From owner-cvs-all@FreeBSD.ORG Sun Jun 29 16:48:01 2008 Return-Path: Delivered-To: cvs-all@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 68CFC1065678; Sun, 29 Jun 2008 16:48:01 +0000 (UTC) (envelope-from simon@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id 56FAD8FC0C; Sun, 29 Jun 2008 16:48:01 +0000 (UTC) (envelope-from simon@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.1/8.14.1) with ESMTP id m5TGm133078850; Sun, 29 Jun 2008 16:48:01 GMT (envelope-from simon@repoman.freebsd.org) Received: (from simon@localhost) by repoman.freebsd.org (8.14.1/8.14.1/Submit) id m5TGm1K2078849; Sun, 29 Jun 2008 16:48:01 GMT (envelope-from simon) Message-Id: <200806291648.m5TGm1K2078849@repoman.freebsd.org> From: "Simon L. Nielsen" Date: Sun, 29 Jun 2008 16:48:01 +0000 (UTC) To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: HEAD Cc: Subject: cvs commit: ports MOVED ports/security Makefile ports/security/ca-roots Makefile pkg-descr pkg-plist ports/security/ca-roots/files ca-root.crt X-BeenThere: cvs-all@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the entire tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 29 Jun 2008 16:48:01 -0000 simon 2008-06-29 16:48:01 UTC FreeBSD ports repository Modified files: . MOVED security Makefile Removed files: security/ca-roots Makefile pkg-descr pkg-plist security/ca-roots/files ca-root.crt Log: Retire the ca-roots ports, which expired long ago. The port is deprecated since it is not supported by the FreeBSD Security Officer anymore. The reason for this is that the ca-roots port makes promises with regard to CA verification which the current Security Officer (and deputy) do not want to make. For people who need a general root certificate list see the security/ca_root_ns, but note that the difference in guarantees with regard to which CAs are included in ca_root_ns vs. ca-roots. The ca_root_ns port basically makes no guarantees other than that the certificates comes from the Mozilla project. Note that the ca-roots MOVED file entry on purpose does not point at ca_root_ns due to the change in CA guarantees. With hat: security-officer Revision Changes Path 1.1637 +2 -1 ports/MOVED 1.979 +0 -1 ports/security/Makefile 1.11 +0 -26 ports/security/ca-roots/Makefile (dead) 1.5 +0 -4036 ports/security/ca-roots/files/ca-root.crt (dead) 1.2 +0 -11 ports/security/ca-roots/pkg-descr (dead) 1.3 +0 -5 ports/security/ca-roots/pkg-plist (dead)