cvs commit: ports/security/ca-roots Makefile

Simon L. Nielsen simon at FreeBSD.org
Thu Jun 7 19:45:30 UTC 2007


On 2007.06.07 19:41:15 +0000, Simon L. Nielsen wrote:
> simon       2007-06-07 19:41:15 UTC
> 
>   FreeBSD ports repository
> 
>   Modified files:
>     security/ca-roots    Makefile 
>   Log:
>   Deprecated and set one month expiration since it's not supported by
>   the FreeBSD Security Officer anymore.
>   
>   The current ca-roots port makes promises with regard to CA verification
>   which the current Security Officer (and deputy) do not want to make.

brooks@ has a new port which has a list of CA's (I think he said it
was extracted on-the-fly from OpenSSL but I can't recall for sure),
which will should be committed soonish.  This will not be a direct
replacement for ca-roots wrt. guarantees of the CA's, but can probably
be used in most cases where ca-roots is used today.

-- 
Simon L. Nielsen


More information about the cvs-all mailing list