Module Name: src Committed By: riastradh Date: Tue Oct 10 21:51:01 UTC 2023
Modified Files: src/share/man/man7: hier.7 Log Message: hier(7): Document /usr/share/certs/mozilla. XXX pullup-10 To generate a diff of this commit: cvs rdiff -u -r1.141 -r1.142 src/share/man/man7/hier.7 Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
Modified files: Index: src/share/man/man7/hier.7 diff -u src/share/man/man7/hier.7:1.141 src/share/man/man7/hier.7:1.142 --- src/share/man/man7/hier.7:1.141 Sat Sep 2 17:40:45 2023 +++ src/share/man/man7/hier.7 Tue Oct 10 21:51:01 2023 @@ -1,4 +1,4 @@ -.\" $NetBSD: hier.7,v 1.141 2023/09/02 17:40:45 riastradh Exp $ +.\" $NetBSD: hier.7,v 1.142 2023/10/10 21:51:01 riastradh Exp $ .\" .\" Copyright (c) 1990, 1993, 1994 .\" The Regents of the University of California. All rights reserved. @@ -586,6 +586,30 @@ Architecture-independent files, mostly t .It Pa calendar/ A variety of calendar files; see .Xr calendar 1 . +.It Pa certs/mozilla/ +X.509 certificates from Mozilla's curated set of certificate +authorities (CAs), +.Pa certdata.txt , +in PEM format. +See +.%U https://wiki.mozilla.org/CA/Included_Certificates +for details. +Used by +.Xr certctl 8 +to populate OpenSSL trust anchors at +.Pa /etc/openssl/certs . +.Bl -tag -width "server/" -compact +.It Pa all/ +Certificates of all CAs in Mozilla +.Pa certdata.txt , +for all purposes, including CAs Mozilla may no longer trust. +.It Pa code/ +Certificates of CAs trusted by Mozilla for code-signing. +.It Pa email/ +Certificates of CAs trusted by Mozilla for email with S/MIME. +.It Pa code/ +Certificates of CAs trusted by Mozilla for TLS server authentication. +.El .It Pa dict/ Word lists; see