K 10
svn:author
V 6
kevans
K 8
svn:date
V 27
2021-09-04T07:40:45.014062Z
K 7
svn:log
V 488
caroot: update CA bundle processor

Our current processor was identified as trusting cert not explicitly
marked for SERVER_AUTH, as well as certs that were tagged with
DISTRUST_AFTER.

Update the script to handle both scenarios. This patch was originally
authored by mandree@ for ports, and it was subsequently ported to base
caroot.

(cherry picked from commit c3510c941c0dddd09389915a9395e6f059088bab)

Git Hash:   0ef0442fcf63392502e4d2a645807a723562de0f
Git Author: kevans@FreeBSD.org
END