/dovecot.pem.old
-       /etc/ssl/certs/imapd.pem.old
-       /etc/ssl/certs/nginx.key
-       /etc/ssl/certs/nginx.pem
+       /etc/ssl/blacklisted

It does not recur if the machine is rebooted, so it was not a rc script that removed it.
Comment 1 Michael Osipov 2020-10-12 18:06:04 UTC
You are incorrectly using/abusing this directory. It is solely meant to be used for hashed CA certificate links for be consumed by OpenSSL when verifying a peer. Do not put your certs into it.
Comment 2 Mark Linimon freebsd_committer freebsd_triage 2020-10-12 18:21:16 UTC
*** Bug 250300 has been marked as a duplicate of this bug. ***