Checksum -s of apple-pki-bundle fetches from MacPorts, not Source

Steven Smith steve.t.smith at
Sat Nov 12 13:06:35 UTC 2022

Re: <>

This issue is caused because port fetches an expired certificate from ​, not source:

> sudo port clean --all apple-pki-bundle
> sudo port -s checksum apple-pki-bundle +additional_pki_bundle +system_roots_keychain
>> --->  Attempting to fetch AppleISTCA2G1.cer from

But I’m explicitly passing -s to the port command—download from source:

What’s the fix to this? (Simple revbump?) And why don’t I detect it but the OP does?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the macports-dev mailing list