[MacPorts] #63740: [apple-pki-bundle] : extend to cover all certificates from "System Roots"

MacPorts noreply at macports.org
Sun Oct 31 12:25:40 UTC 2021


#63740: [apple-pki-bundle] : extend to cover all certificates from "System Roots"
-------------------------------+--------------------
  Reporter:  RJVB              |      Owner:  (none)
      Type:  enhancement       |     Status:  new
  Priority:  Normal            |  Milestone:
 Component:  ports             |    Version:
Resolution:                    |   Keywords:
      Port:  apple-pki-bundle  |
-------------------------------+--------------------

Comment (by essandess):

 > has a precedent for the argument that it does-but-shouldn't include non-
 Apple certificates, given its name

 Apple PKI isn’t self-contained. Those CAs sign Apple certs.

 See: https://github.com/macports/macports-
 ports/blob/344fb99500b93daf4890f7031f95601c23506a06/net/apple-pki-
 bundle/Portfile#L134

 There is a variant to include additional CAs, but in no circumstances do I
 believe the port should include expired CAs.

-- 
Ticket URL: <https://trac.macports.org/ticket/63740#comment:1>
MacPorts <https://www.macports.org/>
Ports system for macOS


More information about the macports-tickets mailing list