BSD Ports

security/ca-certificates 20260601 NetBSD

Root CA certificates from the Mozilla Project

System
NetBSD
Repository
pkgsrc
Maintainer
[email protected]
Last update
Commit
c767e26af5
License
gnu-gpl-v2 AND mpl-2.0
Categories
security
Package size
133.5 KiB, 254.1 KiB installed

Description

This package contains the update-ca-certificates(8) tool maintained by the Debian Project (in the ca-certificates package they distribute) to manage the set of configured trust anchors for openssl.

The ca-certificates framework enables the sysadmin to configure the certificates to install, using multiple sources of CA certificates, for example to include local CAs. See update-ca-certificates(8) for details.

This package also contains the certificate authorities shipped with Mozilla's browser to allow SSL-based applications to check for the authenticity of SSL connections.

Please note that Debian, NetBSD, and pkgsrc can neither confirm nor deny whether the certificate authorities whose certificates are included in this package have in any way been audited for trustworthiness or RFC 3647 compliance. Full responsibility to assess them belongs to the local system administrator.

See also the mozilla-rootcerts and mozilla-rootcerts-openssl packages for alternative approaches to installing CA certificates.

In the other systems

SystemPortVersion
NetBSDsecurity/ca-certificates20260601
MidnightBSDsecurity/linux-rl9-ca-certificates2025.2.80

Install

Binary package:

pkgin install ca-certificates

From pkgsrc:

cd /usr/pkgsrc/security/ca-certificates && make install clean

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

RepositoryVersion
NetBSD 10.1 x86_6420260601
NetBSD 10.1 aarch6420260223
SmartOS / illumos x86_6420260816
macOS 15 arm6420260601

Dependencies

No port depends on this one.

Commit history 4

DateCommitCreditsLog message
c767e26af5 kim ca-certificates: Update to 20260816
ca-certificates (20260816) unstable; urgency=medium * Update Mozilla certificate authority bundle to version 2.90 The following certificate authorities were added (+): + "SECOM TLS ECC Root CA 2024" + "SECOM TLS RSA Root CA 2024" + "Telia EC TLS Root CA v3" + "Telia RSA TLS Root CA v3" The following certificate authorities were removed (-): - "Atos TrustedRoot 2011" - "Entrust Root Certification Authority" - "SecureSign Root CA12" - "ePKI Root Certification Authority" -- Julien Cristau <[email protected]> Sun, 16 Aug 2026 23:04:36 +0200
abef437160 maya ca-certificates: Fix PLIST
f496efcf5f nia ca-certificates: Remove compromised certificates.
https://emudhra.we-have-a-problem.com/ PR security/60908
aee3b9b748 kim ca-certificates: Update to 20260601
ca-certificates (20260601) unstable; urgency=medium * Remove ca-certificates-local example (closes: #988912, #1127101). * Update Mozilla certificate authority bundle to version 2.86 The following certificate authority was added (+): + e-Szigno TLS Root CA 2023 The following certificate authorities were removed (-): - QuoVadis Root CA 2 - QuoVadis Root CA 3 - DigiCert Assured ID Root CA - DigiCert Global Root CA - DigiCert High Assurance EV Root CA - SwissSign Gold CA - G2 - SecureTrust CA - Secure Global CA - COMODO Certification Authority - Certigna - certSIGN ROOT CA - AffirmTrust Commercial - AffirmTrust Networking - AffirmTrust Premium - AffirmTrust Premium ECC - TeliaSonera Root CA v1 …