Date: Sun, 29 Jun 2008 16:48:01 +0000 (UTC) From: "Simon L. Nielsen" <simon@FreeBSD.org> To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: ports MOVED ports/security Makefile ports/security/ca-roots Makefile pkg-descr pkg-plist ports/security/ca-roots/files ca-root.crt Message-ID: <200806291648.m5TGm1K2078849@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
simon 2008-06-29 16:48:01 UTC
FreeBSD ports repository
Modified files:
. MOVED
security Makefile
Removed files:
security/ca-roots Makefile pkg-descr pkg-plist
security/ca-roots/files ca-root.crt
Log:
Retire the ca-roots ports, which expired long ago.
The port is deprecated since it is not supported by the FreeBSD
Security Officer anymore. The reason for this is that the ca-roots
port makes promises with regard to CA verification which the current
Security Officer (and deputy) do not want to make.
For people who need a general root certificate list see the
security/ca_root_ns, but note that the difference in guarantees with
regard to which CAs are included in ca_root_ns vs. ca-roots. The
ca_root_ns port basically makes no guarantees other than that the
certificates comes from the Mozilla project.
Note that the ca-roots MOVED file entry on purpose does not point at
ca_root_ns due to the change in CA guarantees.
With hat: security-officer
Revision Changes Path
1.1637 +2 -1 ports/MOVED
1.979 +0 -1 ports/security/Makefile
1.11 +0 -26 ports/security/ca-roots/Makefile (dead)
1.5 +0 -4036 ports/security/ca-roots/files/ca-root.crt (dead)
1.2 +0 -11 ports/security/ca-roots/pkg-descr (dead)
1.3 +0 -5 ports/security/ca-roots/pkg-plist (dead)
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200806291648.m5TGm1K2078849>