diff options
| author | koobs <koobs@FreeBSD.org> | 2015-06-06 15:41:51 +0800 |
|---|---|---|
| committer | koobs <koobs@FreeBSD.org> | 2015-06-06 15:41:51 +0800 |
| commit | 606b2874899ce1a087a1b0dee56044c38dc83c3b (patch) | |
| tree | 6127a2215fc06f924ed28287e10165316974c143 /security | |
| parent | 3ba670caefcb7c97dd96eb3ac6b451b202b1feb4 (diff) | |
| download | freebsd-ports-gnome-606b2874899ce1a087a1b0dee56044c38dc83c3b.tar.gz freebsd-ports-gnome-606b2874899ce1a087a1b0dee56044c38dc83c3b.tar.zst freebsd-ports-gnome-606b2874899ce1a087a1b0dee56044c38dc83c3b.zip | |
security/ca_root_nss: Enable certificate verification (for Base OpenSSL)
Enable the ETCSYMLINK option so that SSL certificate verification is
enabled by default for OpenSSL in base.
This change is the third in a set of changes [1][2] that improves the
default configuration and behaviour of client software relying on
OpenSSL for SSL/TLS and certificate verification.
A symlink is installed which points to the root certificate bundle in
the location that OpenSSL in base looks for them, as configured at build
time [2].
This allows any and all software utilising SSL_CTX_load_verify_locations
function to verify SSL certificates by default after installation of
this package.
[1] https://svnweb.freebsd.org/changeset/ports/372629
[2] https://svnweb.freebsd.org/changeset/ports/378720
PR: 189811 196357
Requested by: many
Submitted by: dreamcat4 gmail com
Approved by: maintainer timeout (>1 year)
Diffstat (limited to 'security')
| -rw-r--r-- | security/ca_root_nss/Makefile | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/security/ca_root_nss/Makefile b/security/ca_root_nss/Makefile index f64984aa8544..745243586544 100644 --- a/security/ca_root_nss/Makefile +++ b/security/ca_root_nss/Makefile @@ -2,6 +2,7 @@ PORTNAME= ca_root_nss PORTVERSION= ${VERSION_NSS} +PORTREVISION= 1 CATEGORIES= security MASTER_SITES= MOZILLA/security/nss/releases/${DISTNAME:tu:C/[-.]/_/g}_RTM/src DISTNAME= nss-${VERSION_NSS}${NSS_SUFFIX} @@ -12,6 +13,8 @@ COMMENT= Root certificate bundle from the Mozilla Project LICENSE= MPL OPTIONS_DEFINE= ETCSYMLINK +OPTIONS_DEFAULT= ETCSYMLINK + OPTIONS_SUB= yes ETCSYMLINK_DESC= Add symlink to /etc/ssl/cert.pem |