git: ae001a7a25a6 - main - Mk/Uses: Remove certs.mk

Reply: list_freebsd_a_bluerosetech.com: "Re: git: ae001a7a25a6 - main - Mk/Uses: Remove certs.mk"
Reply: Mathieu Arnold : "Re: git: ae001a7a25a6 - main - Mk/Uses: Remove certs.mk"
Reply: Älven : "Re: git: ae001a7a25a6 - main - Mk/Uses: Remove certs.mk"
Go to: [ bottom of page ] [ top of archives ] [ this month ]
From: Yuri Victorovich <yuri_at_FreeBSD.org>
Date: Tue, 10 Mar 2026 02:03:02 UTC
The branch main has been updated by yuri:

URL: https://cgit.FreeBSD.org/ports/commit/?id=ae001a7a25a6b245575c5138a7f085fa9917da30

commit ae001a7a25a6b245575c5138a7f085fa9917da30
Author:     Yuri Victorovich <yuri@FreeBSD.org>
AuthorDate: 2026-03-10 01:56:54 +0000
Commit:     Yuri Victorovich <yuri@FreeBSD.org>
CommitDate: 2026-03-10 01:56:54 +0000

    Mk/Uses: Remove certs.mk
    
    It was a useful shorthand for the security/ca_root_nss dependency.
    However, several people disagreed.
    
    Can anybody explain why libedit.mk is there? It is also a one string
    substitution. Same with libarchive.mk.
---
 Mk/Uses/certs.mk                             | 54 ----------------------------
 cad/xyce/Makefile                            |  5 +--
 misc/claude-code/Makefile                    |  5 +--
 misc/github-copilot-cli/Makefile             |  5 +--
 misc/github-copilot-language-server/Makefile |  5 +--
 misc/grok-cli/Makefile                       |  5 +--
 misc/nanocoder/Makefile                      |  5 +--
 net/boinc-client/Makefile                    |  2 +-
 www/py-yt-dlp-ejs/Makefile                   |  5 +--
 9 files changed, 22 insertions(+), 69 deletions(-)

diff --git a/Mk/Uses/certs.mk b/Mk/Uses/certs.mk
deleted file mode 100644
index 755b79b507b0..000000000000
--- a/Mk/Uses/certs.mk
+++ /dev/null
@@ -1,54 +0,0 @@
-# Handle dependency on the ca_root_nss certificate bundle
-#
-# Feature:	certs
-# Usage:	USES=certs:args
-# Valid ARGS:	fetch, build, run, test
-#
-# At least one argument is required.
-#
-# fetch		ca_root_nss is added as FETCH_DEPENDS
-# build		ca_root_nss is added as BUILD_DEPENDS
-# run		ca_root_nss is added as RUN_DEPENDS
-# test		ca_root_nss is added as TEST_DEPENDS
-#
-# Examples:
-#	USES=certs:fetch,run	# Use certificates for fetch and runtime
-#	USES=certs:build	# Use certificates at build time
-#
-# MAINTAINER:	yuri@FreeBSD.org
-
-.if !defined(_INCLUDE_USES_CERTS_MK)
-_INCLUDE_USES_CERTS_MK=	yes
-
-# certificate bundle location and port
-_CERTS_DEP=	${LOCALBASE}/share/certs/ca-root-nss.crt:security/ca_root_nss
-
-# all valid arguments
-_CERTS_ALL_ARGS=	fetch build run test
-
-.  if empty(certs_ARGS)
-IGNORE=	USES=certs requires at least one argument (${_CERTS_ALL_ARGS})
-.  endif
-
-.  if !empty(certs_ARGS:Nfetch:Nbuild:Nrun:Ntest)
-IGNORE=	USES=certs has invalid arguments: ${certs_ARGS}. Valid arguments are: ${_CERTS_ALL_ARGS}
-.  endif
-
-# Set dependencies based on arguments
-.  if ${certs_ARGS:Mfetch}
-FETCH_DEPENDS+=	${_CERTS_DEP}
-.  endif
-
-.  if ${certs_ARGS:Mbuild}
-BUILD_DEPENDS+=	${_CERTS_DEP}
-.  endif
-
-.  if ${certs_ARGS:Mrun}
-RUN_DEPENDS+=	${_CERTS_DEP}
-.  endif
-
-.  if ${certs_ARGS:Mtest}
-TEST_DEPENDS+=	${_CERTS_DEP}
-.  endif
-
-.endif # _INCLUDE_USES_CERTS_MK
diff --git a/cad/xyce/Makefile b/cad/xyce/Makefile
index f1856afb787b..3d1b816c03eb 100644
--- a/cad/xyce/Makefile
+++ b/cad/xyce/Makefile
@@ -24,9 +24,10 @@ LIB_DEPENDS=	libblas.so:math/blas \
 		libumfpack.so:math/suitesparse-umfpack
 TEST_DEPENDS=	git:devel/git \
 		${PYNUMPY} \
-		${PYTHON_PKGNAMEPREFIX}scipy>0:science/py-scipy@${PY_FLAVOR}
+		${PYTHON_PKGNAMEPREFIX}scipy>0:science/py-scipy@${PY_FLAVOR} \
+		${LOCALBASE}/share/certs/ca-root-nss.crt:security/ca_root_nss
 
-USES=		autoreconf bison certs:test gmake fortran libtool localbase perl5 python:test # GNU tools should be used for 7.5 and on until the cmake build is declared stable
+USES=		autoreconf bison gmake fortran libtool localbase perl5 python:test # GNU tools should be used for 7.5 and on until the cmake build is declared stable
 USE_CXXSTD=	c++14 # otherwise configure fails because of c++14 features like std::conditional_t
 USE_CXXSTD=	c++17 # workaround for https://github.com/Xyce/Xyce/issues/97, which occurred when Trilinos was updated to 15.1.0
 USE_LDCONFIG=	yes
diff --git a/misc/claude-code/Makefile b/misc/claude-code/Makefile
index 8d8a1481117e..13cb5184c8a3 100644
--- a/misc/claude-code/Makefile
+++ b/misc/claude-code/Makefile
@@ -7,10 +7,11 @@ COMMENT=	Agentic coding tool from Anthropic that lives in your terminal
 WWW=		https://github.com/anthropics/claude-code
 
 FETCH_DEPENDS=	npm:www/npm \
-		jq:textproc/jq
+		jq:textproc/jq \
+		${LOCALBASE}/share/certs/ca-root-nss.crt:security/ca_root_nss
 RUN_DEPENDS=	rg:textproc/ripgrep
 
-USES=		certs:fetch nodejs:run
+USES=		nodejs:run
 
 NO_BUILD=	yes
 NO_ARCH=	yes
diff --git a/misc/github-copilot-cli/Makefile b/misc/github-copilot-cli/Makefile
index 4ab8e2d59107..ece42cf331c3 100644
--- a/misc/github-copilot-cli/Makefile
+++ b/misc/github-copilot-cli/Makefile
@@ -15,7 +15,8 @@ ONLY_FOR_ARCHS=		aarch64 amd64
 ONLY_FOR_ARCHS_REASON=	binaries are installed in folders with architecture encoded in them, patches are welcome to fix this limitation
 
 FETCH_DEPENDS=	npm:www/npm \
-		jq:textproc/jq
+		jq:textproc/jq \
+		${LOCALBASE}/share/certs/ca-root-nss.crt:security/ca_root_nss
 BUILD_DEPENDS=	npm:www/npm \
 		libsecret>0:security/libsecret \
 		vips>=8.17.2:graphics/vips
@@ -23,7 +24,7 @@ RUN_DEPENDS=	libsecret>0:security/libsecret \
 		rg:textproc/ripgrep \
 		vips>=8.17.2:graphics/vips
 
-USES=		certs:fetch nodejs:run pkgconfig python:build
+USES=		nodejs:run pkgconfig python:build
 
 WRKSRC=		${WRKDIR}/copilot-${DISTVERSION}
 
diff --git a/misc/github-copilot-language-server/Makefile b/misc/github-copilot-language-server/Makefile
index c720360de6ba..c3ac07844891 100644
--- a/misc/github-copilot-language-server/Makefile
+++ b/misc/github-copilot-language-server/Makefile
@@ -16,7 +16,8 @@ ONLY_FOR_ARCHS=		aarch64 amd64
 ONLY_FOR_ARCHS_REASON=	binaries are installed in folders with architecture encoded in them, patches are welcome to fix this limitation
 
 FETCH_DEPENDS=	npm:www/npm \
-		jq:textproc/jq
+		jq:textproc/jq \
+		${LOCALBASE}/share/certs/ca-root-nss.crt:security/ca_root_nss
 BUILD_DEPENDS=	npm:www/npm \
 		krb5>0:security/krb5 \
 		sqlite3>0:databases/sqlite3
@@ -24,7 +25,7 @@ RUN_DEPENDS=	krb5>0:security/krb5 \
 		sqlite3>0:databases/sqlite3 \
 		ripgrep>0:textproc/ripgrep
 
-USES=		certs:fetch nodejs:run pkgconfig python:build
+USES=		nodejs:run pkgconfig python:build
 
 WRKSRC=		${WRKDIR}/copilot-language-server-${DISTVERSION}
 
diff --git a/misc/grok-cli/Makefile b/misc/grok-cli/Makefile
index da9fa21c9968..de00ae8c371b 100644
--- a/misc/grok-cli/Makefile
+++ b/misc/grok-cli/Makefile
@@ -10,10 +10,11 @@ LICENSE=	MIT
 LICENSE_FILE=	${WRKSRC}/node_modules/${PACKAGE_NAME}/LICENSE
 
 FETCH_DEPENDS=	npm:www/npm \
-		jq:textproc/jq
+		jq:textproc/jq \
+		${LOCALBASE}/share/certs/ca-root-nss.crt:security/ca_root_nss
 RUN_DEPENDS=	rg:textproc/ripgrep
 
-USES=		certs:fetch nodejs:run
+USES=		nodejs:run
 
 NO_BUILD=	yes
 NO_ARCH=	yes
diff --git a/misc/nanocoder/Makefile b/misc/nanocoder/Makefile
index 3fda02340865..fa8d84b8c857 100644
--- a/misc/nanocoder/Makefile
+++ b/misc/nanocoder/Makefile
@@ -9,10 +9,11 @@ WWW=		https://github.com/Nano-Collective/nanocoder
 LICENSE=	MIT
 
 FETCH_DEPENDS=	npm:www/npm \
-		jq:textproc/jq
+		jq:textproc/jq \
+		${LOCALBASE}/share/certs/ca-root-nss.crt:security/ca_root_nss
 BUILD_DEPENDS=	npm:www/npm
 
-USES=		certs:fetch nodejs:run
+USES=		nodejs:run
 
 PACKAGE_NAME=	@nanocollective/nanocoder
 
diff --git a/net/boinc-client/Makefile b/net/boinc-client/Makefile
index 5627ceb87d4d..53af41bea60a 100644
--- a/net/boinc-client/Makefile
+++ b/net/boinc-client/Makefile
@@ -60,7 +60,7 @@ X11_DESC=		Build graphics API
 
 CLIENT_LIB_DEPENDS=		libcurl.so:ftp/curl \
 				libfreetype.so:print/freetype2
-CLIENT_USES=			certs:run
+CLIENT_RUN_DEPENDS=		${LOCALBASE}/share/certs/ca-root-nss.crt:security/ca_root_nss
 CLIENT_USE=			RC_SUBR=boinc-client
 CLIENT_CONFIGURE_ENABLE=	client
 
diff --git a/www/py-yt-dlp-ejs/Makefile b/www/py-yt-dlp-ejs/Makefile
index 75325b4efb45..777314d90101 100644
--- a/www/py-yt-dlp-ejs/Makefile
+++ b/www/py-yt-dlp-ejs/Makefile
@@ -15,14 +15,15 @@ WWW=		https://github.com/yt-dlp/yt-dlp-ejs
 LICENSE=	UNLICENSE
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
-FETCH_DEPENDS=	npm:www/npm
+FETCH_DEPENDS=	npm:www/npm \
+		${LOCALBASE}/share/certs/ca-root-nss.crt:security/ca_root_nss
 BUILD_DEPENDS=	deno:www/deno \
 		npm:www/npm \
 		${PYTHON_PKGNAMEPREFIX}hatch-vcs>=0:devel/py-hatch-vcs@${PY_FLAVOR} \
 		${PYTHON_PKGNAMEPREFIX}hatchling>0:devel/py-hatchling@${PY_FLAVOR}
 RUN_DEPENDS=	deno:www/deno
 
-USES=		certs:fetch python
+USES=		python
 USE_PYTHON=	pep517 autoplist pytest
 
 SHEBANG_GLOB=	*.py