Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 02 Jun 2020 20:38:39 +0000
From:      bugzilla-noreply@freebsd.org
To:        ports-bugs@FreeBSD.org
Subject:   [Bug 246944] [patch] dont install Win certs bundle, depend on security/ca_root_nss
Message-ID:  <bug-246944-7788@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D246944

            Bug ID: 246944
           Summary: [patch] dont install Win certs bundle, depend on
                    security/ca_root_nss
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: ports-secteam@FreeBSD.org
          Reporter: ps.ports@smyrak.com
                CC: portmaster@bsdforge.com
          Assignee: ports-secteam@FreeBSD.org
             Flags: maintainer-feedback?(ports-secteam@FreeBSD.org)

Created attachment 215179
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D215179&action=
=3Dedit
ports patch with additional upstream patch

claws port installs a %%DATADIR%%/ca-certificates.crt bundle, yet according=
=20
to the application code (src/common/ssl.c:196), it is used only by Windows=
=20
builds.=20

Instead of doing so, make the port run depend on security/ca_root_nss and a=
dd=20
a tiny patch that handles a situation, where operator have decided to insta=
ll=20
security/ca_root_nss without its knob ETCSYMLINK turned on, letting claws=20
search the CA bundle both in /etc/ssl/cert.pem as if the symlink was enable=
d,=20
and it ${LOCALBASE}/share/certs/ca-root-nss.crt

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-246944-7788>