From nobody Fri Jan 20 12:01:58 2023 X-Original-To: ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Nyyls29bRz2v5bc for ; Fri, 20 Jan 2023 12:02:01 +0000 (UTC) (envelope-from ume@FreeBSD.org) Received: from smtp.freebsd.org (smtp.freebsd.org [IPv6:2610:1c1:1:606c::24b:4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Nyyls1hQcz3RBY; Fri, 20 Jan 2023 12:02:01 +0000 (UTC) (envelope-from ume@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1674216121; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=NEVQ8m22c3IQRbTRBz7sdi7ZSunwVkcuj3GfzTG6bPc=; b=Ak9N7xbL4tn9LL3VZ97w+FbswBCqs/Om2pUjWz0WjuZlKJIaTM1Oc07goCva1/RXWmUHCK LwbxEozK5RQVlpE1Z2kH2jl1qtvnIh4m2CsBV7mdzkzYfpdr/AGWp6h5MrUMLfuHnOPT1c /ZlqkbU6X3WbKr1GjHKam/swInrb57igg7FkzC5OtA9wTIwMYKnuexwwgoZuQeGe7xFoCe UP2oBbxrqzL1o7tDpqfrfZIesPic262LxS2IiwJ1toLFwZjFV32S3PGpx4I+EUcQbgFzkk AapbNjuKLIjeBpQO5BiE1cpUSBdeyGGvmYiM16nMlsVWEfQqvF5ljX5ltKlr7g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1674216121; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=NEVQ8m22c3IQRbTRBz7sdi7ZSunwVkcuj3GfzTG6bPc=; b=TzwiqmGoaYHovK1xU6ZAiOWKMeZpgLCZDRvOr6plnmR5i3iecilSjFJHwDXK90HF+VjmTg cxnBypjemUksmZIM+YvSFAQmABwppe9PiYJ2se/8ecLJ5Uig910b2gTcpBltI5mzqOLq/n e+UKjc6WAfZ7A/t5FJgQv1jVr36w5BGmnSq2dKmrtB3568HhsItkKT07FcXG4HpA5aBD0m nypW43LX6S8p9GF4xwyGmjq9CROOSyMg0vcevSLCSspFhXcAlVRzVy6/02FczW4cnQEyO5 D3st3BL+1wjWh/23Q9GzpOxrVyOPqm62YtEp6S6wSZYj7Tf9sFNk82nQCKqDvA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1674216121; a=rsa-sha256; cv=none; b=lRghx2Ur+Aqhv69weNN5Djc3ii29Hb67bZSXVmaVdmOGGxoMnEk5vORHxQBlTcO9J8RR6Y yeeeohCH44qnLjVGhWLksp5jfRu0tXOrniXUUEezsBQBt75iaWtTQpCxCVyAD/s9Fyo+XC UvFF1Eqjmm0e+qMZyimYdzIA0VSP6MMDPoFxs25RIXymEVPC6Mt3fF4T3bCuxC8JojMgfT oHE/LidZD+ZQrKbByT/077fhDXAeVHEdfsnIadQ6YqdFMDoJiOg7DAXeKOKiVJpDlDEVpr hXrX5+9w1yoFOE6WrKYKGGtky5Nx2licbLN37oTIuHjtLbgTdNI9mAdljaJBcQ== Received: from bodai.mahoroba.org (gw4.mahoroba.org [218.45.22.175]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) (Authenticated sender: ume) by smtp.freebsd.org (Postfix) with ESMTPSA id 4Nyylr2p9Vz18KK; Fri, 20 Jan 2023 12:02:00 +0000 (UTC) (envelope-from ume@FreeBSD.org) Date: Fri, 20 Jan 2023 21:01:58 +0900 Message-ID: From: Hajimu UMEMOTO To: Andrea Venturoli Cc: ports@freebsd.org Subject: Re: Can security/ca_root_nss be retired? In-Reply-To: <3833e1cd-5b74-2459-cb5a-23e4308c07fc@netfence.it> References: <551458a3-665f-9f55-8ef9-1dd23e1e3aee@bluerosetech.com> <56babb59-ab5b-7845-fbcb-f1cadddfd425@grosbein.net> <5f9b073d-ff90-3c4d-805c-7034cd2299c6@netfence.it> <3833e1cd-5b74-2459-cb5a-23e4308c07fc@netfence.it> User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/28.2 Mule/6.0 X-Operating-System: FreeBSD 13.1-RELEASE-p3 X-PGP-Key: http://www.mahoroba.org/~ume/publickey.asc X-PGP-Fingerprint: 1F00 0B9E 2164 70FC 6DC5 BF5F 04E9 F086 BF90 71FE List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII X-ThisMailContainsUnwantedMimeParts: N Hi, On Fri, 20 Jan 2023 20:41:53 +0900, Andrea Venturoli wrote: > In the end, however, the result is the same: I have my certs hashed in > /etc/ssl/certs, but some software will use them, some other software > uses/prefers some different store (I counted at least 5). If you mean curl, built without CA_BUNDLE should take care of it. Sincerely, -- Hajimu UMEMOTO ume@mahoroba.org ume@FreeBSD.org