kpriv/freebsd-ports
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

sysutils/vm-bhyve: add security/ca_root_nss as a RUN_DEPENDS

Browse source 
"vm iso" uses fetch(1) to download iso files.  A major source of iso files
is download.freebsd.org.  If no other source of certificates has been
installed, fetch will use OpenSSL's default CA cert and path settings, but
those don't recognize the Let's Encrypt certificate used by
download.freebsd.org.

Installing security/ca_root_nss provides an alternative bundle of root
certificates, which do trust download.freebsd.org.  Since
download.freebsd.org is so critically important to most vm-bhyve users,
security/ca_root_nss should be a RUN_DEPENDS.

PR:		222109
Approved by:	churchers@gmail.com (maintainer timeout)
Sponsored by:	Spectra Logic Corp
This commit is contained in:
Alan Somers 2018-01-30 16:20:41 +00:00
parent d197ddf9b7
commit 5993d66cee
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=460414
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
sysutils/vm-bhyve/Makefile
View file

@ -12,6 +12,8 @@ COMMENT= Management system for bhyve virtual machines
LICENSE= BSD2CLAUSE
LICENSE_FILE= ${WRKSRC}/LICENSE
RUN_DEPENDS= ${LOCALBASE}/share/certs/ca-root-nss.crt:security/ca_root_nss
OPTIONS_DEFINE= EXAMPLES
EXAMPLES_DESC= Install example guest templates