From def6ee77dbc2ab7d4314002f01367e84e69b0a23 Mon Sep 17 00:00:00 2001 From: Brooks Davis Date: Mon, 16 Oct 2023 23:35:34 +0100 Subject: [PATCH] certctl.8: document LOCALBASE Document the LOCALBASE variable and that it's set to user.localbase by default. Update path defaults that depend on it. Reviewed by: bcr Differential Revision: https://reviews.freebsd.org/D40529 --- usr.sbin/certctl/certctl.8 | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/usr.sbin/certctl/certctl.8 b/usr.sbin/certctl/certctl.8 index 4ce61916d79a..286072c1b4d6 100644 --- a/usr.sbin/certctl/certctl.8 +++ b/usr.sbin/certctl/certctl.8 @@ -24,7 +24,7 @@ .\" IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE .\" POSSIBILITY OF SUCH DAMAGE. .\" -.Dd July 13, 2022 +.Dd October 10, 2023 .Dt CERTCTL 8 .Os .Sh NAME @@ -98,18 +98,22 @@ Remove the specified file from the untrusted list. Alternate destination directory to operate on. .It Ev DISTBASE Additional path component to include when operating on certificate directories. +.It Ev LOCALBASE +Location for local programs. +Defaults to the value of the user.localbase sysctl which is usually +.Pa /usr/local . .It Ev TRUSTPATH List of paths to search for trusted certificates. Default: .Pa /usr/share/certs/trusted .Pa /usr/local/share/certs -.Pa /usr/local/etc/ssl/certs +.Pa /etc/ssl/certs .It Ev UNTRUSTPATH List of paths to search for untrusted certificates. Default: .Pa /usr/share/certs/untrusted -.Pa /usr/local/etc/ssl/untrusted -.Pa /usr/local/etc/ssl/blacklisted +.Pa /etc/ssl/untrusted +.Pa /etc/ssl/blacklisted .It Ev CERTDESTDIR Destination directory for symbolic links to trusted certificates. Default: