#38972: curl-ca-bundle needs update? -----------------------------+-------------------------- Reporter: dave@… | Owner: ryandesign@… Type: defect | Status: new Priority: Normal | Milestone: Component: ports | Version: 2.1.3 Resolution: | Keywords: Port: curl-ca-bundle | -----------------------------+-------------------------- Comment (by matthew-macports@…): The current location of the Mozilla root certificates is not where the Portfile at https://trac.macports.org/browser/trunk/dports/net/curl/Portfile is looking. The Portfile is looking at: http://mxr.mozilla.org/mozilla/source/security/nss/lib/ckfw/builtins/certdat... but Mozilla now update the file at: http://mxr.mozilla.org/mozilla- central/source/security/nss/lib/ckfw/builtins/certdata.txt (note mozilla-central, rather than mozilla). The former has not changed since December 2012: http://bonsai.mozilla.org/cvslog.cgi?file=mozilla/security/nss/lib/ckfw/buil... the latter was last updated yesterday: http://hg.mozilla.org/mozilla- central/log/3de89bd361c3/security/nss/lib/ckfw/builtins/certdata.txt So it looks like curl-ca-bundle won't have had any updates since 2013 (which explains why I am starting to get SSL cert errors more frequently using curl). -- Ticket URL: <https://trac.macports.org/ticket/38972#comment:6> MacPorts <https://www.macports.org/> Ports system for OS X