[Bug 285611] Uses/go.mk: remove FETCH_DEPENDS=ca_root_nss

From: <bugzilla-noreply_at_freebsd.org>
Date: Mon, 26 May 2025 06:28:17 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=285611

Michael Osipov <michaelo@FreeBSD.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |michaelo@FreeBSD.org

--- Comment #6 from Michael Osipov <michaelo@FreeBSD.org> ---
(In reply to Adam Weinberger from comment #5)

This is the same pain as with php-composer or rust-cargo. The only way I see is
to find the OpenSSL codespot like I did for cargo (git2-rs) or use truss to
whittle down.

This needs to be analyzed:
https://github.com/golang/go/blob/3fd729b2a14a7efcf08465cbea60a74da5457f06/src/crypto/x509/root_unix.go.
Especially where it is used. It does the same ugly thing like cargo: Trying
being smarter than the system: https://github.com/rust-lang/git2-rs/issues/1129

-- 
You are receiving this mail because:
You are on the CC list for the bug.