From owner-cvs-ports@FreeBSD.ORG Sun Sep 4 13:08:49 2011 Return-Path: Delivered-To: cvs-ports@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 92107106566C; Sun, 4 Sep 2011 13:08:49 +0000 (UTC) (envelope-from mandree@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id 824208FC08; Sun, 4 Sep 2011 13:08:49 +0000 (UTC) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.4/8.14.4) with ESMTP id p84D8nVA051805; Sun, 4 Sep 2011 13:08:49 GMT (envelope-from mandree@repoman.freebsd.org) Received: (from mandree@localhost) by repoman.freebsd.org (8.14.4/8.14.4/Submit) id p84D8niL051804; Sun, 4 Sep 2011 13:08:49 GMT (envelope-from mandree) Message-Id: <201109041308.p84D8niL051804@repoman.freebsd.org> From: Matthias Andree Date: Sun, 4 Sep 2011 13:08:49 +0000 (UTC) To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: HEAD Cc: Subject: cvs commit: ports/security/ca_root_nss Makefile distinfo ports/security/ca_root_nss/files MAca-bundle.pl patch-ca-bundle.pl X-BeenThere: cvs-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 04 Sep 2011 13:08:49 -0000 mandree 2011-09-04 13:08:49 UTC FreeBSD ports repository Modified files: security/ca_root_nss Makefile distinfo Added files: security/ca_root_nss/files MAca-bundle.pl Removed files: security/ca_root_nss/files patch-ca-bundle.pl Log: Security update: use newer Mozilla Builtin-Trust store to revoke DigiNotar.nl trust. Security fix: the modssl ca-bundle.pl script did not process "untrusted" marks on certificates. Drop it and write a new script in its place that does that. Synch up with security/nss port to 3.12.11. Not asking for maintainer approval because of multiple timeouts in response to related PRs vs. security/[ca_root_]nss. Revision Changes Path 1.12 +13 -22 ports/security/ca_root_nss/Makefile 1.7 +2 -4 ports/security/ca_root_nss/distinfo 1.1 +162 -0 ports/security/ca_root_nss/files/MAca-bundle.pl (new) 1.3 +0 -40 ports/security/ca_root_nss/files/patch-ca-bundle.pl (dead)