[MacPorts] #38972: curl-ca-bundle needs update?
MacPorts
noreply at macports.org
Tue Apr 21 03:19:39 PDT 2015
#38972: curl-ca-bundle needs update?
-----------------------------+--------------------------
Reporter: dave@… | Owner: ryandesign@…
Type: defect | Status: new
Priority: Normal | Milestone:
Component: ports | Version: 2.1.3
Resolution: | Keywords:
Port: curl-ca-bundle |
-----------------------------+--------------------------
Comment (by matthew-macports@…):
The current location of the Mozilla root certificates is not where the
Portfile at
https://trac.macports.org/browser/trunk/dports/net/curl/Portfile is
looking. The Portfile is looking at:
http://mxr.mozilla.org/mozilla/source/security/nss/lib/ckfw/builtins/certdata.txt
but Mozilla now update the file at:
http://mxr.mozilla.org/mozilla-
central/source/security/nss/lib/ckfw/builtins/certdata.txt
(note mozilla-central, rather than mozilla). The former has not changed
since December 2012:
http://bonsai.mozilla.org/cvslog.cgi?file=mozilla/security/nss/lib/ckfw/builtins/certdata.txt&rev=HEAD
the latter was last updated yesterday:
http://hg.mozilla.org/mozilla-
central/log/3de89bd361c3/security/nss/lib/ckfw/builtins/certdata.txt
So it looks like curl-ca-bundle won't have had any updates since 2013
(which explains why I am starting to get SSL cert errors more frequently
using curl).
--
Ticket URL: <https://trac.macports.org/ticket/38972#comment:6>
MacPorts <https://www.macports.org/>
Ports system for OS X
More information about the macports-tickets
mailing list