git: 94d525cb7bc4 - main - security/p11-kit: use base system consolidated anchor lists

The branch main has been updated by novel:

URL: https://cgit.FreeBSD.org/ports/commit/?id=94d525cb7bc4bf294fcaf503ab09206471b4e7a0

commit 94d525cb7bc4bf294fcaf503ab09206471b4e7a0
Author:     geoffroy desvernay <dgeo@centrale-med.fr>
AuthorDate: 2026-08-26 17:58:08 +0000
Commit:     Roman Bogorodskiy <novel@FreeBSD.org>
CommitDate: 2026-09-20 12:16:03 +0000

    security/p11-kit: use base system consolidated anchor lists
    
    Currently p11-kit already uses base-system certificates from /usr/share/certs
    (since 8672992ef7f072f87304e953231de77179143f1d 2023-02-01 11:05:18 +0000).
    
    Base system's certctl tool allows administrator to add locally trusted anchors
    in /usr/local/share/certs, but p11-kit's current behaviour will ignore them.
    
    Use system's consolidated certificates in /etc/ssl/certs and
    /etc/ssl/untrusted instead of /usr/share/certs/trusted and
    /usr/share/certs/untrusted.
    
    These directories (/etc/ssl/ ones) are managed by system's certctl tool,
    and reflects the same content plus admin's managed trusted/untrusted certs.
    
    This change should not break any current behaviour on FreeBSD > 12.2.
    
    This is also coherent with debian's behaviour (on debian, p11_trust_paths
    is set to /etc/ssl/certs/ca-certificates.crt, updated by system's
    update-ca-certificate which allows custom anchors listed in
    /etc/ca-certificates.conf).
    
    PR:             297759
    Approved by:    novel (maintainer)
    Differential Revision:  https://reviews.freebsd.org/D59200
---
 security/p11-kit/Makefile | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/security/p11-kit/Makefile b/security/p11-kit/Makefile
index 7d8f0e04a8f0..922c1ab3977f 100644
--- a/security/p11-kit/Makefile
+++ b/security/p11-kit/Makefile
@@ -1,5 +1,6 @@
 PORTNAME=	p11-kit
 DISTVERSION=	0.26.5
+PORTREVISION=	1
 CATEGORIES=	security devel
 MASTER_SITES=	https://github.com/p11-glue/${PORTNAME}/releases/download/${DISTVERSION}/
 
@@ -48,7 +49,7 @@ post-install:
 	${MV} ${STAGEDIR}${PREFIX}/etc/pkcs11/pkcs11.conf.example ${STAGEDIR}${EXAMPLESDIR}
 	${RMDIR} ${STAGEDIR}${PREFIX}/etc/pkcs11
 	${MKDIR} ${STAGEDIR}${DATADIR}/certs
-	${LN} -s /usr/share/certs/trusted ${STAGEDIR}${DATADIR}/certs/anchors
-	${LN} -s /usr/share/certs/untrusted ${STAGEDIR}${DATADIR}/certs/blocklist
+	${LN} -s /etc/ssl/certs ${STAGEDIR}${DATADIR}/certs/anchors
+	${LN} -s /etc/ssl/untrusted ${STAGEDIR}${DATADIR}/certs/blocklist
 
 .include <bsd.port.mk>