Re: net/openntpd with constraint stops working after recent security/ca_root_nss upgrade

Michael Grimm <[email protected]> Sat, 7 Oct 2023 17:22:19 +0200
Newsgroups gmane.os.freebsd.devel.ports,gmane.os.freebsd.security.general
Message-ID <[email protected]>
Herbert J. Skuhra <[email protected]> wrote:
> 
> 
> On Sat, Oct 07, 2023 at 04:59:31PM +0200, Michael Grimm wrote:
>> Hi
>> 
>> I am running net/openntpd with a constraint:
>> 
>> …
>> constraint from "9.9.9.9"
>> 
>> After the recent upgrade of security/ca_root_nss to 3.93_1 I noticed a lot of warning messages (see end of mail).
>> 
>> Now, net/openntpd 6.8p1_7,2 stopped working:
>> 
>> Oct  7 09:39:53 <daemon.err> kaan-bock ntpd[932]: constraints configured but none available
>> Oct  7 09:39:53 <daemon.crit> kaan-bock ntpd[934]: constraint: failed to load constraint ca
>> 
>> I had to remove that constraint from ntpd.conf in order to get ntpd working again.
>> 
>> Is this a bug or feature with recent security/ca_root_nss?
> 
> https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=274322

Ah! 

Thanks, Michael