From a338691a956b04f201a40a48938ac2b6759c9e1b Mon Sep 17 00:00:00 2001
From: Deven Blake <trinity@trinity.moe>
Date: Tue, 20 Jul 2021 08:59:09 -0400
Subject: [PATCH] more sources

---
 homepage/knowledge/netbsd/index.html | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/homepage/knowledge/netbsd/index.html b/homepage/knowledge/netbsd/index.html
index eb9e151..9a92fe0 100644
--- a/homepage/knowledge/netbsd/index.html
+++ b/homepage/knowledge/netbsd/index.html
@@ -18,10 +18,17 @@
 <H3>updated 2021-07-14</H3>
 <HR ALIGN="left" SIZE="1" WIDTH="25%" />
 <H2>Fix <CODE>SSL certificate problem: unable to get local issuer certificate</CODE></H2>
+<P>Install <CODE>security/mozilla-rootcerts-openssl</CODE>.</P>
+<P>Sources:</P>
+<UL>
+<LI><A HREF="https://www.cambus.net/installing-ca-certificates-on-netbsd/">Frederic Cambus</A></LI>
+<LI><A HREF="https://github.com/ohmyzsh/ohmyzsh/issues/8321#issuecomment-863493503">ohmyzsh/ohmyzsh#8321</A></LI>
+</UL>
 <P>
-Install <CODE>security/mozilla-rootcerts-openssl</CODE>.
-(<A HREF="https://github.com/ohmyzsh/ohmyzsh/issues/8321#issuecomment-863493503">Source</A>.)
+<I>Do not</I> use SSL workarounds like (in the case of git) <CODE>GIT_SSL_NO_VERIFY</CODE>.
+These leave your system open to man-in-the-middle attacks.
 </P>
+<P>Related: <A HREF="http://mail-index.netbsd.org/pkgsrc-users/2021/07/19/msg034147.html">Depending on security/ca-certificates?</A></P>
 <H2>Mounting ext4 partitions with FUSE</H2>
 <P>
 I don't know that this is documented in either the NetBSD guide or wiki.