<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div class="">Re: <a href="https://trac.macports.org/ticket/66230" class="">https://trac.macports.org/ticket/66230</a></div><div class=""><br class=""></div><div class="">This issue is caused because port fetches an expired certificate from ​<a href="https://distfiles.macports.org/apple-pki-bundle" class="">https://distfiles.macports.org/apple-pki-bundle</a>, not source:</div><div class=""><br class=""></div><div class=""><blockquote type="cite" class=""><pre class="wiki" style="background-color: rgb(247, 247, 247); border: 1px solid rgb(215, 215, 215); box-shadow: rgb(238, 238, 238) 0px 0px 1em; border-radius: 0.3em; margin: 1em 1.75em; padding: 0.25em; overflow: auto; clear: right; font-size: 13px;">sudo port clean --all apple-pki-bundle
sudo port -s checksum apple-pki-bundle +additional_pki_bundle +system_roots_keychain

--->  Attempting to fetch AppleISTCA2G1.cer from <a href="https://distfiles.macports.org/apple-pki-bundle" class="">https://distfiles.macports.org/apple-pki-bundle</a></pre></blockquote></div><div class=""><br class=""></div><div class="">But I’m explicitly passing -s to the port command—download from source:</div><div class=""><br class=""></div><div class="">What’s the fix to this? (Simple revbump?) And why don’t I detect it but the OP does?</div><div class=""><br class=""></div><br class=""></body></html>