[MacPorts] #38972: curl-ca-bundle needs update?

MacPorts noreply at macports.org
Tue Apr 21 03:19:39 PDT 2015


#38972: curl-ca-bundle needs update?
-----------------------------+--------------------------
  Reporter:  dave@…          |      Owner:  ryandesign@…
      Type:  defect          |     Status:  new
  Priority:  Normal          |  Milestone:
 Component:  ports           |    Version:  2.1.3
Resolution:                  |   Keywords:
      Port:  curl-ca-bundle  |
-----------------------------+--------------------------

Comment (by matthew-macports@…):

 The current location of the Mozilla root certificates is not where the
 Portfile at
 https://trac.macports.org/browser/trunk/dports/net/curl/Portfile is
 looking. The Portfile is looking at:
 http://mxr.mozilla.org/mozilla/source/security/nss/lib/ckfw/builtins/certdata.txt
 but Mozilla now update the file at:
     http://mxr.mozilla.org/mozilla-
 central/source/security/nss/lib/ckfw/builtins/certdata.txt
 (note mozilla-central, rather than mozilla). The former has not changed
 since December 2012:
 http://bonsai.mozilla.org/cvslog.cgi?file=mozilla/security/nss/lib/ckfw/builtins/certdata.txt&rev=HEAD
 the latter was last updated yesterday:
     http://hg.mozilla.org/mozilla-
 central/log/3de89bd361c3/security/nss/lib/ckfw/builtins/certdata.txt

 So it looks like curl-ca-bundle won't have had any updates since 2013
 (which explains why I am starting to get SSL cert errors more frequently
 using curl).

-- 
Ticket URL: <https://trac.macports.org/ticket/38972#comment:6>
MacPorts <https://www.macports.org/>
Ports system for OS X


More information about the macports-tickets mailing list