[MacPorts] #66230: apple-pki-bundle-2018-09-27_2+additional_pki_bundle+system_roots_keychain.darwin_22.noarch build failure- portfile/distfile discrepancy

[MacPorts]

#66230: apple-pki-
bundle-2018-09-27_2+additional_pki_bundle+system_roots_keychain.darwin_22.noarch
build failure- portfile/distfile discrepancy
-------------------------------------------------+-------------------------
  Reporter:  jrandall814                         |      Owner:  essandess
      Type:  defect                              |     Status:  assigned
  Priority:  Normal                              |  Milestone:
 Component:  ports                               |    Version:  2.8.0
Resolution:                                      |   Keywords:
      Port:  apple-pki-                          |
  bundle-2018-09-27_2+additional_pki_bundle+system_roots_keychain.darwin_22.noarch|
-------------------------------------------------+-------------------------

Comment (by essandess):

 That's the issue. Different certs. You must be downloading the current
 one. I see that the one I'm downloading is expired:
 {{{
 openssl x509 -in /opt/local/var/macports/distfiles/apple-pki-
 bundle/AppleISTCA2G1.cer -text -noout
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 146036 (0x23a74)
         Signature Algorithm: sha256WithRSAEncryption
         Issuer: C = US, O = GeoTrust Inc., CN = GeoTrust Global CA
         Validity
             Not Before: Jun 16 15:42:02 2014 GMT
             Not After : May 20 15:42:02 2022 GMT
         Subject: CN = Apple IST CA 2 - G1, OU = Certification Authority, O
 = Apple Inc., C = US

 }}}

 When I do a checksum, {{{port}}} grabs everything from
 https://distfiles.macports.org/apple-pki-bundle, not source.
 {{{
 sudo port clean --all apple-pki-bundle
 sudo port -s checksum apple-pki-bundle +additional_pki_bundle
 +system_roots_keychain
 …
 --->  Attempting to fetch AppleISTCA2G1.cer from
 https://distfiles.macports.org/apple-pki-bundle
 }}}

 That's not correct, but I don't know what's wrong. I'll ask on macports-
 dev at lists.macports.org.

 Would you please run this command and verify that you have an up-to-date
 certificate?
 {{{
 openssl x509 -in /opt/local/var/macports/distfiles/apple-pki-
 bundle/AppleISTCA2G1.cer -text -noout
 }}}

-- 
Ticket URL: <https://trac.macports.org/ticket/66230#comment:6>
MacPorts <https://www.macports.org/>
Ports system for macOS