[MacPorts] #63740: [apple-pki-bundle] : extend to cover all certificates from "System Roots"
MacPorts
noreply at macports.org
Sun Oct 31 12:25:40 UTC 2021
#63740: [apple-pki-bundle] : extend to cover all certificates from "System Roots"
-------------------------------+--------------------
Reporter: RJVB | Owner: (none)
Type: enhancement | Status: new
Priority: Normal | Milestone:
Component: ports | Version:
Resolution: | Keywords:
Port: apple-pki-bundle |
-------------------------------+--------------------
Comment (by essandess):
> has a precedent for the argument that it does-but-shouldn't include non-
Apple certificates, given its name
Apple PKI isn’t self-contained. Those CAs sign Apple certs.
See: https://github.com/macports/macports-
ports/blob/344fb99500b93daf4890f7031f95601c23506a06/net/apple-pki-
bundle/Portfile#L134
There is a variant to include additional CAs, but in no circumstances do I
believe the port should include expired CAs.
--
Ticket URL: <https://trac.macports.org/ticket/63740#comment:1>
MacPorts <https://www.macports.org/>
Ports system for macOS
More information about the macports-tickets
mailing list