BSD Portssecurity/ca_root_nss 3.131.1 MidnightBSD
The root certificate bundle from the Mozilla Project
- System
- MidnightBSD
- Repository
- mports
- Maintainer
- [email protected]
- Last update
- Commit
75b7a63995- License
- MPL20
- Categories
- security
Description
Root certificates from certificate authorities included in the Mozilla NSS library and thus in Firefox and Thunderbird.
This port directly tracks the version of NSS in the security/nss port.
In the other systems
| System | Port | Version |
|---|---|---|
| MidnightBSD | security/ca_root_nss | 3.131.1 |
| FreeBSD | security/ca_root_nss | 3.132 |
| DragonFly | security/ca_root_nss | 3.108 |
| HardenedBSD | security/ca_root_nss | 3.130 |
| GhostBSD | security/ca_root_nss | 3.129 |
| OPNsense | security/ca_root_nss | 3.124 |
Install
Binary package:
mport install ca_root_nssFrom mports:
cd /usr/mports/security/ca_root_nss && make install cleanTo depend on this port in another port's Makefile:
RUN_DEPENDS= ca_root_nss>0:security/ca_root_nssDependencies
Required by 44
- ai/claude-code-legacy
- ai/clawhub
- ai/github-copilot-cli-legacy
- ai/grok-cli
- ai/llama-cpp
- ai/openclaw
- audio/teamspeak3-server
- databases/couchdb3
- deskutils/calibre
- devel/librest
- devel/php-composer
- devel/qca
- devel/ruby-gems
- dns/inadyn
- lang/mono5.10
- lang/mono5.20
- lang/mono6.8
- mail/courier
- mail/py-postfix-mta-sts-resolver
- mail/rspamd
- misc/bun-decompile
- net-p2p/lidarr
- net-p2p/radarr
- net-p2p/readarr
- net-p2p/sonarr
- net/bsdec2-image-upload
- net/glib-networking
- net/mosquitto
- net/openntpd
- net/rubygem-grpc
- net/rubygem-grpc-gitlab
- security/cargo-audit
- security/go-cve-dictionary
- security/pulledpork
- security/tailscale
- sysutils/amazon-ssm-agent
- sysutils/vm-bhyve
- textproc/py-sphinx
- www/grafana
- www/mattermost-server
- www/mcp-server-browserbase
- www/midori
- www/netsurf
- www/raphael
Configuration
Options name: security_ca_root_nss
| Option | Default | Description |
|---|---|---|
| ETCSYMLINK | on | Add symlinks to default bundle locations |
- USES
- perl5 ssl:build
- Service scripts
- none
Files
pkg-plist 7
- %%CERTDIR%%/ca-root-nss.crt
- @sample etc/ssl/cert.pem.sample
- openssl/cert.pem
- %%ETCSYMLINK%%/etc/ssl/cert.pem
- @postexec certctl rehash
- @postunexec certctl rehash
- @postexec [ ! -e %%LOCALBASE%%/bin/cert-sync ] || %%LOCALBASE%%/bin/cert-sync --quiet %%PREFIX%%/share/certs/ca-root-nss.crt
distinfo 1
| File | Size | SHA256 |
|---|---|---|
| nss-3.131.1.tar.gz | 8.8058024e+07 | b1dbc1d9e7f3f8455dfb6d58ec8f7229d8a8450c629a9e69ef2ef6081f359056 |
Master sites 1
- MOZILLA/security/nss/releases/${DISTNAME:tu:C/[-.]/_/g}_RTM/src
Commit history 3
| Date | Commit | Credits | Log message |
|---|---|---|---|
75b7a63995 |
Lucas Holt | security/ca_root_nss: sync with NSS 3.131.1 (#1829) Security update that goes with #1828 (security/nss 3.131.1). Release
announcement:
https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/vSxZxnOMMvs
This regenerates `ca-root-nss.crt` from NSS 3.131.1 and drops these
roots:
- emSign Root CA - C1 (bug 2083709)
- emSign ECC Root CA - C3 (bug 2083709)
- emSign ECC Root CA - G3 (bug 2084101). This removal responds to a
security incident that affected intermediate certificates.
Mozilla's OneCRL update only protects Firefox. Anything that uses the
system bundle (OpenSSL, curl, `mport`, and so on) needs this port
updated.
## Testing (MidnightBSD 4.0.9 amd64)
- `makesum`: the hash is the same distfile and SHA256 as #1828, and it
matches Mozilla's `SHA256SUMS`.
- `package` from a clean `work/` succeeds with no plist discrepancies.
… |
|
7c7ac56416 |
Lucas Holt | security/ca_root_nss: sync with NSS 3.129 (#1705) | |
b9b067e093 |
Lucas Holt | Update Thunderbird to 153.0 Update NSS and ca_root_nss to 3.125 and refresh cbindgen for the Thunderbird build. Preserve MidnightBSD compatibility fixes for protobuf alignment, libproxy, and __XSI_VISIBLE.
AI-Assisted-by: Codex GPT-5 <[email protected]>
Signed-off-by: Lucas Holt <[email protected]> |