aboutsummaryrefslogtreecommitdiff
path: root/src/crypto
diff options
context:
space:
mode:
authorLapo Luchini <lapo@lapo.it>2021-05-20 15:41:02 +0000
committerFilippo Valsorda <filippo@golang.org>2021-05-20 17:06:05 +0000
commitce9a3b79d5bb783f5f31c9d41665a488fe63f546 (patch)
treecbb476e59e24a863a2265e22dd85a3fa346220bf /src/crypto
parentf8be906d7437f2528abc7cd1a57fe46aa9348b97 (diff)
downloadgo-ce9a3b79d5bb783f5f31c9d41665a488fe63f546.tar.gz
go-ce9a3b79d5bb783f5f31c9d41665a488fe63f546.zip
crypto/x509: add new FreeBSD 12.2+ trusted certificate folder
Up to FreeBSD 12.1 the package ca_root_nss was needed in order to have certificates under /usr/local/share/certs as the base system didn't have a system trusted certificate store. This has been fixed in FreeBSD 12.2 using /etc/ssl/certs: https://svnweb.freebsd.org/base?view=revision&revision=357082 Fixes #46284 Change-Id: I912b1bacc30cdf20d19e3ef9d09b69bb8055ff49 GitHub-Last-Rev: 0fa5542ea3c70ecb03e621381d7c34fbadf7ea47 GitHub-Pull-Request: golang/go#46276 Reviewed-on: https://go-review.googlesource.com/c/go/+/321190 Reviewed-by: Filippo Valsorda <filippo@golang.org> Run-TryBot: Filippo Valsorda <filippo@golang.org> TryBot-Result: Go Bot <gobot@golang.org> Trust: Tobias Klauser <tobias.klauser@gmail.com>
Diffstat (limited to 'src/crypto')
-rw-r--r--src/crypto/x509/root_bsd.go1
1 files changed, 1 insertions, 0 deletions
diff --git a/src/crypto/x509/root_bsd.go b/src/crypto/x509/root_bsd.go
index 822e8573ff..6712ea32a6 100644
--- a/src/crypto/x509/root_bsd.go
+++ b/src/crypto/x509/root_bsd.go
@@ -18,6 +18,7 @@ var certFiles = []string{
// Possible directories with certificate files; stop after successfully
// reading at least one file from a directory.
var certDirectories = []string{
+ "/etc/ssl/certs", // FreeBSD 12.2+
"/usr/local/share/certs", // FreeBSD
"/etc/openssl/certs", // NetBSD
}