From owner-freebsd-gecko@FreeBSD.ORG Mon Aug 18 11:15:57 2014 Return-Path: Delivered-To: gecko@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 9E538FCC for ; Mon, 18 Aug 2014 11:15:57 +0000 (UTC) Received: from mail-wi0-x229.google.com (mail-wi0-x229.google.com [IPv6:2a00:1450:400c:c05::229]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 2EF3339D8 for ; Mon, 18 Aug 2014 11:15:56 +0000 (UTC) Received: by mail-wi0-f169.google.com with SMTP id n3so3523027wiv.0 for ; Mon, 18 Aug 2014 04:15:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=300.nl; s=tip; h=from:content-type:subject:message-id:date:to:mime-version; bh=a6Hbb39pD1ZUmuRehIlYvYtsEMw7drXk0DLwI0SRuBg=; b=Ygf31nfLDZBxzMpdd1VHnHULzA95wDAvPud1wmrfNc97DEws9mL+dNa4dew6dY2Gkd MuInae07INBaPiqsVw2IdSi12Lc9pYXl93wybtRQzYIZR3tCIukNi7q3mczkWZ15nV0a 7CKP1j3dzTKY4YcuyBCqdikSDu6q5K/DNrLLw= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:content-type:subject:message-id:date:to :mime-version; bh=a6Hbb39pD1ZUmuRehIlYvYtsEMw7drXk0DLwI0SRuBg=; b=Tas9WF6klcBaW8V+eb+UJYF5GuK7X1OLFCTO8w0c3u7lvojh+1lWOr/Iu6vBkriOVb nfp+xDW1r68sw9VRfm5k6ahTwSflM41MAFcpEM1Jxe3+iqF+HQoXJ5PJ/N6s/QCBKECb 1d70QOi2Sa2FV53/Ktu1COE/a9fsTwfiHn7LnomnS4x9m3L0hazdEkSRuXwRkg5coQqJ af4e1UsabuaZyIRNOHukxqMHKkThdwKB2pj0L8rKSXQOQf2Dzorklk9n2YC0nu0EUKbj iBbRhg4LsoEaljjR4I61x6RJZwML/or2dT+pNzkqUSemoCqZRpdKuG6qt3+BzQmwyOi0 7PNQ== X-Gm-Message-State: ALoCoQlC+6MIYfh6SfbCD0p42TEhDzV0p7/GJWOqzdcstbrReS77i0YRJmyt+fHn/9LeXV2iYFJQ X-Received: by 10.180.101.162 with SMTP id fh2mr39627223wib.11.1408360554641; Mon, 18 Aug 2014 04:15:54 -0700 (PDT) Received: from [10.2.7.100] (kantoor.transip.nl. [80.69.69.100]) by mx.google.com with ESMTPSA id 10sm41509287wjx.26.2014.08.18.04.15.53 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Mon, 18 Aug 2014 04:15:53 -0700 (PDT) From: Johan Schuijt-Li Content-Type: multipart/signed; boundary="Apple-Mail=_9A572078-92D8-4E3B-84CF-290148DC2455"; protocol="application/pgp-signature"; micalg=pgp-sha1 Subject: ca_root_nss default options Message-Id: Date: Mon, 18 Aug 2014 13:15:50 +0200 To: gecko@FreeBSD.org Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) X-Mailer: Apple Mail (2.1878.6) X-BeenThere: freebsd-gecko@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Gecko Rendering Engine issues List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Aug 2014 11:15:57 -0000 --Apple-Mail=_9A572078-92D8-4E3B-84CF-290148DC2455 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=windows-1252 Hey, In my direct surroundings I have a lot of FreeBSD users which are all = having issues that by default using tools like git and fetch don=92t = work on FreeBDS 10 (at least, not sure about other releases) for very = common sites like twitter, google and github over https. I learned that this is easily fixed by enabling the ETCSYMLINK option in = the ca_root_nss port (because it does seem everybody knows where to find = this port to install these certificates). Are there any considerations left to not enable this by default? Cause = all unknowing pkg users don=92t have a chance to enable this option. - Johan --Apple-Mail=_9A572078-92D8-4E3B-84CF-290148DC2455 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- iQEcBAEBAgAGBQJT8eBmAAoJEB/IKYBb7NlWVlUIAIJ9kexDs2AhzaUoZynPWOJF SVeOjhoOMwAR4uZLnveDQoff6c55KVcJ5nokntX6nGnZhSCU6ozt6rAu2yzsB0Kf B606mITwEGRSeEPEy7d7DHsPYQQXJ7ffF3GRYhcaOK0XYI99jFDckVCFS2Efi80a CU179oFTPLLN64s1XoxMag8mzp7TeIsg8hieHYfcTymN5461NiIYOU8es6FBSu7k 0IAFMVvynVu5f+WMmKNBfOuTvZJetFo2oUfAbYhJMcyObPtEA+v7Edz5bNPNVvvc 0w6BPHZjLqq2zsuNNhXjypr4p8a4sz/MJzaXrl2V+dZkL8Gg4jF75Ogovub5b+I= =GGte -----END PGP SIGNATURE----- --Apple-Mail=_9A572078-92D8-4E3B-84CF-290148DC2455--