notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine

Bot filter coming soon

To deter bots pegging the database CPU to 100%, a bot testing filter to be added to the website. This should not affect newsfeeds etc. Anubis seems light-weight - it is already in use within the FreeBSD Project. This notice is just a heads up in case you see something odd. This notice will be updated after Anubis is installed.

Port details on branch 2024Q1
ca_root_nss Root certificate bundle from the Mozilla Project
3.108 security on this many watch lists=134 search for ports that depend on this port An older version of this port was marked as vulnerable. Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 3.108Version of this port present on the latest quarterly branch.
Maintainer: ports-secteam@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2007-07-06 21:39:01
Last Update: 2025-02-22 09:34:09
Commit Hash: f3b0945
People watching this port, also watch:: curl, libiconv, libxml2, expat, pcre
License: MPL20
Description:
Root certificates from certificate authorities included in the Mozilla NSS library and thus in Firefox and Thunderbird. This port directly tracks the version of NSS in the security/nss port.
cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (13 items)
Collapse this list.
  1. /usr/local/share/licenses/ca_root_nss-3.108/catalog.mk
  2. /usr/local/share/licenses/ca_root_nss-3.108/LICENSE
  3. /usr/local/share/licenses/ca_root_nss-3.108/MPL20
  4. share/certs/ca-root-nss.crt
  5. @sample etc/ssl/cert.pem.sample
  6. openssl/cert.pem
  7. /etc/ssl/cert.pem
  8. @postexec certctl rehash
  9. @postunexec certctl rehash
  10. @postexec [ ! -e /usr/local/bin/cert-sync ] || /usr/local/bin/cert-sync --quiet %D/share/certs/ca-root-nss.crt
  11. @owner
  12. @group
  13. @mode
Collapse this list.
Dependency lines:
  • ca_root_nss>0:security/ca_root_nss
Conflicts:
CONFLICTS_INSTALL:
  • ca-roots-[0-9]*
To install the port:
cd /usr/ports/security/ca_root_nss/ && make install clean
To add the package, run one of these commands:
  • pkg install security/ca_root_nss
  • pkg install ca_root_nss
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: ca_root_nss
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1739303198 SHA256 (nss-3.108.tar.gz) = a0f6fcb5dbadc1635b43827517a979e3a6d005d0788527802a6b31e2c5f66eec SIZE (nss-3.108.tar.gz) = 76630022

Packages (timestamps in pop-ups are UTC):
ca_root_nss
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest3.1083.1083.583.1083.108-3.58-
FreeBSD:13:quarterly3.1083.1083.89.13.1083.1083.93_23.93_23.93_2
FreeBSD:14:latest3.1083.1083.873.1083.1083.89.1-3.89.1
FreeBSD:14:quarterly3.1083.108-3.1083.1083.93_23.93_23.93_2
FreeBSD:15:latest3.1083.108n/a3.108n/a3.93_23.93_23.93_2
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. perl5>=5.36<5.37 : lang/perl5.36
This port is required by:
for Build
  1. devel/librest
  2. devel/please
  3. devel/qca
  4. lang/julia
  5. misc/outside
  6. net-im/telepathy-gabble
  7. sysutils/kleene-daemon

Deleted ports which required this port:

Expand this list of 5 deleted ports
  1. devel/qca-legacy*
  2. devel/qca-qt5*
  3. net/s3ql*
  4. net-im/empathy*
  5. security/mate-keyring*
  6. Collapse this list of deleted ports.
for Fetch
  1. archivers/plakar
  2. audio/gonic
  3. databases/pg_tileserv
  4. databases/rqlite
  5. databases/usql
  6. deskutils/pet
  7. devel/athens
Expand this list (101 items / 94 hidden - sorry, this count includes any deleted ports)
  1. Collapse this list).
  2. devel/atlantis
  3. devel/capslock
  4. devel/etcd34
  5. devel/etcd35
  6. devel/etcd36
  7. devel/gilt
  8. devel/git-town
  9. devel/glab
  10. devel/gomigrate
  11. devel/lefthook
  12. devel/protobuf-go
  13. devel/revive
  14. dns/dnsx
  15. dns/mosdns
  16. editors/orbiton
  17. ftp/wush
  18. games/tetrigo
  19. graphics/oidn
  20. irc/soju
  21. lang/gptscript
  22. mail/mox
  23. math/ttmath
  24. misc/fabric
  25. misc/gollama
  26. misc/ls-lint
  27. misc/ollama
  28. net/frp
  29. net/gotify-cli
  30. net/k6
  31. net/mihomo
  32. net/sing-box
  33. net/yggdrasil
  34. net-im/dendrite
  35. net-mgmt/bind_exporter
  36. net-mgmt/check_syncthing
  37. net-mgmt/check_wg
  38. net-mgmt/mysqld_exporter
  39. net-mgmt/netdata-go
  40. net-mgmt/prometheus2
  41. security/certspotter
  42. security/gauth
  43. security/git-credential-gopass
  44. security/naabu
  45. security/openbao
  46. security/sops
  47. security/sshesame
  48. security/trufflehog
  49. security/vouch-proxy
  50. security/zlint
  51. sysutils/alloy
  52. sysutils/cilium
  53. sysutils/envconsul
  54. sysutils/govmomi
  55. sysutils/infracost
  56. sysutils/kapp
  57. sysutils/kubo-go
  58. sysutils/kustomize
  59. sysutils/nerdctl
  60. sysutils/nomad
  61. sysutils/nomad-pot-driver
  62. sysutils/popeye
  63. sysutils/terraform
  64. textproc/codesearch
  65. textproc/dasel
  66. textproc/jqp
  67. textproc/moar
  68. textproc/termshot
  69. textproc/xlnt
  70. textproc/zed
  71. textproc/zq
  72. www/fabio
  73. www/ghostunnel
  74. www/httpx
  75. www/lux
  76. www/opengist
  77. www/owncast
  78. www/xurls
  79. www/youtube
  80. Collapse this list.

Deleted ports which required this port:

Expand this list of 16 deleted ports
  1. devel/gitlab-metrics-exporter*
  2. devel/pydio-packr*
  3. editors/o*
  4. finance/cointop*
  5. net/clash*
  6. net/nebula*
  7. net-mgmt/chronograf*
  8. security/tfsec*
  9. sysutils/container-diff*
  10. sysutils/ipfs-go*
  11. sysutils/zrepl*
  12. sysutils/zrepl-dsh2dsh*
  13. textproc/mergestat*
  14. www/annie*
  15. www/cliqz*
  16. www/grafana9*
  17. Collapse this list of deleted ports.
for Patch
  1. deskutils/calibre
for Run
  1. audio/teamspeak3-server
  2. databases/mongosh
  3. devel/brz
  4. devel/gitlab-runner
  5. devel/hs-hoogle
  6. devel/hs-spago
  7. devel/librest
Expand this list (137 items / 130 hidden - sorry, this count includes any deleted ports)
  1. Collapse this list).
  2. devel/py-libioc
  3. devel/qca
  4. devel/stack
  5. dns/dnscrypt-proxy2
  6. dns/inadyn
  7. dns/nextdns
  8. dns/void-zones-tools
  9. games/linux-steam-utils
  10. games/prismlauncher
  11. graphics/variety
  12. irc/ircd-hybrid
  13. lang/gauche
  14. lang/julia
  15. lang/mono5.10
  16. lang/mono5.20
  17. lang/mono6.8
  18. mail/claws-mail
  19. mail/courier
  20. mail/msmtp
  21. mail/py-postfix-mta-sts-resolver
  22. mail/rspamd
  23. mail/rspamd-devel
  24. mail/sylpheed
  25. multimedia/jellyfin
  26. multimedia/tautulli
  27. net/boinc-client
  28. net/bsdec2-image-upload
  29. net/cloudflared
  30. net/hblock
  31. net/mosquitto
  32. net/ooni-mini
  33. net/ooni-probe-cli
  34. net/openntpd
  35. net/rclone
  36. net/rubygem-grpc
  37. net/rubygem-grpc-gitlab
  38. net/speedtest
  39. net-im/conduit
  40. net-im/py-matrix-synapse
  41. net-im/telepathy-gabble
  42. net-mgmt/arpwatch
  43. net-mgmt/netmagis-database
  44. net-mgmt/netmagis-www
  45. net-mgmt/py-arouteserver
  46. net-p2p/lidarr
  47. net-p2p/prowlarr
  48. net-p2p/radarr
  49. net-p2p/readarr
  50. net-p2p/sonarr
  51. ports-mgmt/freebsd-bugzilla-cli
  52. security/bitwarden-cli
  53. security/cargo-audit
  54. security/go-cve-dictionary
  55. security/headscale
  56. security/lego
  57. security/netbird
  58. security/pulledpork
  59. security/py-certbot-dns-cpanel
  60. security/snowflake-tor
  61. security/ssllabs-scan
  62. security/tailscale
  63. security/webtunnel-tor
  64. sysutils/amazon-ssm-agent
  65. sysutils/azure-agent
  66. sysutils/iocage-devel
  67. sysutils/minipot
  68. sysutils/ucspi-ssl
  69. sysutils/vagrant
  70. textproc/py-asciinema
  71. textproc/py-sphinx
  72. www/adguardhome
  73. www/gist
  74. www/grafana
  75. www/mattermost-server
  76. www/midori
  77. www/netsurf
  78. www/node18
  79. www/node20
  80. www/node22
  81. www/node24
  82. www/onlyoffice-documentserver
  83. www/py-woob
  84. Collapse this list.

Deleted ports which required this port:

Expand this list of 48 deleted ports
  1. deskutils/google-gadgets*
  2. devel/bazaar-ng*
  3. devel/bzr*
  4. devel/php-composer2*
  5. devel/py-libiocage*
  6. devel/qca-legacy*
  7. devel/qca-qt5*
  8. filesystems/httpfs*
  9. ftp/curl-hiphop*
  10. mail/fetchmail64*
  11. mail/opensmtpd-devel*
  12. multimedia/mps-youtube*
  13. multimedia/plexpy*
  14. net/py-matrix-synapse*
  15. net/qt4-network*
  16. net/rubygem-grpc124*
  17. net/rubygem-grpc130*
  18. net/rubygem-grpc142*
  19. net/s3ql*
  20. net-im/biboumi*
  21. net-im/empathy*
  22. net-p2p/sonarr-devel*
  23. ports-mgmt/redports-node*
  24. security/acme-client*
  25. security/mate-keyring*
  26. security/protonvpn-cli*
  27. sysutils/fusefs-httpfs*
  28. sysutils/osquery*
  29. sysutils/py-iocage*
  30. sysutils/py3-iocage*
  31. sysutils/ucspi-ssl-tls*
  32. textproc/py-sphinx18*
  33. textproc/py3-asciinema*
  34. textproc/py3-sphinx*
  35. www/ffsend*
  36. www/grafana7*
  37. www/grafana8*
  38. www/grafana9*
  39. www/neon29*
  40. www/node10*
  41. www/node12*
  42. www/node14*
  43. www/node16*
  44. www/node19*
  45. www/node21*
  46. www/node23*
  47. www/node8*
  48. www/py-weboob*
  49. Collapse this list of deleted ports.
* - deleted ports are only shown under the This port is required by section. It was harder to do for the Required section. Perhaps later...

Configuration Options:
===> The following configuration options are available for ca_root_nss-3.108: ETCSYMLINK=on: Add symlinks to default bundle locations ===> Use 'make config' to modify these settings
Options name:
security_ca_root_nss
USES:
perl5 ssl:build
pkg-message:
For install:
FreeBSD does not, and can not warrant that the certification authorities whose certificates are included in this package have in any way been audited for trustworthiness or RFC 3647 compliance. Assessment and verification of trust is the complete responsibility of the system administrator. This package installs symlinks to support root certificate discovery for software that either uses other cryptographic libraries than OpenSSL, or use OpenSSL but do not follow recommended practice. If you prefer to do this manually, replace the following symlinks with either an empty file or your site-local certificate bundle. * /etc/ssl/cert.pem * /usr/local/etc/ssl/cert.pem * /usr/local/openssl/cert.pem
Master Sites:
Expand this list (2 items)
Collapse this list.
  1. https://archive.mozilla.org/pub/security/nss/releases/NSS_3_108_RTM/src/
  2. https://download.cdn.mozilla.net/pub/security/nss/releases/NSS_3_108_RTM/src/
Collapse this list.

There are no commits on branch 2024Q1 for this port