On 2018-10-30, Stuart Henderson <s...@spacehopper.org> wrote: > On 2018-10-30, user . <rdansdml....@outlook.com> wrote: >> - when I upgrade the os, I get a new cert.pem -- correct? > > No. It is in the "etc" file set, which is handled specially. Upgrades > are handled by sysmerge, which allows maintaining your local changes to > the file (added or removed certs). > > You can fetch a clean updated file with this command: > > ftp -o cert.pem > http://cvsweb.openbsd.org/cgi-bin/cvsweb/~checkout~/src/lib/libcrypto/cert.pem?content-type=text/plain
Oh - before you replace this, please save a copy of the old cert.pem file and send it to me (gzip it and then send it as an email attachment to me directly, not on the mailing list). I'll see if I can spot the problem with it.