In D49130#1140593, @michaelo wrote:

In D49130#1133049, @heliosyne_gmail.com wrote:

In D49130#1132911, @michaelo wrote:

Maybe this should be split into two reviews: (1) Basic funtionality for the base system, (2) adding links in LOCALBASE?

ok.

14.3-RELEASE is approach. Can you please split up? I want to have this at least for base in the next release.

In D49130#1132911, @michaelo wrote:

Maybe this should be split into two reviews: (1) Basic funtionality for the base system, (2) adding links in LOCALBASE?

In D49130#1132466, @ziaee wrote:

Hey guys, few ideas:

As for these:

• composer: I have patched it upstream, it just works for months now
• rust (cargo): I have a patch here and waiting for a upstream and downstream: https://reviews.freebsd.org/D49120
• pip: it works, what does not work with base?

I think this should not intervene with ca_root_nss for the time being and should be changed to -f

I'm the originator of patch. I'll try to answer specific questions, but all the discussion of which paths are correct is somewhat moot. Some of it was already hashed out in the PR, but in short, hier(7) and the general base vs local engineering fence means /etc/ssl/certs and /etc/ssl/cert.pem are probably the best choices for canonical locations managed by a base program.