16:48 simon 

Retire the ca-roots ports, which expired long ago.

The port is deprecated since it is not supported by the FreeBSD
Security Officer anymore.  The reason for this is that the ca-roots
port makes promises with regard to CA verification which the current
Security Officer (and deputy) do not want to make.

For people who need a general root certificate list see the
security/ca_root_ns, but note that the difference in guarantees with
regard to which CAs are included in ca_root_ns vs. ca-roots.  The
ca_root_ns port basically makes no guarantees other than that the
certificates comes from the Mozilla project.

Note that the ca-roots MOVED file entry on purpose does not point at
ca_root_ns due to the change in CA guarantees.

With hat:       security-officer

19:41 simon 

Deprecated and set one month expiration since it's not supported by
the FreeBSD Security Officer anymore.

The current ca-roots port makes promises with regard to CA verification
which the current Security Officer (and deputy) do not want to make.

With hat:       so
Discussed with: cperciva (some time ago)

10:46 erwin 

Reassign to secteam@

PR:             111371
Submitted by:   Nils Vogels <nivo+kw+ports.bfa274@is-root.com> (maintainer)

08:47 erwin 

Hand maintainership to submitter

PR:             98097
Submitted by:   Nils Vogels <nivo+kw+ports.bfa274@is-root.com>

15:11 vs 

Prune expired certificates (including one that will expire in 4 days during
the Ports Freeze)

PR:             ports/93276
Approved by:    secteam (remko)

14:46 pav 

- Add CAcert.org certificates

PR:             ports/89483
Submitted by:   Peter Jeremy <PeterJeremy@optushome.com.au>

18:59 knu 

De-pkg-comment.

02:31 nsayer 

Release all my ports.

kris made it clear that by his measure I'm not doing my job as a port
maintainer. Far be it from me to be an obstruction to the project.

01:24 nsayer 

Oops. The plist entry isn't enough. We also need to do it in the   makefile.    

22:56 nsayer 

Make a symlink in /etc/ssl    

18:36 nsayer 

ca-roots port -- a list of SSL Certificate Authority root certs