notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC		 Ukraine
The recently imposed "must be logged in" restriction is a response to increased bot traffic on the site. This affects search, commits, and vuxml pages.
Search engines are not blocked. Try using "site:www.freshports.org" and your search terms.
Port details on branch 2025Q3
ca_root_nss Root certificate bundle from the Mozilla Project
3.117_2 security on this many watch lists=128 search for ports that depend on this port An older version of this port was marked as vulnerable. Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 3.117_2Version of this port present on the latest quarterly branch.
Maintainer: ports-secteam@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2007-07-06 21:39:01
Last Update: 2025-11-12 02:49:37
Commit Hash: decf02f
People watching this port, also watch:: curl, libiconv, libxml2, expat, pcre
License: MPL20
Description:
Root certificates from certificate authorities included in the Mozilla NSS library and thus in Firefox and Thunderbird. This port directly tracks the version of NSS in the security/nss port.
cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (10 items)
Collapse this list.
  1. /usr/local/share/licenses/ca_root_nss-3.117_2/catalog.mk
  2. /usr/local/share/licenses/ca_root_nss-3.117_2/LICENSE
  3. /usr/local/share/licenses/ca_root_nss-3.117_2/MPL20
  4. share/certs/ca-root-nss.crt
  5. @sample etc/ssl/cert.pem.sample
  6. openssl/cert.pem
  7. /etc/ssl/cert.pem
  8. @owner
  9. @group
  10. @mode
Collapse this list.
USE_RC_SUBR (Service Scripts)
  • no SUBR information found for this port
Dependency lines:
  • ca_root_nss>0:security/ca_root_nss
Conflicts:
CONFLICTS_INSTALL:
  • ca-roots-[0-9]*
To install the port:
cd /usr/ports/security/ca_root_nss/ && make install clean
To add the package, run one of these commands:
  • pkg install security/ca_root_nss
  • pkg install ca_root_nss
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: ca_root_nss
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1759523021 SHA256 (nss-3.117.tar.gz) = 5786b523a2f2e9295ed10d711960d2e33cd620bb80d6288443eda43553a51996 SIZE (nss-3.117.tar.gz) = 76684970
Packages (timestamps in pop-ups are UTC):
ca_root_nss
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest3.117_23.117_23.583.115_13.117_2n/an/an/a
FreeBSD:13:quarterly3.117_23.117_23.89.13.1083.117_2n/an/an/a
FreeBSD:14:latest3.117_23.117_23.873.1153.117_23.89.1-3.89.1
FreeBSD:14:quarterly3.117_23.117_2-3.1083.117_23.93_23.93_23.93_2
FreeBSD:15:latest3.117_23.117_2n/a3.115n/an/a3.93_23.93_2
FreeBSD:15:quarterly3.117_23.117_2n/a-n/an/a--
FreeBSD:16:latest3.117_23.117_2n/a-n/an/a--
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. perl5>=5.42.r<5.43 : lang/perl5.42
This port is required by:
for Build
  1. devel/librest
  2. devel/please
  3. devel/qca
  4. lang/julia
  5. misc/outside
  6. net-im/telepathy-gabble
  7. sysutils/kleene-daemon

Deleted ports which required this port:

Expand this list of 5 deleted ports
  1. devel/qca-legacy*
  2. devel/qca-qt5*
  3. net/s3ql*
  4. net-im/empathy*
  5. security/mate-keyring*
  6. Collapse this list of deleted ports.
for Fetch
  1. deskutils/qmd
  2. filesystems/mcp-server-filesystem
  3. graphics/oidn
  4. math/ttmath
  5. misc/bun-decompile
  6. misc/claude-code
  7. misc/clawhub
Expand this list (35 items / 28 hidden - sorry, this count includes any deleted ports)
  1. Collapse this list).
  2. misc/github-copilot-cli
  3. misc/github-copilot-language-server
  4. misc/grok-cli
  5. misc/mcp-inspector
  6. misc/nanocoder
  7. misc/openclaw
  8. misc/qwen-code
  9. textproc/pdf-reader-mcp
  10. textproc/xlnt
  11. www/mcp-server-browserbase
  12. www/py-yt-dlp-ejs
  13. Collapse this list.

Deleted ports which required this port:

Expand this list of 17 deleted ports
  1. devel/gitlab-metrics-exporter*
  2. devel/pydio-packr*
  3. editors/o*
  4. finance/cointop*
  5. net/clash*
  6. net/nebula*
  7. net-mgmt/chronograf*
  8. net-mgmt/netdata-go*
  9. security/tfsec*
  10. sysutils/container-diff*
  11. sysutils/ipfs-go*
  12. sysutils/zrepl*
  13. sysutils/zrepl-dsh2dsh*
  14. textproc/mergestat*
  15. www/annie*
  16. www/cliqz*
  17. www/grafana9*
  18. Collapse this list of deleted ports.
for Patch
  1. deskutils/calibre
for Run
  1. audio/teamspeak3-server
  2. databases/couchdb3
  3. devel/brz
  4. devel/gitlab-runner
  5. devel/hs-hoogle
  6. devel/librest
  7. devel/py-libioc
Expand this list (132 items / 125 hidden - sorry, this count includes any deleted ports)
  1. Collapse this list).
  2. devel/qca
  3. devel/stack
  4. dns/dnscrypt-proxy2
  5. dns/inadyn
  6. dns/void-zones-tools
  7. games/linux-steam-utils
  8. games/prismlauncher
  9. graphics/variety
  10. irc/ircd-hybrid
  11. lang/gauche
  12. lang/julia
  13. lang/mono5.10
  14. lang/mono5.20
  15. lang/mono6.8
  16. mail/claws-mail
  17. mail/courier
  18. mail/py-postfix-mta-sts-resolver
  19. mail/rspamd
  20. mail/rspamd-devel
  21. mail/sylpheed
  22. multimedia/jellyfin
  23. multimedia/tautulli
  24. net/boinc-client
  25. net/bsdec2-image-upload
  26. net/cloudflared
  27. net/hblock
  28. net/mosquitto
  29. net/ooni-mini
  30. net/ooni-probe-cli
  31. net/openntpd
  32. net/rclone
  33. net/rubygem-grpc
  34. net/rubygem-grpc-gitlab
  35. net/speedtest
  36. net-im/conduit
  37. net-im/py-matrix-synapse
  38. net-im/telepathy-gabble
  39. net-mgmt/arpwatch
  40. net-mgmt/netmagis-database
  41. net-mgmt/netmagis-www
  42. net-mgmt/py-arouteserver
  43. net-p2p/lidarr
  44. net-p2p/prowlarr
  45. net-p2p/radarr
  46. net-p2p/readarr
  47. net-p2p/sonarr
  48. ports-mgmt/freebsd-bugzilla-cli
  49. security/bitwarden-cli
  50. security/cargo-audit
  51. security/go-cve-dictionary
  52. security/headscale
  53. security/lego
  54. security/netbird
  55. security/pulledpork
  56. security/py-certbot-dns-cpanel
  57. security/snowflake-tor
  58. security/ssllabs-scan
  59. security/tailscale
  60. security/webtunnel-tor
  61. sysutils/amazon-ssm-agent
  62. sysutils/azure-agent
  63. sysutils/iocage-devel
  64. sysutils/minipot
  65. sysutils/ucspi-ssl
  66. sysutils/vagrant
  67. sysutils/vagrant-gitlab
  68. textproc/py-sphinx
  69. www/adguardhome
  70. www/gist
  71. www/mattermost-server
  72. www/midori
  73. www/netsurf
  74. www/onlyoffice-documentserver
  75. www/py-woob
  76. Collapse this list.

Deleted ports which required this port:

Expand this list of 51 deleted ports
  1. deskutils/google-gadgets*
  2. devel/bazaar-ng*
  3. devel/bzr*
  4. devel/hs-spago*
  5. devel/php-composer2*
  6. devel/py-libiocage*
  7. devel/qca-legacy*
  8. devel/qca-qt5*
  9. filesystems/httpfs*
  10. ftp/curl-hiphop*
  11. mail/fetchmail64*
  12. mail/opensmtpd-devel*
  13. multimedia/mps-youtube*
  14. multimedia/plexpy*
  15. net/py-matrix-synapse*
  16. net/qt4-network*
  17. net/rubygem-grpc124*
  18. net/rubygem-grpc130*
  19. net/rubygem-grpc142*
  20. net/s3ql*
  21. net-im/biboumi*
  22. net-im/empathy*
  23. net-p2p/sonarr-devel*
  24. ports-mgmt/redports-node*
  25. security/acme-client*
  26. security/mate-keyring*
  27. security/protonvpn-cli*
  28. sysutils/fusefs-httpfs*
  29. sysutils/osquery*
  30. sysutils/py-iocage*
  31. sysutils/py3-iocage*
  32. sysutils/ucspi-ssl-tls*
  33. textproc/py-asciinema*
  34. textproc/py-sphinx18*
  35. textproc/py3-asciinema*
  36. textproc/py3-sphinx*
  37. www/ffsend*
  38. www/grafana7*
  39. www/grafana8*
  40. www/grafana9*
  41. www/neon29*
  42. www/node10*
  43. www/node12*
  44. www/node14*
  45. www/node16*
  46. www/node18*
  47. www/node19*
  48. www/node21*
  49. www/node23*
  50. www/node8*
  51. www/py-weboob*
  52. Collapse this list of deleted ports.
* - deleted ports are only shown under the This port is required by section. It was harder to do for the Required section. Perhaps later...
Configuration Options:
===> The following configuration options are available for ca_root_nss-3.117_2: ETCSYMLINK=on: Add symlinks to default bundle locations ===> Use 'make config' to modify these settings
Options name:
security_ca_root_nss
USES:
perl5 ssl:build
FreshPorts was unable to extract/find any pkg message
Master Sites:
Expand this list (2 items)
Collapse this list.
  1. https://archive.mozilla.org/pub/security/nss/releases/NSS_3_117_RTM/src/
  2. https://download.cdn.mozilla.net/pub/security/nss/releases/NSS_3_117_RTM/src/
Collapse this list.

There are no commits on branch 2025Q3 for this port
Login
User Login
Create account

Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD

This site
What is FreshPorts?
About the authors
Issues
FAQ
How big is it?
Security Policy
Privacy
Blog
Contact

Search
Enter Keywords:
 
more...

Latest Vulnerabilities
chromiumMay 08
firefoxMay 08
firefoxMay 08
firefoxMay 08
firefoxMay 08
firefox-esrMay 08
firefox-esrMay 08
firefox-esrMay 08
firefox-esrMay 08
thunderbirdMay 08
ungoogled-chromiumMay 08
mongodb80May 07
apache24May 05
ocaml-opamMay 05
modsecurity3May 04

61 vulnerabilities affecting 245 ports have been reported in the past 14 days

* - modified, not new

All vulnerabilities

Last processed:
2026-05-08 08:36:47 UTC


Ports
Home
Categories
Deleted ports
Sanity Test Failures
Newsfeeds

Statistics
Graphs
NEW Graphs (Javascript)

Calculated hourly:
Port count 34466
Broken 105
Deprecated 186
Ignore 217
Forbidden 0
Restricted 1
No CDROM 1
Vulnerable 38
Expired 12
Set to expire 117
Interactive 0
new 24 hours 2
new 48 hours20
new 7 days56
new fortnight93
new month191
Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD 		Valid HTML, CSS, and RSS. Copyright © 2000-2026 Dan Langille. All rights reserved.