FreeBSD Ports

security/ca_root_nss 3.131.1

Root certificate bundle from the Mozilla Project

Repository
FreeBSD ports
Maintainer
[email protected]
Last update
Commit
7051196b4a
License
MPL20
Categories
security
Package size
244.6 KiB, 636.3 KiB installed

Description

Root certificates from certificate authorities included in the Mozilla NSS library and thus in Firefox and Thunderbird.

This port directly tracks the version of NSS in the security/nss port.

Install

As a binary package — by origin, or by package name:

pkg install security/ca_root_nss
pkg install ca_root_nss

From the ports tree:

cd /usr/ports/security/ca_root_nss/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	ca_root_nss>0:security/ca_root_nss

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repositoryaarch64amd64armv6armv7i386
FreeBSD:14:latest3.1313.1313.873.1153.131
FreeBSD:14:quarterly3.1313.131n/a3.1083.131
FreeBSD:15:latest3.1313.131n/a3.1153.115
FreeBSD:15:quarterly3.1313.131n/an/an/a
FreeBSD:16:latest3.1303.131n/an/an/a
FreeBSD:16:quarterlyn/an/an/an/an/a

Dependencies

The Makefile names none itself; they come from USES and USE_*.

The full lists below include those, and their dependencies in turn.

All build dependencies 1
Required by 823

The first 100 are listed.

Configuration

Options name: security_ca_root_nss

OptionDefaultDescription
ETCSYMLINKonAdd symlinks to default bundle locations
USES
perl5 ssl:build
Service scripts
none

Message after installing

FreeBSD does not, and can not warrant that the certification authorities
whose certificates are included in this package have in any way been
audited for trustworthiness or RFC 3647 compliance.

Assessment and verification of trust is the complete responsibility of
the system administrator.

This package installs symlinks to support root certificate discovery
for software that either uses other cryptographic libraries than
OpenSSL, or use OpenSSL but do not follow recommended practice.

If you prefer to do this manually, replace the following symlinks with
either an empty file or your site-local certificate bundle.

  * /etc/ssl/cert.pem
  * /usr/local/etc/ssl/cert.pem
  * /usr/local/openssl/cert.pem

Files

pkg-plist 4
  • %%CERTDIR%%/ca-root-nss.crt
  • @sample etc/ssl/cert.pem.sample
  • openssl/cert.pem
  • %%ETCSYMLINK%%/etc/ssl/cert.pem
distinfo 1
FileSizeSHA256
nss-3.131.1.tar.gz8.8058024e+07b1dbc1d9e7f3f8455dfb6d58ec8f7229d8a8450c629a9e69ef2ef6081f359056
Master sites 1
  • MOZILLA/security/nss/releases/${DISTNAME:tu:C/[-.]/_/g}_RTM/src

Commit history 9

DateCommitCreditsLog message
7051196b4a Dag-Erling Smørgrav security/ca_root_nss: Update to 1.131.1
MFH: 2026Q4 Reviewed by: joneum Differential Revision: https://reviews.freebsd.org/D60905
efbe42f06e Jochen Neumeister security/ca_root_nss: Update to 3.131
Changelog: https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/irYWOLiRoMk Sponsored by: Netzkommune GmbH
46d8c6a97d Jochen Neumeister security/ca_root_nss: Update to 3.130
Changelog: https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/568wTpFXTxI Sponsored by: Netzkommune GmbH
f2f3940dcd Jochen Neumeister security/ca_root_nss: Update to 3.129
Changes to the certificate store since 3.128: - Removed Izenpe.com (server distrust after 2026-04-15, Mozilla bug 2017322: the attribute was set on the PKCS#11 trust object instead of the certificate object, so it did not take effect until now) Changelog: https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/ux-yy4Yk33U MFH: 2026Q3 Sponsored by: Netzkommune GmbH
1993fb29be Dag-Erling Smørgrav security/ca_root_nss: Update to 3.128
MFH: 2026Q3 Reviewed by: joneum Differential Revision: https://reviews.freebsd.org/D59224

The latest 5 of 9 in the history this site was built from.