Re: net/openntpd with constraint stops working after recent security/ca_root_nss upgrade

"Herbert J. Skuhra" <[email protected]> Sat, 7 Oct 2023 17:03:09 +0200

Newsgroups	gmane.os.freebsd.devel.ports,gmane.os.freebsd.security.general
Message-ID	<[email protected]>

On Sat, Oct 07, 2023 at 04:59:31PM +0200, Michael Grimm wrote:
> Hi
> 
> I am running net/openntpd with a constraint:
> 
> 	…
> 	constraint from "9.9.9.9"
> 
> After the recent upgrade of security/ca_root_nss to 3.93_1 I noticed a lot of warning messages (see end of mail).
> 
> Now, net/openntpd 6.8p1_7,2 stopped working:
> 
> 	Oct  7 09:39:53 <daemon.err> kaan-bock ntpd[932]: constraints configured but none available
> 	Oct  7 09:39:53 <daemon.crit> kaan-bock ntpd[934]: constraint: failed to load constraint ca
> 
> I had to remove that constraint from ntpd.conf in order to get ntpd working again.
> 
> Is this a bug or feature with recent security/ca_root_nss?

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=274322

-- 
Herbert