summaryrefslogtreecommitdiff
path: root/security/mozilla-rootcerts
AgeCommit message (Collapse)AuthorFilesLines
2016-07-21Update to certificates of 20160610.wiz2-9/+8
Bump version.
2016-03-03gawk will corrupt the output data stream in multibyte locales,dsainty1-2/+5
so force the locale to "C". Fixes mozilla-rootcerts under Linux.
2016-02-06Create and install a file called "share/mozilla-rootcerts/cacert.pem"tron2-6/+16
which contains all the trusted certificates in PEM format. This file can e.g. be used with command line clients like "curl" or "wget" to validate certificates.
2015-11-04Add SHA512 digests for distfiles for security categoryagc1-1/+2
Problems found locating distfiles: Package f-prot-antivirus6-fs-bin: missing distfile fp-NetBSD.x86.32-fs-6.2.3.tar.gz Package f-prot-antivirus6-ws-bin: missing distfile fp-NetBSD.x86.32-ws-6.2.3.tar.gz Package libidea: missing distfile libidea-0.8.2b.tar.gz Package openssh: missing distfile openssh-7.1p1-hpn-20150822.diff.bz2 Package uvscan: missing distfile vlp4510e.tar.Z Otherwise, existing SHA1 digests verified and found to be the same on the machine holding the existing distfiles (morden). All existing SHA1 digests retained for now as an audit trail.
2015-10-18set HOMEPAGE to the hg revision log URL to make it easier to figure out iftnn1-2/+2
the package needs an update.
2015-09-12mention mozilla-rootcerts-openssltnn1-1/+2
2015-09-11Update to 20150804.tnn2-8/+7
Added: C=CN, O=China Financial Certification Authority, CN=CFCA EV ROOT C=DE, O=Deutscher Sparkassen Verlag GmbH, OU=S-TRUST Certification Services, \ CN=S-TRUST Universal Root CA C=FR, O=Certinomis, OU=0002 433998903, CN=Certinomis - Root CA C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden EV Root CA C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden Root CA - G3 C=TR, L=Ankara, \ O=T?RKTRUST Bilgi ?leti?im ve Bili?im G?venli?i Hizmetleri A.?., \ CN=T?RKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5 C=TR, L=Ankara, \ O=T?RKTRUST Bilgi ?leti?im ve Bili?im G?venli?i Hizmetleri A.?., \ CN=T?RKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6 C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, \ OU=(c) 2009 Entrust, Inc. - for authorized use only, \ CN=Entrust Root Certification Authority - G2 C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, \ OU=(c) 2012 Entrust, Inc. - for authorized use only, \ CN=Entrust Root Certification Authority - EC1 C=US, O=IdenTrust, CN=IdenTrust Commercial Root CA 1 C=US, O=IdenTrust, CN=IdenTrust Public Sector Root CA 1 Removed: C=DE, O=TC TrustCenter GmbH, OU=TC TrustCenter Class 2 CA, \ CN=TC TrustCenter Class 2 CA II C=DE, O=TC TrustCenter GmbH, OU=TC TrustCenter Universal CA, \ CN=TC TrustCenter Universal CA I C=NO, O=Buypass AS-983163327, CN=Buypass Class 3 CA 1 C=TR, O=Elektronik Bilgi Guvenligi A.S., \ CN=e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi CN=SG TRUST SERVICES RACINE, OU=0002 43525289500022, O=SG TRUST SERVICES, C=FR CN=T?RKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?, C=TR, L=ANKARA, \ O=(c) 2005 T?RKTRUST Bilgi ?leti?im ve Bili?im G?venli?i Hizmetleri A.?.
2015-04-18Add support for -d destdir to the mozilla-rootcerts installer script.dholland2-11/+14
2015-02-16Update to mozilla-rootcerts-20141117.tnn2-8/+7
Added root certs: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Secure Server CA - G2 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust ECC Certification Authority C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority OU=GlobalSign ECC Root CA - R4, O=GlobalSign, CN=GlobalSign OU=GlobalSign ECC Root CA - R5, O=GlobalSign, CN=GlobalSign Removed root certs: C=US, O=America Online Inc., CN=America Online Root Certification Authority 1 C=US, O=America Online Inc., CN=America Online Root Certification Authority 2 C=US, O=GTE Corporation, OU=GTE CyberTrust Solutions, Inc., CN=GTE CyberTrust Global Root C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA/emailAddress=premium-server@thawte.com C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Server CA/emailAddress=server-certs@thawte.com
2015-01-27Fix typo in previous.jperkin1-2/+2
2015-01-27Ensure we call the full path to the script. Bump PKGREVISION.jperkin2-5/+5
2014-09-06Improve detection of untrusted certificates. From John D. Bakerwiz2-7/+12
in PR 49176. Bump PKGREVISION.
2014-08-25Update certs to more recent version. The License changed to MPL 2.0.mlelstv2-9/+8
2014-08-10Use 'mkdir -p' in case ${PREFIX}/etc doesn't exist yet.wiz1-2/+2
2014-03-03reset CHECK_BUILTIN.openssl to avoid side effect.obache1-1/+2
2013-03-15Add a new subcommand "mozilla-rootcerts install" that unpacks and installsbsiegert3-18/+44
the certificates with a single command. ok gdt, wiz
2013-03-15Substitute the openssl tool path in a different manner, so that pkgsrcfhajny1-2/+3
openssl will be used if not builtin. Fixes problem with incorrect cert hashes generated on (at least) SunOS.
2013-01-31Update mozilla root certificates to 20121229 version.wiz2-6/+6
2012-10-23Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.asau1-3/+1
2011-09-08mozilla has switched to a scheme of explicitly distrusting certificatesdrochner3-12/+21
in its stable branch (ie firefox-6.0.2) too, so deal with this in the mozilla-rootcerts script (this is not great - it depends on syntactic details of the file where it should better use checksums, but the perl script which is distributed with "curl" works the same way), and switch back to the certificate list in CVS HEAD
2011-08-31update to the version distributed with firefox-6.0.1, in responsedrochner2-6/+11
to the recent discovery of false certificates from diginotar (Recent versions from the source repository don't work, see the comment in Makefile.)
2011-06-10add a hint for gnupg2 users (as claws-mail with the s/mime plugin)drochner1-1/+10
2011-03-11add some clarification about the difference between OpenSSL and GnuTLS,drochner1-2/+9
and guidance for users of the latter
2011-01-31Add MESSAGE to give a hint on what to do (~copy/pasted from script)jym1-0/+11
2010-11-13Follow HTTP redirects to new HOMEPAGEs and/or MASTER_SITES.shattered1-2/+2
2010-10-22Update to 20100827. Set LICENSE.wiz3-9/+10
Fix bug reported by Makoto Yamakura in PR 43992.
2010-03-21Reset maintainer, developer lost his commit bit.wiz1-2/+2
2009-11-03Simplify awk usage to make it work with nawk, from Matthias Pfaller inwiz3-17/+8
PR 42238. While here, update to latest certificates from mozilla.
2009-06-14Remove @dirrm entries from PLISTsjoerg1-2/+1
2008-06-22DESTDIR support.joerg1-3/+5
2007-09-20Import security/mozilla-rootcerts:jlam5-0/+224
This package provides a script which can be used to extract the root CA certificates distributed by the Mozilla Project into the current working directory and to rehash the existing certificates. The directory can be used by most SSL-aware programs that expect a "CA certificate path".