Checksum -s of apple-pki-bundle fetches from MacPorts, not Source

[Steven Smith]

Re: https://trac.macports.org/ticket/66230 <https://trac.macports.org/ticket/66230>

This issue is caused because port fetches an expired certificate from ​https://distfiles.macports.org/apple-pki-bundle, not source:

> sudo port clean --all apple-pki-bundle
> sudo port -s checksum apple-pki-bundle +additional_pki_bundle +system_roots_keychain
> …
> --->  Attempting to fetch AppleISTCA2G1.cer from https://distfiles.macports.org/apple-pki-bundle


But I’m explicitly passing -s to the port command—download from source:

What’s the fix to this? (Simple revbump?) And why don’t I detect it but the OP does?


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.macports.org/pipermail/macports-dev/attachments/20221112/a8d5bad4/attachment.htm>