notbug ipv6 ready As an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC		 Ukraine
The recently imposed "must be logged in" restriction is a response to increased bot traffic on the site. This affects search, commits, and vuxml pages.
Search engines are not blocked. Try using "site:www.freshports.org" and your search terms.
After the ports freeze to fix some stuff, the freeze is over. I have some work to do before FreshPorts can start processing commits again before it can start processing again. I've created an issue for that.
Port details on branch 2026Q3
ca_root_nss Root certificate bundle from the Mozilla Project
3.129 security on this many watch lists=0 search for ports that depend on this port Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 3.129Version of this port present on the latest quarterly branch.
Maintainer: ports-secteam@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2026-07-10 09:36:11
Last Update: 2026-09-09 20:12:14
Commit Hash: 4d48429
License: MPL20
Description:
Root certificates from certificate authorities included in the Mozilla NSS library and thus in Firefox and Thunderbird. This port directly tracks the version of NSS in the security/nss port.
cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (10 items)
Collapse this list.
  1. /usr/local/share/licenses/ca_root_nss-3.129/catalog.mk
  2. /usr/local/share/licenses/ca_root_nss-3.129/LICENSE
  3. /usr/local/share/licenses/ca_root_nss-3.129/MPL20
  4. share/certs/ca-root-nss.crt
  5. @sample etc/ssl/cert.pem.sample
  6. @comment openssl/cert.pem
  7. @comment /etc/ssl/cert.pem
  8. @owner
  9. @group
  10. @mode
Collapse this list.
USE_RC_SUBR (Service Scripts)
  • no SUBR information found for this port
Dependency lines:
  • ca_root_nss>0:security/ca_root_nss
To install the port:
cd /usr/ports/security/ca_root_nss/ && make install clean
To add the package, run one of these commands:
  • pkg install security/ca_root_nss
  • pkg install ca_root_nss
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: ca_root_nss
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1788983796 SHA256 (nss-3.129.tar.gz) = 38baa3b0a18a3f674843473b549753c96419a0151abd1e7a9b214ce0493d0785 SIZE (nss-3.129.tar.gz) = 87255363
Packages (timestamps in pop-ups are UTC):
ca_root_nss
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest3.117_23.117_2n/an/an/an/an/an/a
FreeBSD:13:quarterly3.117_23.117_2n/an/an/an/an/an/a
FreeBSD:14:latest3.1283.1283.873.1153.1293.89.1-3.89.1
FreeBSD:14:quarterly3.1283.129-3.1083.1293.93_23.93_23.93_2
FreeBSD:15:latest3.1283.129n/a3.115n/an/a3.93_23.93_2
FreeBSD:15:quarterly3.1293.129n/a-n/an/a--
FreeBSD:16:latest3.1283.129n/a-n/an/a--
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. perl5>=5.42.r<5.43 : lang/perl5.42
This port is required by:
for Build
  1. devel/please
for Fetch
  1. misc/claude-code-legacy
for Patch
  1. deskutils/calibre
for Run
  1. databases/couchdb3
  2. devel/brz
  3. devel/gitlab-runner
  4. dns/dnscrypt-proxy2
  5. games/linux-steam-utils
  6. games/prismlauncher
  7. multimedia/tautulli
Expand this list (25 items / 18 hidden - sorry, this count includes any deleted ports)
  1. Collapse this list).
  2. net/bsdec2-image-upload
  3. net/cloudflared
  4. net/ooni-mini
  5. net/ooni-probe-cli
  6. net/rclone
  7. net-im/conduit
  8. security/go-cve-dictionary
  9. security/headscale
  10. security/lego
  11. security/netbird
  12. security/snowflake-tor
  13. security/ssllabs-scan
  14. security/tailscale
  15. security/webtunnel-tor
  16. sysutils/amazon-ssm-agent
  17. www/adguardhome
  18. www/mattermost-server
  19. www/onlyoffice-documentserver
  20. Collapse this list.
Configuration Options:
No options to configure
Options name:
security_ca_root_nss
USES:
perl5 ssl:build
FreshPorts was unable to extract/find any pkg message
Master Sites:
Expand this list (2 items)
Collapse this list.
  1. https://archive.mozilla.org/pub/security/nss/releases/NSS_3_129_RTM/src/
  2. https://download.cdn.mozilla.net/pub/security/nss/releases/NSS_3_129_RTM/src/
Collapse this list.

Number of commits found: 5

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
3.129
09 Sep 2026 20:12:14
commit hash: 4d484290e8c96b800cd301f88b059f06b37e317acommit hash: 4d484290e8c96b800cd301f88b059f06b37e317acommit hash: 4d484290e8c96b800cd301f88b059f06b37e317acommit hash: 4d484290e8c96b800cd301f88b059f06b37e317a files touched by this commit		 Jochen Neumeister (joneum) search for other commits by this committer 
security/ca_root_nss: Update to 3.129

Changes to the certificate store since 3.128:
- Removed Izenpe.com (server distrust after 2026-04-15, Mozilla bug
  2017322: the attribute was set on the PKCS#11 trust object instead of
  the certificate object, so it did not take effect until now)

Changelog:
https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/ux-yy4Yk33U

MFH:		2026Q3

Sponsored by:	Netzkommune GmbH

(cherry picked from commit f2f3940dcd641a9624fd40229d8c1b58fabdbd48)
3.128
27 Aug 2026 15:30:51
commit hash: 6c77e6c1c698f5a353629374331d3bc94d2bb8d9commit hash: 6c77e6c1c698f5a353629374331d3bc94d2bb8d9commit hash: 6c77e6c1c698f5a353629374331d3bc94d2bb8d9commit hash: 6c77e6c1c698f5a353629374331d3bc94d2bb8d9 files touched by this commit		 Dag-Erling Smørgrav (des) search for other commits by this committer 
security/ca_root_nss: Update to 3.128

MFH:		2026Q3
Reviewed by:	joneum
Differential Revision:	https://reviews.freebsd.org/D59224

(cherry picked from commit 1993fb29be735a8cc94630abe6410b26345a6d0b)
3.127
18 Aug 2026 20:58:54
commit hash: 460aef600cd82b5d72cf711872450b64b136d51acommit hash: 460aef600cd82b5d72cf711872450b64b136d51acommit hash: 460aef600cd82b5d72cf711872450b64b136d51acommit hash: 460aef600cd82b5d72cf711872450b64b136d51a files touched by this commit		 Jochen Neumeister (joneum) search for other commits by this committer 
security/ca_root_nss: Update to 3.127

Changelog:
https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/5mUmZ8UCw4Q

Sponsored by:	Netzkommune GmbH

(cherry picked from commit 5e49a5b9cc973d6e9adaa29e6b0ffc3101fb0e45)
3.126.1
13 Aug 2026 22:55:45
commit hash: 04c51b9d1a1f1093ed09d8e1a6a1eebe51fd1be3commit hash: 04c51b9d1a1f1093ed09d8e1a6a1eebe51fd1be3commit hash: 04c51b9d1a1f1093ed09d8e1a6a1eebe51fd1be3commit hash: 04c51b9d1a1f1093ed09d8e1a6a1eebe51fd1be3 files touched by this commit		 Jochen Neumeister (joneum) search for other commits by this committer 
security/ca_root_nss: Update to 3.126.1

Changes to the certificate store since 3.125:
- Added SECOM TLS RSA Root CA 2024, SECOM TLS ECC Root CA 2024
- Added Telia RSA TLS Root CA v3, Telia EC TLS Root CA v3
- Removed ePKI Root Certification Authority

Changelog:
https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/iY2ylatVWUY

Sponsored by:	Netzkommune GmbH

(cherry picked from commit 4e8d2d62c880ed44014e7d90abc1fff19de69506)
3.125
10 Jul 2026 09:33:16
commit hash: 935f7424b81903956140c36739973d49ad2ae712commit hash: 935f7424b81903956140c36739973d49ad2ae712commit hash: 935f7424b81903956140c36739973d49ad2ae712commit hash: 935f7424b81903956140c36739973d49ad2ae712 files touched by this commit		 Dag-Erling Smørgrav (des) search for other commits by this committer 
security/ca_root_nss: Update to 3.125

MFH:		2026Q3
Reviewed by:	joneum
Differential Revision:	https://reviews.freebsd.org/D58124

(cherry picked from commit 12f6796ead53a64975ba031ac6c174f4727af0f4)

Number of commits found: 5
Login
User Login
Create account

Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD

This site
What is FreshPorts?
About the authors
Issues
FAQ
How big is it?
Security Policy
Privacy
Blog
Contact

Search
Enter Keywords:
 
more...

Latest Vulnerabilities
giteaSep 13
gitlabSep 13
zncSep 13
freeipa-serverSep 11
immichSep 11
immichSep 11
redpanda-connectSep 11
strongswanSep 10
crowdsecSep 09
yt-dlpSep 09
roundcubeSep 06
openvpnSep 04
electron42Sep 03
libnjsSep 03
nginx-fullSep 03

22 vulnerabilities affecting 340 ports have been reported in the past 14 days

* - modified, not new

All vulnerabilities

Last processed:
2026-09-13 22:53:02 UTC


Ports
Home
Categories
Deleted ports
Sanity Test Failures
Newsfeeds

Statistics
Graphs
NEW Graphs (Javascript)

Calculated hourly:
Port count 35162
Broken 91
Deprecated 347
Ignore 204
Forbidden 0
Restricted 1
No CDROM 1
Vulnerable 45
Expired 16
Set to expire 270
Interactive 0
new 24 hours 9
new 48 hours18
new 7 days63
new fortnight92
new month199
Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD 		Valid HTML, CSS, and RSS. Copyright © 2000-2026 Dan Langille. All rights reserved.