From owner-cvs-ports@FreeBSD.ORG Fri Jul 6 22:42:04 2007 Return-Path: X-Original-To: cvs-ports@FreeBSD.org Delivered-To: cvs-ports@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 09E4816A400; Fri, 6 Jul 2007 22:42:04 +0000 (UTC) (envelope-from simon@zaphod.nitro.dk) Received: from mx.nitro.dk (zarniwoop.nitro.dk [83.92.207.38]) by mx1.freebsd.org (Postfix) with ESMTP id A2C3513C447; Fri, 6 Jul 2007 22:42:03 +0000 (UTC) (envelope-from simon@zaphod.nitro.dk) Received: from zaphod.nitro.dk (unknown [192.168.3.39]) by mx.nitro.dk (Postfix) with ESMTP id 54B852D5361; Fri, 6 Jul 2007 22:42:02 +0000 (UTC) Received: by zaphod.nitro.dk (Postfix, from userid 3000) id 1FCA31145A; Sat, 7 Jul 2007 00:42:01 +0200 (CEST) Date: Sat, 7 Jul 2007 00:42:01 +0200 From: "Simon L. Nielsen" To: Brooks Davis Message-ID: <20070706224200.GA37690@zaphod.nitro.dk> References: <200706071941.l57JfFNw026347@repoman.freebsd.org> <20070607194527.GB1193@zaphod.nitro.dk> <20070607200359.GC6467@lor.one-eyed-alien.net> <20070706213918.GA69646@lor.one-eyed-alien.net> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20070706213918.GA69646@lor.one-eyed-alien.net> User-Agent: Mutt/1.5.16 (2007-06-09) Cc: cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org, ports-committers@FreeBSD.org Subject: Re: cvs commit: ports/security/ca-roots Makefile X-BeenThere: cvs-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Jul 2007 22:42:04 -0000 On 2007.07.06 16:39:18 -0500, Brooks Davis wrote: > On Thu, Jun 07, 2007 at 03:03:59PM -0500, Brooks Davis wrote: > > On Thu, Jun 07, 2007 at 09:45:28PM +0200, Simon L. Nielsen wrote: > > > On 2007.06.07 19:41:15 +0000, Simon L. Nielsen wrote: > > > > simon 2007-06-07 19:41:15 UTC > > > > > > > > FreeBSD ports repository > > > > > > > > Modified files: > > > > security/ca-roots Makefile > > > > Log: > > > > Deprecated and set one month expiration since it's not supported by > > > > the FreeBSD Security Officer anymore. > > > > > > > > The current ca-roots port makes promises with regard to CA verification > > > > which the current Security Officer (and deputy) do not want to make. > > > > > > brooks@ has a new port which has a list of CA's (I think he said it > > > was extracted on-the-fly from OpenSSL but I can't recall for sure), > > > which will should be committed soonish. This will not be a direct > > > replacement for ca-roots wrt. guarantees of the CA's, but can probably > > > be used in most cases where ca-roots is used today. > > > > It's actually the set from the Mozilla Project's nss library. If you > > use an open source web browser this is the set of CAs you trust by > > default. There's a tarball of the current version at: > > > > http://people.freebsd.org/~brooks/ports/ca_root_nss.tar.gz > > > > It's slighlty ugly in that it requres the nss dist file and the mod_ssl > > distfile, but it works. > > I've committed security/ca_root_nss. Great, thanks! I plan to remove the ca_root port soonish. -- Simon L. Nielsen