Date: Sat, 06 Jun 2015 02:54:21 -0500 From: Bryan Drewery <bdrewery@FreeBSD.org> To: Kubilay Kocak <koobs@FreeBSD.org>, ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: Re: svn commit: r388657 - head/security/ca_root_nss Message-ID: <5572A72D.9020909@FreeBSD.org> In-Reply-To: <201506060741.t567fqBH070690@svn.freebsd.org> References: <201506060741.t567fqBH070690@svn.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --14SqbFGl59R3gQ8U3Dn0QXO80dgIf20Cn Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 6/6/2015 2:41 AM, Kubilay Kocak wrote: > Author: koobs > Date: Sat Jun 6 07:41:51 2015 > New Revision: 388657 > URL: https://svnweb.freebsd.org/changeset/ports/388657 >=20 > Log: > security/ca_root_nss: Enable certificate verification (for Base OpenS= SL) > =20 > Enable the ETCSYMLINK option so that SSL certificate verification is > enabled by default for OpenSSL in base. > =20 > This change is the third in a set of changes [1][2] that improves the= > default configuration and behaviour of client software relying on > OpenSSL for SSL/TLS and certificate verification. > =20 > A symlink is installed which points to the root certificate bundle in= > the location that OpenSSL in base looks for them, as configured at bu= ild > time [2]. > =20 > This allows any and all software utilising SSL_CTX_load_verify_locati= ons > function to verify SSL certificates by default after installation of > this package. > =20 > [1] https://svnweb.freebsd.org/changeset/ports/372629 > [2] https://svnweb.freebsd.org/changeset/ports/378720 > =20 > PR: 189811 196357 > Requested by: many > Submitted by: dreamcat4 gmail com > Approved by: maintainer timeout (>1 year) >=20 Thank you. --=20 Regards, Bryan Drewery --14SqbFGl59R3gQ8U3Dn0QXO80dgIf20Cn Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBAgAGBQJVcqctAAoJEDXXcbtuRpfPU6IIAKI7wgr5+hBSJpG4MfkQNsro 5B0Bkw6tAmsJK8QYGpKgA5sFVqyA/VqII9QE7DsubX09ma4bLkQIBhCUl3/IXWI3 OqqvIySmpVRs8ly2DzQZvbn9Js1HZtJvu7hEGXxqzkvNjGRTlv8X/CgflPw4wkw1 NdMFK8XgjWWwopu4pBZO6pKGmKRpZV4PXQF8tupB9QqSs2qryQGX89+O4p1shBi5 ZZiFAmyvDDFnCWW/08rS2tnaD4DYCI1ZGOvLs5BYqIFcu3C/Hd497eDS189ytoQw QrcAhkIC7aoAPt3kisHisKf8IbqptygQzeG2XnDRY8RK+X9qdjDmq0fxApJjaYY= =/sFH -----END PGP SIGNATURE----- --14SqbFGl59R3gQ8U3Dn0QXO80dgIf20Cn--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5572A72D.9020909>