notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine

Bot filter coming soon

To deter bots pegging the database CPU to 100%, a bot testing filter to be added to the website. This should not affect newsfeeds etc. Anubis seems light-weight - it is already in use within the FreeBSD Project. This notice is just a heads up in case you see something odd. This notice will be updated after Anubis is installed.

Port details on branch 2023Q1
ca_root_nss Root certificate bundle from the Mozilla Project
3.108 security on this many watch lists=135 search for ports that depend on this port An older version of this port was marked as vulnerable. Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 3.108Version of this port present on the latest quarterly branch.
Maintainer: ports-secteam@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2007-07-06 21:39:01
Last Update: 2025-02-22 09:34:09
Commit Hash: f3b0945
People watching this port, also watch:: curl, libiconv, libxml2, expat, pcre
License: MPL20
Description:
Root certificates from certificate authorities included in the Mozilla NSS library and thus in Firefox and Thunderbird. This port directly tracks the version of NSS in the security/nss port.
cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (13 items)
Collapse this list.
  1. /usr/local/share/licenses/ca_root_nss-3.108/catalog.mk
  2. /usr/local/share/licenses/ca_root_nss-3.108/LICENSE
  3. /usr/local/share/licenses/ca_root_nss-3.108/MPL20
  4. share/certs/ca-root-nss.crt
  5. @sample etc/ssl/cert.pem.sample
  6. openssl/cert.pem
  7. /etc/ssl/cert.pem
  8. @postexec certctl rehash
  9. @postunexec certctl rehash
  10. @postexec [ ! -e /usr/local/bin/cert-sync ] || /usr/local/bin/cert-sync --quiet %D/share/certs/ca-root-nss.crt
  11. @owner
  12. @group
  13. @mode
Collapse this list.
Dependency lines:
  • ca_root_nss>0:security/ca_root_nss
Conflicts:
CONFLICTS_INSTALL:
  • ca-roots-[0-9]*
To install the port:
cd /usr/ports/security/ca_root_nss/ && make install clean
To add the package, run one of these commands:
  • pkg install security/ca_root_nss
  • pkg install ca_root_nss
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: ca_root_nss
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1739303198 SHA256 (nss-3.108.tar.gz) = a0f6fcb5dbadc1635b43827517a979e3a6d005d0788527802a6b31e2c5f66eec SIZE (nss-3.108.tar.gz) = 76630022

Packages (timestamps in pop-ups are UTC):
ca_root_nss
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest3.1083.1083.583.1083.108-3.58-
FreeBSD:13:quarterly3.1083.1083.89.13.1083.1083.93_23.93_23.93_2
FreeBSD:14:latest3.1083.1083.873.1083.1083.89.1-3.89.1
FreeBSD:14:quarterly3.1083.108-3.1083.1083.93_23.93_23.93_2
FreeBSD:15:latest3.1083.108n/a3.108n/a3.93_23.93_23.93_2
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. perl5>=5.36<5.37 : lang/perl5.36
This port is required by:
for Build
  1. devel/librest
  2. devel/please
  3. devel/qca
  4. lang/julia
  5. net-im/telepathy-gabble
  6. sysutils/kleene-daemon

Deleted ports which required this port:

Expand this list of 5 deleted ports
  1. devel/qca-legacy*
  2. devel/qca-qt5*
  3. net/s3ql*
  4. net-im/empathy*
  5. security/mate-keyring*
  6. Collapse this list of deleted ports.
for Fetch
  1. archivers/plakar
  2. audio/gonic
  3. databases/pg_tileserv
  4. databases/rqlite
  5. databases/usql
  6. deskutils/pet
  7. devel/api-linter
Expand this list (118 items / 111 hidden - sorry, this count includes any deleted ports)
  1. Collapse this list).
  2. devel/athens
  3. devel/atlantis
  4. devel/capslock
  5. devel/etcd34
  6. devel/etcd35
  7. devel/etcd36
  8. devel/gilt
  9. devel/git-town
  10. devel/gitlab-shell
  11. devel/gitleaks
  12. devel/glab
  13. devel/gomigrate
  14. devel/lefthook
  15. devel/protobuf-go
  16. devel/revive
  17. dns/coredns
  18. dns/dnsx
  19. dns/mosdns
  20. dns/q-dns
  21. editors/orbiton
  22. filesystems/zrepl-dsh2dsh
  23. ftp/wush
  24. games/tetrigo
  25. graphics/oidn
  26. irc/soju
  27. lang/gptscript
  28. mail/mox
  29. math/ttmath
  30. misc/fabric
  31. misc/gollama
  32. misc/ls-lint
  33. misc/ollama
  34. net/frp
  35. net/gotify-cli
  36. net/k6
  37. net/mihomo
  38. net/sing-box
  39. net/yggdrasil
  40. net-im/dendrite
  41. net-mgmt/bind_exporter
  42. net-mgmt/check_syncthing
  43. net-mgmt/check_wg
  44. net-mgmt/mysqld_exporter
  45. net-mgmt/netdata-go
  46. net-mgmt/prometheus-bird-exporter
  47. net-mgmt/prometheus2
  48. security/certspotter
  49. security/gauth
  50. security/git-credential-gopass
  51. security/lego
  52. security/naabu
  53. security/openbao
  54. security/osv-scanner
  55. security/sops
  56. security/sshesame
  57. security/step-certificates
  58. security/step-cli
  59. security/trufflehog
  60. security/vouch-proxy
  61. security/xray-core
  62. security/zlint
  63. sysutils/alloy
  64. sysutils/cilium
  65. sysutils/envconsul
  66. sysutils/govmomi
  67. sysutils/infracost
  68. sysutils/ipmi_exporter
  69. sysutils/kapp
  70. sysutils/kubo-go
  71. sysutils/kustomize
  72. sysutils/nerdctl
  73. sysutils/nomad
  74. sysutils/nomad-pot-driver
  75. sysutils/popeye
  76. sysutils/terraform
  77. textproc/codesearch
  78. textproc/dasel
  79. textproc/gitlab-elasticsearch-indexer
  80. textproc/jqp
  81. textproc/moar
  82. textproc/termshot
  83. textproc/vacuum
  84. textproc/xlnt
  85. textproc/ytt
  86. textproc/zed
  87. textproc/zq
  88. www/fabio
  89. www/ghostunnel
  90. www/httpx
  91. www/lux
  92. www/opengist
  93. www/owncast
  94. www/tgpt
  95. www/xurls
  96. www/youtube
  97. Collapse this list.

Deleted ports which required this port:

Expand this list of 16 deleted ports
  1. devel/gitlab-metrics-exporter*
  2. devel/pydio-packr*
  3. editors/o*
  4. finance/cointop*
  5. net/clash*
  6. net/nebula*
  7. net-mgmt/chronograf*
  8. security/tfsec*
  9. sysutils/container-diff*
  10. sysutils/ipfs-go*
  11. sysutils/zrepl*
  12. sysutils/zrepl-dsh2dsh*
  13. textproc/mergestat*
  14. www/annie*
  15. www/cliqz*
  16. www/grafana9*
  17. Collapse this list of deleted ports.
for Patch
  1. deskutils/calibre
for Run
  1. audio/teamspeak3-server
  2. databases/mongosh
  3. devel/brz
  4. devel/gitlab-runner
  5. devel/hs-hoogle
  6. devel/hs-spago
  7. devel/librest
Expand this list (137 items / 130 hidden - sorry, this count includes any deleted ports)
  1. Collapse this list).
  2. devel/py-libioc
  3. devel/qca
  4. devel/stack
  5. dns/dnscrypt-proxy2
  6. dns/inadyn
  7. dns/nextdns
  8. dns/void-zones-tools
  9. games/linux-steam-utils
  10. games/prismlauncher
  11. graphics/variety
  12. irc/ircd-hybrid
  13. lang/gauche
  14. lang/julia
  15. lang/mono5.10
  16. lang/mono5.20
  17. lang/mono6.8
  18. mail/claws-mail
  19. mail/courier
  20. mail/msmtp
  21. mail/py-postfix-mta-sts-resolver
  22. mail/rspamd
  23. mail/rspamd-devel
  24. mail/sylpheed
  25. multimedia/jellyfin
  26. multimedia/tautulli
  27. net/boinc-client
  28. net/bsdec2-image-upload
  29. net/cloudflared
  30. net/hblock
  31. net/mosquitto
  32. net/ooni-mini
  33. net/ooni-probe-cli
  34. net/openntpd
  35. net/rclone
  36. net/rubygem-grpc
  37. net/rubygem-grpc-gitlab
  38. net/speedtest
  39. net-im/conduit
  40. net-im/py-matrix-synapse
  41. net-im/telepathy-gabble
  42. net-mgmt/arpwatch
  43. net-mgmt/netmagis-database
  44. net-mgmt/netmagis-www
  45. net-mgmt/py-arouteserver
  46. net-p2p/lidarr
  47. net-p2p/prowlarr
  48. net-p2p/radarr
  49. net-p2p/readarr
  50. net-p2p/sonarr
  51. ports-mgmt/freebsd-bugzilla-cli
  52. security/bitwarden-cli
  53. security/cargo-audit
  54. security/go-cve-dictionary
  55. security/headscale
  56. security/lego
  57. security/netbird
  58. security/pulledpork
  59. security/py-certbot-dns-cpanel
  60. security/snowflake-tor
  61. security/ssllabs-scan
  62. security/tailscale
  63. security/webtunnel-tor
  64. sysutils/amazon-ssm-agent
  65. sysutils/azure-agent
  66. sysutils/iocage-devel
  67. sysutils/minipot
  68. sysutils/ucspi-ssl
  69. sysutils/vagrant
  70. textproc/py-asciinema
  71. textproc/py-sphinx
  72. www/adguardhome
  73. www/gist
  74. www/grafana
  75. www/mattermost-server
  76. www/midori
  77. www/netsurf
  78. www/node18
  79. www/node20
  80. www/node22
  81. www/node24
  82. www/onlyoffice-documentserver
  83. www/py-woob
  84. Collapse this list.

Deleted ports which required this port:

Expand this list of 48 deleted ports
  1. deskutils/google-gadgets*
  2. devel/bazaar-ng*
  3. devel/bzr*
  4. devel/php-composer2*
  5. devel/py-libiocage*
  6. devel/qca-legacy*
  7. devel/qca-qt5*
  8. filesystems/httpfs*
  9. ftp/curl-hiphop*
  10. mail/fetchmail64*
  11. mail/opensmtpd-devel*
  12. multimedia/mps-youtube*
  13. multimedia/plexpy*
  14. net/py-matrix-synapse*
  15. net/qt4-network*
  16. net/rubygem-grpc124*
  17. net/rubygem-grpc130*
  18. net/rubygem-grpc142*
  19. net/s3ql*
  20. net-im/biboumi*
  21. net-im/empathy*
  22. net-p2p/sonarr-devel*
  23. ports-mgmt/redports-node*
  24. security/acme-client*
  25. security/mate-keyring*
  26. security/protonvpn-cli*
  27. sysutils/fusefs-httpfs*
  28. sysutils/osquery*
  29. sysutils/py-iocage*
  30. sysutils/py3-iocage*
  31. sysutils/ucspi-ssl-tls*
  32. textproc/py-sphinx18*
  33. textproc/py3-asciinema*
  34. textproc/py3-sphinx*
  35. www/ffsend*
  36. www/grafana7*
  37. www/grafana8*
  38. www/grafana9*
  39. www/neon29*
  40. www/node10*
  41. www/node12*
  42. www/node14*
  43. www/node16*
  44. www/node19*
  45. www/node21*
  46. www/node23*
  47. www/node8*
  48. www/py-weboob*
  49. Collapse this list of deleted ports.
* - deleted ports are only shown under the This port is required by section. It was harder to do for the Required section. Perhaps later...

Configuration Options:
===> The following configuration options are available for ca_root_nss-3.108: ETCSYMLINK=on: Add symlinks to default bundle locations ===> Use 'make config' to modify these settings
Options name:
security_ca_root_nss
USES:
perl5 ssl:build
pkg-message:
For install:
FreeBSD does not, and can not warrant that the certification authorities whose certificates are included in this package have in any way been audited for trustworthiness or RFC 3647 compliance. Assessment and verification of trust is the complete responsibility of the system administrator. This package installs symlinks to support root certificate discovery for software that either uses other cryptographic libraries than OpenSSL, or use OpenSSL but do not follow recommended practice. If you prefer to do this manually, replace the following symlinks with either an empty file or your site-local certificate bundle. * /etc/ssl/cert.pem * /usr/local/etc/ssl/cert.pem * /usr/local/openssl/cert.pem
Master Sites:
Expand this list (2 items)
Collapse this list.
  1. https://archive.mozilla.org/pub/security/nss/releases/NSS_3_108_RTM/src/
  2. https://download.cdn.mozilla.net/pub/security/nss/releases/NSS_3_108_RTM/src/
Collapse this list.

There are no commits on branch 2023Q1 for this port