security/ca_root_nss and /usr/local/etc/ssl/cert.pem

From: Andrea Venturoli <>
Date: Fri, 08 Jul 2022 06:42:04 UTC

I've got this file (/usr/local/etc/ssl/cert.pem) in the way, I keep 
deleting it and it keeps coming up again everytime I upgrade this package.

This puzzles me a bit...

 From Makefile:
> do-install-ETCSYMLINK-on:
>         ${MKDIR} ${STAGEDIR}/etc/ssl
>         ${LN} -sf ../..${PREFIX}/${CERTDIR}/ca-root-nss.crt ${STAGEDIR}/etc/ssl/cert.pem
>         ${LN} -sf ../../${CERTDIR}/ca-root-nss.crt ${STAGEDIR}${PREFIX}/etc/ssl/cert.pem
>         ${LN} -sf ../${CERTDIR}/ca-root-nss.crt ${STAGEDIR}${PREFIX}/openssl/cert.pem

And pkg-plist:
> %%ETCSYMLINK%%/etc/ssl/cert.pem

I build the port in Poudriere and I turned the ETCSYMLINK option off, 
but still this file comes up.

Am I doing something wrong?
Is this expected behaviour/a bug/a feature?
Anything to try?

  bye & Thanks