K 10
svn:author
V 6
kevans
K 8
svn:date
V 27
2021-09-04T07:44:36.632743Z
K 7
svn:log
V 488
caroot: update CA bundle processor

Our current processor was identified as trusting cert not explicitly
marked for SERVER_AUTH, as well as certs that were tagged with
DISTRUST_AFTER.

Update the script to handle both scenarios. This patch was originally
authored by mandree@ for ports, and it was subsequently ported to base
caroot.

(cherry picked from commit c3510c941c0dddd09389915a9395e6f059088bab)

Git Hash:   a12641eaecc3dab730b27149b7d48fb0a86d38c7
Git Author: kevans@FreeBSD.org
END