notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine

Bot filter coming soon

To deter bots pegging the database CPU to 100%, a bot testing filter to be added to the website. This should not affect newsfeeds etc. Anubis seems light-weight - it is already in use within the FreeBSD Project. This notice is just a heads up in case you see something odd. This notice will be updated after Anubis is installed.

Port details on branch 2023Q4
ca_root_nss Root certificate bundle from the Mozilla Project
3.108 security on this many watch lists=135 search for ports that depend on this port An older version of this port was marked as vulnerable. Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 3.108Version of this port present on the latest quarterly branch.
Maintainer: ports-secteam@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2007-07-06 21:39:01
Last Update: 2025-02-22 09:34:09
Commit Hash: f3b0945
People watching this port, also watch:: curl, libiconv, libxml2, expat, pcre
License: MPL20
Description:
Root certificates from certificate authorities included in the Mozilla NSS library and thus in Firefox and Thunderbird. This port directly tracks the version of NSS in the security/nss port.
cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (13 items)
Collapse this list.
  1. /usr/local/share/licenses/ca_root_nss-3.108/catalog.mk
  2. /usr/local/share/licenses/ca_root_nss-3.108/LICENSE
  3. /usr/local/share/licenses/ca_root_nss-3.108/MPL20
  4. share/certs/ca-root-nss.crt
  5. @sample etc/ssl/cert.pem.sample
  6. openssl/cert.pem
  7. /etc/ssl/cert.pem
  8. @postexec certctl rehash
  9. @postunexec certctl rehash
  10. @postexec [ ! -e /usr/local/bin/cert-sync ] || /usr/local/bin/cert-sync --quiet %D/share/certs/ca-root-nss.crt
  11. @owner
  12. @group
  13. @mode
Collapse this list.
Dependency lines:
  • ca_root_nss>0:security/ca_root_nss
Conflicts:
CONFLICTS_INSTALL:
  • ca-roots-[0-9]*
To install the port:
cd /usr/ports/security/ca_root_nss/ && make install clean
To add the package, run one of these commands:
  • pkg install security/ca_root_nss
  • pkg install ca_root_nss
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: ca_root_nss
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1739303198 SHA256 (nss-3.108.tar.gz) = a0f6fcb5dbadc1635b43827517a979e3a6d005d0788527802a6b31e2c5f66eec SIZE (nss-3.108.tar.gz) = 76630022

Packages (timestamps in pop-ups are UTC):
ca_root_nss
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest3.1083.1083.583.1083.108-3.58-
FreeBSD:13:quarterly3.1083.1083.89.13.1083.1083.93_23.93_23.93_2
FreeBSD:14:latest3.1083.1083.873.1083.1083.89.1-3.89.1
FreeBSD:14:quarterly3.1083.108-3.1083.1083.93_23.93_23.93_2
FreeBSD:15:latest3.1083.108n/a3.108n/a3.93_23.93_23.93_2
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. perl5>=5.36<5.37 : lang/perl5.36
This port is required by:
for Build
  1. devel/librest
  2. devel/please
  3. devel/qca
  4. lang/julia
  5. net-im/telepathy-gabble
  6. sysutils/kleene-daemon

Deleted ports which required this port:

Expand this list of 5 deleted ports
  1. devel/qca-legacy*
  2. devel/qca-qt5*
  3. net/s3ql*
  4. net-im/empathy*
  5. security/mate-keyring*
  6. Collapse this list of deleted ports.
for Fetch
  1. archivers/plakar
  2. audio/gonic
  3. databases/pg_tileserv
  4. databases/rqlite
  5. databases/usql
  6. deskutils/pet
  7. devel/api-linter
Expand this list (130 items / 123 hidden - sorry, this count includes any deleted ports)
  1. Collapse this list).
  2. devel/athens
  3. devel/atlantis
  4. devel/capslock
  5. devel/etcd34
  6. devel/etcd35
  7. devel/etcd36
  8. devel/gilt
  9. devel/git-town
  10. devel/gitea-act_runner
  11. devel/gitlab-shell
  12. devel/gitleaks
  13. devel/glab
  14. devel/golangci-lint
  15. devel/gomigrate
  16. devel/gopls
  17. devel/grpc-gateway
  18. devel/lefthook
  19. devel/please
  20. devel/protobuf-go
  21. devel/revive
  22. devel/terraform-ls
  23. dns/coredns
  24. dns/dnsx
  25. dns/mosdns
  26. dns/q-dns
  27. editors/orbiton
  28. filesystems/zrepl-dsh2dsh
  29. ftp/wush
  30. games/tetrigo
  31. graphics/oidn
  32. graphics/wallhaven-cli
  33. irc/soju
  34. lang/gptscript
  35. mail/mox
  36. math/ttmath
  37. misc/fabric
  38. misc/gollama
  39. misc/ls-lint
  40. misc/ollama
  41. net/frp
  42. net/gotify-cli
  43. net/k6
  44. net/mihomo
  45. net/sing-box
  46. net/yggdrasil
  47. net-im/dendrite
  48. net-mgmt/bind_exporter
  49. net-mgmt/check_syncthing
  50. net-mgmt/check_wg
  51. net-mgmt/mysqld_exporter
  52. net-mgmt/netdata-go
  53. net-mgmt/prometheus-bird-exporter
  54. net-mgmt/prometheus2
  55. security/certspotter
  56. security/cosign
  57. security/gauth
  58. security/git-credential-gopass
  59. security/lego
  60. security/naabu
  61. security/openbao
  62. security/osv-scanner
  63. security/sops
  64. security/sshesame
  65. security/step-certificates
  66. security/step-cli
  67. security/trufflehog
  68. security/vouch-proxy
  69. security/xray-core
  70. security/zlint
  71. sysutils/alloy
  72. sysutils/cilium
  73. sysutils/cloud-nuke
  74. sysutils/envconsul
  75. sysutils/govmomi
  76. sysutils/helmfile
  77. sysutils/infracost
  78. sysutils/ipmi_exporter
  79. sysutils/kapp
  80. sysutils/kubo-go
  81. sysutils/kustomize
  82. sysutils/nerdctl
  83. sysutils/nomad
  84. sysutils/nomad-pot-driver
  85. sysutils/opentofu
  86. sysutils/popeye
  87. sysutils/terraform
  88. textproc/codesearch
  89. textproc/dasel
  90. textproc/gitlab-elasticsearch-indexer
  91. textproc/go-yq
  92. textproc/jqp
  93. textproc/moar
  94. textproc/termshot
  95. textproc/vacuum
  96. textproc/xlnt
  97. textproc/ytt
  98. textproc/zed
  99. textproc/zq
  100. www/fabio
  101. www/ghostunnel
  102. www/httpx
  103. www/lux
  104. www/opengist
  105. www/owncast
  106. www/tgpt
  107. www/xurls
  108. www/youtube
  109. Collapse this list.

Deleted ports which required this port:

Expand this list of 16 deleted ports
  1. devel/gitlab-metrics-exporter*
  2. devel/pydio-packr*
  3. editors/o*
  4. finance/cointop*
  5. net/clash*
  6. net/nebula*
  7. net-mgmt/chronograf*
  8. security/tfsec*
  9. sysutils/container-diff*
  10. sysutils/ipfs-go*
  11. sysutils/zrepl*
  12. sysutils/zrepl-dsh2dsh*
  13. textproc/mergestat*
  14. www/annie*
  15. www/cliqz*
  16. www/grafana9*
  17. Collapse this list of deleted ports.
for Patch
  1. deskutils/calibre
for Run
  1. audio/teamspeak3-server
  2. databases/mongosh
  3. devel/brz
  4. devel/gitlab-runner
  5. devel/hs-hoogle
  6. devel/hs-spago
  7. devel/librest
Expand this list (137 items / 130 hidden - sorry, this count includes any deleted ports)
  1. Collapse this list).
  2. devel/py-libioc
  3. devel/qca
  4. devel/stack
  5. dns/dnscrypt-proxy2
  6. dns/inadyn
  7. dns/nextdns
  8. dns/void-zones-tools
  9. games/linux-steam-utils
  10. games/prismlauncher
  11. graphics/variety
  12. irc/ircd-hybrid
  13. lang/gauche
  14. lang/julia
  15. lang/mono5.10
  16. lang/mono5.20
  17. lang/mono6.8
  18. mail/claws-mail
  19. mail/courier
  20. mail/msmtp
  21. mail/py-postfix-mta-sts-resolver
  22. mail/rspamd
  23. mail/rspamd-devel
  24. mail/sylpheed
  25. multimedia/jellyfin
  26. multimedia/tautulli
  27. net/boinc-client
  28. net/bsdec2-image-upload
  29. net/cloudflared
  30. net/hblock
  31. net/mosquitto
  32. net/ooni-mini
  33. net/ooni-probe-cli
  34. net/openntpd
  35. net/rclone
  36. net/rubygem-grpc
  37. net/rubygem-grpc-gitlab
  38. net/speedtest
  39. net-im/biboumi
  40. net-im/conduit
  41. net-im/py-matrix-synapse
  42. net-im/telepathy-gabble
  43. net-mgmt/arpwatch
  44. net-mgmt/netmagis-database
  45. net-mgmt/netmagis-www
  46. net-mgmt/py-arouteserver
  47. net-p2p/lidarr
  48. net-p2p/prowlarr
  49. net-p2p/radarr
  50. net-p2p/readarr
  51. net-p2p/sonarr
  52. ports-mgmt/freebsd-bugzilla-cli
  53. security/bitwarden-cli
  54. security/cargo-audit
  55. security/go-cve-dictionary
  56. security/headscale
  57. security/lego
  58. security/netbird
  59. security/pulledpork
  60. security/py-certbot-dns-cpanel
  61. security/snowflake-tor
  62. security/ssllabs-scan
  63. security/tailscale
  64. security/webtunnel-tor
  65. sysutils/amazon-ssm-agent
  66. sysutils/azure-agent
  67. sysutils/iocage-devel
  68. sysutils/minipot
  69. sysutils/ucspi-ssl
  70. sysutils/vagrant
  71. textproc/py-asciinema
  72. textproc/py-sphinx
  73. www/adguardhome
  74. www/ffsend
  75. www/gist
  76. www/grafana
  77. www/mattermost-server
  78. www/midori
  79. www/netsurf
  80. www/node18
  81. www/node20
  82. www/node22
  83. www/node23
  84. www/node24
  85. www/onlyoffice-documentserver
  86. www/py-woob
  87. Collapse this list.

Deleted ports which required this port:

Expand this list of 45 deleted ports
  1. deskutils/google-gadgets*
  2. devel/bazaar-ng*
  3. devel/bzr*
  4. devel/php-composer2*
  5. devel/py-libiocage*
  6. devel/qca-legacy*
  7. devel/qca-qt5*
  8. filesystems/httpfs*
  9. ftp/curl-hiphop*
  10. mail/fetchmail64*
  11. mail/opensmtpd-devel*
  12. multimedia/mps-youtube*
  13. multimedia/plexpy*
  14. net/py-matrix-synapse*
  15. net/qt4-network*
  16. net/rubygem-grpc124*
  17. net/rubygem-grpc130*
  18. net/rubygem-grpc142*
  19. net/s3ql*
  20. net-im/empathy*
  21. net-p2p/sonarr-devel*
  22. ports-mgmt/redports-node*
  23. security/acme-client*
  24. security/mate-keyring*
  25. security/protonvpn-cli*
  26. sysutils/fusefs-httpfs*
  27. sysutils/osquery*
  28. sysutils/py-iocage*
  29. sysutils/py3-iocage*
  30. sysutils/ucspi-ssl-tls*
  31. textproc/py-sphinx18*
  32. textproc/py3-asciinema*
  33. textproc/py3-sphinx*
  34. www/grafana7*
  35. www/grafana8*
  36. www/grafana9*
  37. www/neon29*
  38. www/node10*
  39. www/node12*
  40. www/node14*
  41. www/node16*
  42. www/node19*
  43. www/node21*
  44. www/node8*
  45. www/py-weboob*
  46. Collapse this list of deleted ports.
* - deleted ports are only shown under the This port is required by section. It was harder to do for the Required section. Perhaps later...

Configuration Options:
===> The following configuration options are available for ca_root_nss-3.108: ETCSYMLINK=on: Add symlinks to default bundle locations ===> Use 'make config' to modify these settings
Options name:
security_ca_root_nss
USES:
perl5 ssl:build
pkg-message:
For install:
FreeBSD does not, and can not warrant that the certification authorities whose certificates are included in this package have in any way been audited for trustworthiness or RFC 3647 compliance. Assessment and verification of trust is the complete responsibility of the system administrator. This package installs symlinks to support root certificate discovery for software that either uses other cryptographic libraries than OpenSSL, or use OpenSSL but do not follow recommended practice. If you prefer to do this manually, replace the following symlinks with either an empty file or your site-local certificate bundle. * /etc/ssl/cert.pem * /usr/local/etc/ssl/cert.pem * /usr/local/openssl/cert.pem
Master Sites:
Expand this list (2 items)
Collapse this list.
  1. https://archive.mozilla.org/pub/security/nss/releases/NSS_3_108_RTM/src/
  2. https://download.cdn.mozilla.net/pub/security/nss/releases/NSS_3_108_RTM/src/
Collapse this list.

There are no commits on branch 2023Q4 for this port