untrusted comment: verify with openbsd-69-base.pub
RWQQsAemppS46HpVmCKExWnYRbCsnAwI0Jd0DXRKBQgiAGq+ZDyI8eXxwdrpWS4pdF7gj8GzYBu8rskb913UROPNhBM7q8DWxg4=

OpenBSD 6.9 errata 018, September 30, 2021:

Compensate for the expiry of the DST Root X3 certificate.

Apply by doing:
    signify -Vep /etc/signify/openbsd-69-base.pub -x 018_cert.patch.sig \
        -m - | (cd /usr/src && patch -p0)

And then rebuild and install libcrypto and unwind:
    cd /usr/src/lib/libcrypto
    make obj
    make includes
    make
    make install
    cd /usr/src/sbin/unwind
    make obj
    make
    make install

Index: lib/libcrypto/x509/x509_vpm.c
===================================================================
RCS file: /cvs/src/lib/libcrypto/x509/x509_vpm.c,v
diff -u -p -u -r1.25 x509_vpm.c
--- lib/libcrypto/x509/x509_vpm.c	15 Apr 2021 14:15:03 -0000	1.25
+++ lib/libcrypto/x509/x509_vpm.c	30 Sep 2021 17:29:37 -0000
@@ -598,6 +598,7 @@ static const X509_VERIFY_PARAM_ID _empty
 static const X509_VERIFY_PARAM default_table[] = {
 	{
 		.name = "default",
+		.flags = X509_V_FLAG_TRUSTED_FIRST,
 		.depth = 100,
 		.trust = 0,  /* XXX This is not the default trust value */
 		.id = vpm_empty_id