notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine

Bot filter coming soon

To deter bots pegging the database CPU to 100%, a bot testing filter to be added to the website. This should not affect newsfeeds etc. Anubis seems light-weight - it is already in use within the FreeBSD Project. This notice is just a heads up in case you see something odd. This notice will be updated after Anubis is installed.

Port details on branch 2024Q2
ca_root_nss Root certificate bundle from the Mozilla Project
3.108 security on this many watch lists=135 search for ports that depend on this port An older version of this port was marked as vulnerable. Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 3.108Version of this port present on the latest quarterly branch.
Maintainer: ports-secteam@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2007-07-06 21:39:01
Last Update: 2025-02-22 09:34:09
Commit Hash: f3b0945
People watching this port, also watch:: curl, libiconv, libxml2, expat, pcre
License: MPL20
Description:
Root certificates from certificate authorities included in the Mozilla NSS library and thus in Firefox and Thunderbird. This port directly tracks the version of NSS in the security/nss port.
cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (13 items)
Collapse this list.
  1. /usr/local/share/licenses/ca_root_nss-3.108/catalog.mk
  2. /usr/local/share/licenses/ca_root_nss-3.108/LICENSE
  3. /usr/local/share/licenses/ca_root_nss-3.108/MPL20
  4. share/certs/ca-root-nss.crt
  5. @sample etc/ssl/cert.pem.sample
  6. openssl/cert.pem
  7. /etc/ssl/cert.pem
  8. @postexec certctl rehash
  9. @postunexec certctl rehash
  10. @postexec [ ! -e /usr/local/bin/cert-sync ] || /usr/local/bin/cert-sync --quiet %D/share/certs/ca-root-nss.crt
  11. @owner
  12. @group
  13. @mode
Collapse this list.
Dependency lines:
  • ca_root_nss>0:security/ca_root_nss
Conflicts:
CONFLICTS_INSTALL:
  • ca-roots-[0-9]*
To install the port:
cd /usr/ports/security/ca_root_nss/ && make install clean
To add the package, run one of these commands:
  • pkg install security/ca_root_nss
  • pkg install ca_root_nss
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: ca_root_nss
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1739303198 SHA256 (nss-3.108.tar.gz) = a0f6fcb5dbadc1635b43827517a979e3a6d005d0788527802a6b31e2c5f66eec SIZE (nss-3.108.tar.gz) = 76630022

Packages (timestamps in pop-ups are UTC):
ca_root_nss
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest3.1083.1083.583.1083.108-3.58-
FreeBSD:13:quarterly3.1083.1083.89.13.1083.1083.93_23.93_23.93_2
FreeBSD:14:latest3.1083.1083.873.1083.1083.89.1-3.89.1
FreeBSD:14:quarterly3.1083.108-3.1083.1083.93_23.93_23.93_2
FreeBSD:15:latest3.1083.108n/a3.108n/a3.93_23.93_23.93_2
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. perl5>=5.36<5.37 : lang/perl5.36
This port is required by:
for Build
  1. devel/librest
  2. devel/please
  3. devel/qca
  4. lang/julia
  5. net-im/telepathy-gabble
  6. sysutils/kleene-daemon

Deleted ports which required this port:

Expand this list of 5 deleted ports
  1. devel/qca-legacy*
  2. devel/qca-qt5*
  3. net/s3ql*
  4. net-im/empathy*
  5. security/mate-keyring*
  6. Collapse this list of deleted ports.
for Fetch
  1. archivers/plakar
  2. audio/gonic
  3. databases/pg_tileserv
  4. databases/rqlite
  5. databases/usql
  6. deskutils/pet
  7. devel/api-linter
Expand this list (126 items / 119 hidden - sorry, this count includes any deleted ports)
  1. Collapse this list).
  2. devel/athens
  3. devel/atlantis
  4. devel/capslock
  5. devel/etcd34
  6. devel/etcd35
  7. devel/etcd36
  8. devel/gilt
  9. devel/git-town
  10. devel/gitea-act_runner
  11. devel/gitlab-shell
  12. devel/gitleaks
  13. devel/glab
  14. devel/golangci-lint
  15. devel/gomigrate
  16. devel/grpc-gateway
  17. devel/lefthook
  18. devel/please
  19. devel/protobuf-go
  20. devel/revive
  21. dns/coredns
  22. dns/dnsx
  23. dns/mosdns
  24. dns/q-dns
  25. editors/orbiton
  26. filesystems/zrepl-dsh2dsh
  27. ftp/wush
  28. games/tetrigo
  29. graphics/oidn
  30. graphics/wallhaven-cli
  31. irc/soju
  32. lang/gptscript
  33. mail/mox
  34. math/ttmath
  35. misc/fabric
  36. misc/gollama
  37. misc/ls-lint
  38. misc/ollama
  39. net/frp
  40. net/gotify-cli
  41. net/k6
  42. net/mihomo
  43. net/sing-box
  44. net/yggdrasil
  45. net-im/dendrite
  46. net-mgmt/bind_exporter
  47. net-mgmt/check_syncthing
  48. net-mgmt/check_wg
  49. net-mgmt/mysqld_exporter
  50. net-mgmt/netdata-go
  51. net-mgmt/prometheus-bird-exporter
  52. net-mgmt/prometheus2
  53. security/certspotter
  54. security/cosign
  55. security/gauth
  56. security/git-credential-gopass
  57. security/lego
  58. security/naabu
  59. security/openbao
  60. security/osv-scanner
  61. security/sops
  62. security/sshesame
  63. security/step-certificates
  64. security/step-cli
  65. security/trufflehog
  66. security/vouch-proxy
  67. security/xray-core
  68. security/zlint
  69. sysutils/alloy
  70. sysutils/cilium
  71. sysutils/cloud-nuke
  72. sysutils/envconsul
  73. sysutils/govmomi
  74. sysutils/infracost
  75. sysutils/ipmi_exporter
  76. sysutils/kapp
  77. sysutils/kubo-go
  78. sysutils/kustomize
  79. sysutils/nerdctl
  80. sysutils/nomad
  81. sysutils/nomad-pot-driver
  82. sysutils/opentofu
  83. sysutils/popeye
  84. sysutils/terraform
  85. textproc/codesearch
  86. textproc/dasel
  87. textproc/gitlab-elasticsearch-indexer
  88. textproc/jqp
  89. textproc/moar
  90. textproc/termshot
  91. textproc/vacuum
  92. textproc/xlnt
  93. textproc/ytt
  94. textproc/zed
  95. textproc/zq
  96. www/fabio
  97. www/ghostunnel
  98. www/httpx
  99. www/lux
  100. www/opengist
  101. www/owncast
  102. www/tgpt
  103. www/xurls
  104. www/youtube
  105. Collapse this list.

Deleted ports which required this port:

Expand this list of 16 deleted ports
  1. devel/gitlab-metrics-exporter*
  2. devel/pydio-packr*
  3. editors/o*
  4. finance/cointop*
  5. net/clash*
  6. net/nebula*
  7. net-mgmt/chronograf*
  8. security/tfsec*
  9. sysutils/container-diff*
  10. sysutils/ipfs-go*
  11. sysutils/zrepl*
  12. sysutils/zrepl-dsh2dsh*
  13. textproc/mergestat*
  14. www/annie*
  15. www/cliqz*
  16. www/grafana9*
  17. Collapse this list of deleted ports.
for Patch
  1. deskutils/calibre
for Run
  1. audio/teamspeak3-server
  2. databases/mongosh
  3. devel/brz
  4. devel/gitlab-runner
  5. devel/hs-hoogle
  6. devel/hs-spago
  7. devel/librest
Expand this list (137 items / 130 hidden - sorry, this count includes any deleted ports)
  1. Collapse this list).
  2. devel/py-libioc
  3. devel/qca
  4. devel/stack
  5. dns/dnscrypt-proxy2
  6. dns/inadyn
  7. dns/nextdns
  8. dns/void-zones-tools
  9. games/linux-steam-utils
  10. games/prismlauncher
  11. graphics/variety
  12. irc/ircd-hybrid
  13. lang/gauche
  14. lang/julia
  15. lang/mono5.10
  16. lang/mono5.20
  17. lang/mono6.8
  18. mail/claws-mail
  19. mail/courier
  20. mail/msmtp
  21. mail/py-postfix-mta-sts-resolver
  22. mail/rspamd
  23. mail/rspamd-devel
  24. mail/sylpheed
  25. multimedia/jellyfin
  26. multimedia/tautulli
  27. net/boinc-client
  28. net/bsdec2-image-upload
  29. net/cloudflared
  30. net/hblock
  31. net/mosquitto
  32. net/ooni-mini
  33. net/ooni-probe-cli
  34. net/openntpd
  35. net/rclone
  36. net/rubygem-grpc
  37. net/rubygem-grpc-gitlab
  38. net/speedtest
  39. net-im/conduit
  40. net-im/py-matrix-synapse
  41. net-im/telepathy-gabble
  42. net-mgmt/arpwatch
  43. net-mgmt/netmagis-database
  44. net-mgmt/netmagis-www
  45. net-mgmt/py-arouteserver
  46. net-p2p/lidarr
  47. net-p2p/prowlarr
  48. net-p2p/radarr
  49. net-p2p/readarr
  50. net-p2p/sonarr
  51. ports-mgmt/freebsd-bugzilla-cli
  52. security/bitwarden-cli
  53. security/cargo-audit
  54. security/go-cve-dictionary
  55. security/headscale
  56. security/lego
  57. security/netbird
  58. security/pulledpork
  59. security/py-certbot-dns-cpanel
  60. security/snowflake-tor
  61. security/ssllabs-scan
  62. security/tailscale
  63. security/webtunnel-tor
  64. sysutils/amazon-ssm-agent
  65. sysutils/azure-agent
  66. sysutils/iocage-devel
  67. sysutils/minipot
  68. sysutils/ucspi-ssl
  69. sysutils/vagrant
  70. textproc/py-asciinema
  71. textproc/py-sphinx
  72. www/adguardhome
  73. www/ffsend
  74. www/gist
  75. www/grafana
  76. www/mattermost-server
  77. www/midori
  78. www/netsurf
  79. www/node18
  80. www/node20
  81. www/node22
  82. www/node23
  83. www/node24
  84. www/onlyoffice-documentserver
  85. www/py-woob
  86. Collapse this list.

Deleted ports which required this port:

Expand this list of 46 deleted ports
  1. deskutils/google-gadgets*
  2. devel/bazaar-ng*
  3. devel/bzr*
  4. devel/php-composer2*
  5. devel/py-libiocage*
  6. devel/qca-legacy*
  7. devel/qca-qt5*
  8. filesystems/httpfs*
  9. ftp/curl-hiphop*
  10. mail/fetchmail64*
  11. mail/opensmtpd-devel*
  12. multimedia/mps-youtube*
  13. multimedia/plexpy*
  14. net/py-matrix-synapse*
  15. net/qt4-network*
  16. net/rubygem-grpc124*
  17. net/rubygem-grpc130*
  18. net/rubygem-grpc142*
  19. net/s3ql*
  20. net-im/biboumi*
  21. net-im/empathy*
  22. net-p2p/sonarr-devel*
  23. ports-mgmt/redports-node*
  24. security/acme-client*
  25. security/mate-keyring*
  26. security/protonvpn-cli*
  27. sysutils/fusefs-httpfs*
  28. sysutils/osquery*
  29. sysutils/py-iocage*
  30. sysutils/py3-iocage*
  31. sysutils/ucspi-ssl-tls*
  32. textproc/py-sphinx18*
  33. textproc/py3-asciinema*
  34. textproc/py3-sphinx*
  35. www/grafana7*
  36. www/grafana8*
  37. www/grafana9*
  38. www/neon29*
  39. www/node10*
  40. www/node12*
  41. www/node14*
  42. www/node16*
  43. www/node19*
  44. www/node21*
  45. www/node8*
  46. www/py-weboob*
  47. Collapse this list of deleted ports.
* - deleted ports are only shown under the This port is required by section. It was harder to do for the Required section. Perhaps later...

Configuration Options:
===> The following configuration options are available for ca_root_nss-3.108: ETCSYMLINK=on: Add symlinks to default bundle locations ===> Use 'make config' to modify these settings
Options name:
security_ca_root_nss
USES:
perl5 ssl:build
pkg-message:
For install:
FreeBSD does not, and can not warrant that the certification authorities whose certificates are included in this package have in any way been audited for trustworthiness or RFC 3647 compliance. Assessment and verification of trust is the complete responsibility of the system administrator. This package installs symlinks to support root certificate discovery for software that either uses other cryptographic libraries than OpenSSL, or use OpenSSL but do not follow recommended practice. If you prefer to do this manually, replace the following symlinks with either an empty file or your site-local certificate bundle. * /etc/ssl/cert.pem * /usr/local/etc/ssl/cert.pem * /usr/local/openssl/cert.pem
Master Sites:
Expand this list (2 items)
Collapse this list.
  1. https://archive.mozilla.org/pub/security/nss/releases/NSS_3_108_RTM/src/
  2. https://download.cdn.mozilla.net/pub/security/nss/releases/NSS_3_108_RTM/src/
Collapse this list.

There are no commits on branch 2024Q2 for this port