Solved Calling Go developers...

[Basil Hendroff]

SOLVED - Calling on Go developers...

Up until quite recently, the FreeBSD trust store has been in disarray. @jgreco is facilitating a discussion on the impact of this in the thread SSL certificate problem: certificate has expired -- the OpenSSL 1.0.2 vs LetsEncrypt issue. The FreeBSD bug report #160387 - security/ca_root_nss...

www.truenas.com

 

[Basil Hendroff]

A HUGE thank you to qiu3344 for responding to the plea for a Go developer to help resolve the FreeBSD trust store issue within SmallStep. qiu3344 stepped up to the plate and unselfishly contributed their expertise and time to bring closure to this issue, Around 100 lines of Go code were added in a pull request. The fix should find its way in a future release of SmallStep and Caddy. Anybody who uses these products on FreeBSD, and its derivatives such as TrueNAS, for private PKI certificate lifecycle management, owes qiu3344 a debt of gratitude for their contribution in making these products fully functional on more recent FreeBSD versions.