M:Tier ssl certificate

[shep]

I am looking at the updated M:Tier packages ImageMagick and icu4. I have patched both ssl and the kernel with the most recent patches for 5.4stable.

I was going to try to manually update ImageMagick and icu4 from a local directory.

# pkg_add -u ImageMagick
system(/usr/sbin/openssl, smime, -verify, -binary, -inform, DEM, -in, /tmp/pkgsig.OTHRZCIbb, -content, /tmp/pkgcontent.XZHz7Fv5I, -CAfile, /etc/ssl/pkgca.pem, -out, /dev/null) failed: exit(2)
--- +ImageMagick-6.7.7.7p3 -------------------
Bad signature
Error loading file /etc/ssl/pkgca.pem
8908934914960:error:02001002:system library:fopen:No such file or directory:/usr/src/lib/libssl/crypto/../src/crypto/bio/bss_file.c:169:fopen('/etc/ssl/pkgca.pem','r')
8908934914960:error:2006D080:BIO routines:BIO_new_file:no such file:/usr/src/lib/libssl/crypto/../src/crypto/bio/bss_file.c:172:
8908934914960:error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib:/usr/src/lib/libssl/crypto/../src/crypto/x509/by_file.c:274:
Couldn't find updates for jbigkit-2.0, libwmf-0.2.8.4p0, lcms2-2.4p0, xz-5.0.5, bzip2-1.0.6p0, netpbm-10.35.88p0, tiff-4.0.3p2, libltdl-2.4.2, libxml-2.9.0p0, djvulibre-3.5.25.3p0, jasper-1.900.1p2, ghostscript-9.06p2, fftw3-3.2.2p2, libiconv-1.14p0, png-1.6.2p0, transfig-3.2.5ap0
Fatal error: ImageMagick-6.7.7.7p2->6.7.7.7p3 is corrupted
 at /usr/libdata/perl5/OpenBSD/PkgAdd.pm line 672.

So I need to install M:Tier's certificate

1) Install the M:Tier certificate

Retrieve the certificate and install it into:

/etc/ssl/pkgca.pem

I 've looked in the FAQ and ssl(8) but am confused by both the signing authority and format of the mtier.cert.

Can someone point me to a reference?

Thanks in advance