notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine

Bot filter coming soon

To deter bots pegging the database CPU to 100%, a bot testing filter to be added to the website. This should not affect newsfeeds etc. Anubis seems light-weight - it is already in use within the FreeBSD Project. This notice is just a heads up in case you see something odd. This notice will be updated after Anubis is installed.

Port details on branch 2025Q1
ca_root_nss Root certificate bundle from the Mozilla Project
3.108 security on this many watch lists=136 search for ports that depend on this port An older version of this port was marked as vulnerable. Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 3.108Version of this port present on the latest quarterly branch.
Maintainer: ports-secteam@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2007-07-06 21:39:01
Last Update: 2025-02-22 09:34:09
Commit Hash: f3b0945
People watching this port, also watch:: curl, libxml2, libiconv, expat, pcre
License: MPL20
Description:
Root certificates from certificate authorities included in the Mozilla NSS library and thus in Firefox and Thunderbird. This port directly tracks the version of NSS in the security/nss port.
cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (13 items)
Collapse this list.
  1. /usr/local/share/licenses/ca_root_nss-3.108/catalog.mk
  2. /usr/local/share/licenses/ca_root_nss-3.108/LICENSE
  3. /usr/local/share/licenses/ca_root_nss-3.108/MPL20
  4. share/certs/ca-root-nss.crt
  5. @sample etc/ssl/cert.pem.sample
  6. openssl/cert.pem
  7. /etc/ssl/cert.pem
  8. @postexec certctl rehash
  9. @postunexec certctl rehash
  10. @postexec [ ! -e /usr/local/bin/cert-sync ] || /usr/local/bin/cert-sync --quiet %D/share/certs/ca-root-nss.crt
  11. @owner
  12. @group
  13. @mode
Collapse this list.
Dependency lines:
  • ca_root_nss>0:security/ca_root_nss
Conflicts:
CONFLICTS_INSTALL:
  • ca-roots-[0-9]*
To install the port:
cd /usr/ports/security/ca_root_nss/ && make install clean
To add the package, run one of these commands:
  • pkg install security/ca_root_nss
  • pkg install ca_root_nss
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: ca_root_nss
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1739303198 SHA256 (nss-3.108.tar.gz) = a0f6fcb5dbadc1635b43827517a979e3a6d005d0788527802a6b31e2c5f66eec SIZE (nss-3.108.tar.gz) = 76630022

No package information for this port in our database
Sometimes this happens. Not all ports have packages. Perhaps there is a build error. Check the fallout link: pkg-fallout
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. perl5>=5.36<5.37 : lang/perl5.36
This port is required by:
for Build
  1. devel/librest
  2. devel/please
  3. devel/qca
  4. lang/julia
  5. net-im/telepathy-gabble
  6. sysutils/kleene-daemon

Deleted ports which required this port:

Expand this list of 5 deleted ports
  1. devel/qca-legacy*
  2. devel/qca-qt5*
  3. net/s3ql*
  4. net-im/empathy*
  5. security/mate-keyring*
  6. Collapse this list of deleted ports.
for Fetch
  1. archivers/plakar
  2. audio/gonic
  3. audio/sonicradio
  4. databases/pg_tileserv
  5. databases/rqlite
  6. databases/usql
  7. deskutils/pet
Expand this list (151 items / 144 hidden - sorry, this count includes any deleted ports)
  1. Collapse this list).
  2. devel/api-linter
  3. devel/athens
  4. devel/atlantis
  5. devel/capslock
  6. devel/etcd34
  7. devel/etcd35
  8. devel/etcd36
  9. devel/gh
  10. devel/gilt
  11. devel/git-town
  12. devel/gitaly
  13. devel/gitea-act_runner
  14. devel/gitlab-runner
  15. devel/gitlab-shell
  16. devel/gitleaks
  17. devel/glab
  18. devel/go-tools
  19. devel/golangci-lint
  20. devel/gomigrate
  21. devel/gopls
  22. devel/grpc-gateway
  23. devel/lazygit
  24. devel/lefthook
  25. devel/please
  26. devel/protobuf-go
  27. devel/revive
  28. devel/terraform-ls
  29. dns/cli53
  30. dns/coredns
  31. dns/dnsx
  32. dns/mosdns
  33. dns/q-dns
  34. editors/orbiton
  35. filesystems/zrepl-dsh2dsh
  36. ftp/wush
  37. games/tetrigo
  38. graphics/oidn
  39. graphics/wallhaven-cli
  40. irc/soju
  41. lang/gptscript
  42. mail/mox
  43. math/ttmath
  44. misc/fabric
  45. misc/gollama
  46. misc/ls-lint
  47. misc/ollama
  48. net/frp
  49. net/gitlab-agent
  50. net/gotify-cli
  51. net/k6
  52. net/mihomo
  53. net/ooni-probe-cli
  54. net/seaweedfs
  55. net/sing-box
  56. net/yggdrasil
  57. net-im/dendrite
  58. net-mgmt/bind_exporter
  59. net-mgmt/check_syncthing
  60. net-mgmt/check_wg
  61. net-mgmt/mysqld_exporter
  62. net-mgmt/netdata-go
  63. net-mgmt/prometheus-bird-exporter
  64. net-mgmt/prometheus2
  65. security/certspotter
  66. security/cosign
  67. security/gauth
  68. security/git-credential-gopass
  69. security/headscale
  70. security/hidden-lake
  71. security/lego
  72. security/naabu
  73. security/nuclei
  74. security/openbao
  75. security/osv-scanner
  76. security/sops
  77. security/sshesame
  78. security/step-certificates
  79. security/step-cli
  80. security/trufflehog
  81. security/vouch-proxy
  82. security/xray-core
  83. security/zlint
  84. sysutils/alloy
  85. sysutils/cilium
  86. sysutils/cloud-nuke
  87. sysutils/envconsul
  88. sysutils/govmomi
  89. sysutils/helmfile
  90. sysutils/infracost
  91. sysutils/ipmi_exporter
  92. sysutils/kapp
  93. sysutils/kubo-go
  94. sysutils/kustomize
  95. sysutils/mongodb_exporter
  96. sysutils/nerdctl
  97. sysutils/nomad
  98. sysutils/nomad-pot-driver
  99. sysutils/opentofu
  100. sysutils/popeye
  101. sysutils/terraform
  102. sysutils/terragrunt
  103. textproc/codesearch
  104. textproc/consul-template
  105. textproc/dasel
  106. textproc/gitlab-elasticsearch-indexer
  107. textproc/go-yq
  108. textproc/jqp
  109. textproc/moar
  110. textproc/termshot
  111. textproc/vacuum
  112. textproc/vale
  113. textproc/xlnt
  114. textproc/ytt
  115. textproc/zed
  116. textproc/zq
  117. www/fabio
  118. www/ghostunnel
  119. www/gitlab-pages
  120. www/gitlab-workhorse
  121. www/httpx
  122. www/lux
  123. www/minio-client
  124. www/opengist
  125. www/owncast
  126. www/shiori
  127. www/tgpt
  128. www/xurls
  129. www/youtube
  130. Collapse this list.

Deleted ports which required this port:

Expand this list of 16 deleted ports
  1. devel/gitlab-metrics-exporter*
  2. devel/pydio-packr*
  3. editors/o*
  4. finance/cointop*
  5. net/clash*
  6. net/nebula*
  7. net-mgmt/chronograf*
  8. security/tfsec*
  9. sysutils/container-diff*
  10. sysutils/ipfs-go*
  11. sysutils/zrepl*
  12. sysutils/zrepl-dsh2dsh*
  13. textproc/mergestat*
  14. www/annie*
  15. www/cliqz*
  16. www/grafana9*
  17. Collapse this list of deleted ports.
for Patch
  1. deskutils/calibre
for Run
  1. audio/teamspeak3-server
  2. databases/mongosh
  3. devel/brz
  4. devel/gitlab-runner
  5. devel/hs-hoogle
  6. devel/hs-spago
  7. devel/librest
Expand this list (136 items / 129 hidden - sorry, this count includes any deleted ports)
  1. Collapse this list).
  2. devel/py-libioc
  3. devel/qca
  4. devel/stack
  5. dns/dnscrypt-proxy2
  6. dns/inadyn
  7. dns/nextdns
  8. dns/void-zones-tools
  9. games/linux-steam-utils
  10. games/prismlauncher
  11. graphics/variety
  12. irc/ircd-hybrid
  13. lang/gauche
  14. lang/julia
  15. lang/mono5.10
  16. lang/mono5.20
  17. lang/mono6.8
  18. mail/claws-mail
  19. mail/courier
  20. mail/msmtp
  21. mail/py-postfix-mta-sts-resolver
  22. mail/rspamd
  23. mail/rspamd-devel
  24. mail/sylpheed
  25. multimedia/jellyfin
  26. multimedia/tautulli
  27. net/boinc-client
  28. net/bsdec2-image-upload
  29. net/cloudflared
  30. net/hblock
  31. net/mosquitto
  32. net/ooni-mini
  33. net/ooni-probe-cli
  34. net/openntpd
  35. net/rclone
  36. net/rubygem-grpc
  37. net/speedtest
  38. net-im/biboumi
  39. net-im/conduit
  40. net-im/py-matrix-synapse
  41. net-im/telepathy-gabble
  42. net-mgmt/arpwatch
  43. net-mgmt/netmagis-database
  44. net-mgmt/netmagis-www
  45. net-mgmt/py-arouteserver
  46. net-p2p/lidarr
  47. net-p2p/prowlarr
  48. net-p2p/radarr
  49. net-p2p/readarr
  50. net-p2p/sonarr
  51. ports-mgmt/freebsd-bugzilla-cli
  52. security/bitwarden-cli
  53. security/cargo-audit
  54. security/go-cve-dictionary
  55. security/headscale
  56. security/lego
  57. security/netbird
  58. security/pulledpork
  59. security/py-certbot-dns-cpanel
  60. security/snowflake-tor
  61. security/ssllabs-scan
  62. security/tailscale
  63. security/webtunnel-tor
  64. sysutils/amazon-ssm-agent
  65. sysutils/azure-agent
  66. sysutils/iocage-devel
  67. sysutils/minipot
  68. sysutils/ucspi-ssl
  69. sysutils/vagrant
  70. textproc/py-asciinema
  71. textproc/py-sphinx
  72. www/adguardhome
  73. www/ffsend
  74. www/gist
  75. www/grafana
  76. www/mattermost-server
  77. www/midori
  78. www/netsurf
  79. www/node18
  80. www/node20
  81. www/node22
  82. www/node23
  83. www/node24
  84. www/onlyoffice-documentserver
  85. www/py-woob
  86. Collapse this list.

Deleted ports which required this port:

Expand this list of 45 deleted ports
  1. deskutils/google-gadgets*
  2. devel/bazaar-ng*
  3. devel/bzr*
  4. devel/php-composer2*
  5. devel/py-libiocage*
  6. devel/qca-legacy*
  7. devel/qca-qt5*
  8. filesystems/httpfs*
  9. ftp/curl-hiphop*
  10. mail/fetchmail64*
  11. mail/opensmtpd-devel*
  12. multimedia/mps-youtube*
  13. multimedia/plexpy*
  14. net/py-matrix-synapse*
  15. net/qt4-network*
  16. net/rubygem-grpc124*
  17. net/rubygem-grpc130*
  18. net/rubygem-grpc142*
  19. net/s3ql*
  20. net-im/empathy*
  21. net-p2p/sonarr-devel*
  22. ports-mgmt/redports-node*
  23. security/acme-client*
  24. security/mate-keyring*
  25. security/protonvpn-cli*
  26. sysutils/fusefs-httpfs*
  27. sysutils/osquery*
  28. sysutils/py-iocage*
  29. sysutils/py3-iocage*
  30. sysutils/ucspi-ssl-tls*
  31. textproc/py-sphinx18*
  32. textproc/py3-asciinema*
  33. textproc/py3-sphinx*
  34. www/grafana7*
  35. www/grafana8*
  36. www/grafana9*
  37. www/neon29*
  38. www/node10*
  39. www/node12*
  40. www/node14*
  41. www/node16*
  42. www/node19*
  43. www/node21*
  44. www/node8*
  45. www/py-weboob*
  46. Collapse this list of deleted ports.
* - deleted ports are only shown under the This port is required by section. It was harder to do for the Required section. Perhaps later...

Configuration Options:
===> The following configuration options are available for ca_root_nss-3.108: ETCSYMLINK=on: Add symlinks to default bundle locations ===> Use 'make config' to modify these settings
Options name:
security_ca_root_nss
USES:
perl5 ssl:build
pkg-message:
For install:
FreeBSD does not, and can not warrant that the certification authorities whose certificates are included in this package have in any way been audited for trustworthiness or RFC 3647 compliance. Assessment and verification of trust is the complete responsibility of the system administrator. This package installs symlinks to support root certificate discovery for software that either uses other cryptographic libraries than OpenSSL, or use OpenSSL but do not follow recommended practice. If you prefer to do this manually, replace the following symlinks with either an empty file or your site-local certificate bundle. * /etc/ssl/cert.pem * /usr/local/etc/ssl/cert.pem * /usr/local/openssl/cert.pem
Master Sites:
Expand this list (2 items)
Collapse this list.
  1. https://archive.mozilla.org/pub/security/nss/releases/NSS_3_108_RTM/src/
  2. https://download.cdn.mozilla.net/pub/security/nss/releases/NSS_3_108_RTM/src/
Collapse this list.

There are no commits on branch 2025Q1 for this port