Retire the ca-roots ports, which expired long ago.

The port is deprecated since it is not supported by the FreeBSD
Security Officer anymore.  The reason for this is that the ca-roots
port makes promises with regard to CA verification which the current
Security Officer (and deputy) do not want to make.

For people who need a general root certificate list see the
security/ca_root_ns, but note that the difference in guarantees with
regard to which CAs are included in ca_root_ns vs. ca-roots.  The
ca_root_ns port basically makes no guarantees other than that the
certificates comes from the Mozilla project.

Note that the ca-roots MOVED file entry on purpose does not point at
ca_root_ns due to the change in CA guarantees.

With hat:	security-officer

1 files changed, 0 insertions, 1 deletions

diff --git a/security/Makefile b/security/Makefile
index b5cf63c8766b..207941d1fa0e 100644
--- a/security/Makefile
+++ b/security/Makefile
@@ -50,7 +50,6 @@
     SUBDIR += bsp_upektfmess
     SUBDIR += bubblegum
     SUBDIR += bugs
-    SUBDIR += ca-roots
     SUBDIR += ca_root_nss
     SUBDIR += calife
     SUBDIR += calife-devel