svn commit: r436086 - head

[Tijl Coosemans]

Author: tijl
Date: Mon Mar 13 16:10:59 2017
New Revision: 436086
URL: https://svnweb.freebsd.org/changeset/ports/436086

Log:
  Add a note about make makesum verifying HTTPS certificates.
  
  Requested by:	adamw

Modified:
  head/CHANGES

Modified: head/CHANGES
==============================================================================
--- head/CHANGES	Mon Mar 13 16:02:27 2017	(r436085)
+++ head/CHANGES	Mon Mar 13 16:10:59 2017	(r436086)
@@ -10,6 +10,18 @@ in the release notes and/or placed into 
 
 All ports committers are allowed to commit to this file.
 
+20170313:
+AUTHOR: tijl at FreeBSD.org
+
+  HTTPS certificates are now verified when "make makesum" fetches distfiles.
+  If this fails make sure you have a CA certificate bundle installed such as
+  security/ca_root_nss.  If it still fails and there are other HTTPS sites
+  with a valid certificate consider removing the site from MASTER_SITES.
+  If the site cannot be removed you can disable certificate verification by
+  adding the following line to the port Makefile:
+
+  FETCH_ENV=	SSL_NO_VERIFY_PEER=1 SSL_NO_VERIFY_HOSTNAME=1
+
 20170218:
 AUTHOR: kde at FreeBSD.org