# security/mozilla-rootcerts-openssl - The NetBSD Packages Collection

Wedge for installing and managing mozilla-rootcerts

    This package configures the Mozilla rootcerts bundle CAs as trust
    anchors in OpenSSL, so that programs using OpenSSL will be able to use
    them to validate SSL certificates.  It is for manual installation by
    the system administrator only.

    For pkgsrc-provided OpenSSL, this package modifies
    ${PREFIX}/etc/ssl/certs, which belongs to another package.  This is
    somewhat irregular as packages should not modify content under etc.

    For native OpenSSL, it modifies the base system OpenSSL certificate
    directory, e.g. /etc/openssl/certs or /etc/ssl/certs.  This is
    necessary to configure trust anchors for native OpenSSL, so that
    progams in pkgsrc can use these CA certs in validation.  Modification
    of /etc is very irregular as pkgsrc should not write anything outside
    of ${PREFIX}.

    See also the mozilla-rootcerts package (which this one depends on as a
    built-time tool) for placing the Mozilla CA list in the filesystem but
    not configuring it into OpenSSL, as well as a script to aid in manual
    configuration of trust anchors.

    It is policy that no other package may depend on
    mozilla-rootcerts-openssl, because any such dependency would modify
    system configuration as a side effect of that other package.

- Source version: `mozilla-rootcerts-openssl-2.16`
- Maintainer: dholland AT NetBSD.org
- Website: none stated
- License: modified-bsd
- Package history: cvs, hg, git

## Build dependencies

security/mozilla-rootcerts pkgtools/mktools pkgtools/cwrappers

## Runtime dependencies

(none)

## Binary packages

OS | Architecture | Version
--- | --- | ---
NetBSD 10.0 | aarch64 | mozilla-rootcerts-openssl-2.14.tgz
NetBSD 10.0 | aarch64 | mozilla-rootcerts-openssl-2.13.tgz
NetBSD 10.0 | aarch64eb | mozilla-rootcerts-openssl-2.14.tgz
NetBSD 10.0 | alpha | mozilla-rootcerts-openssl-2.14.tgz
NetBSD 10.0 | earmv6hf | mozilla-rootcerts-openssl-2.14.tgz
NetBSD 10.0 | earmv6hf | mozilla-rootcerts-openssl-2.13.tgz
NetBSD 10.0 | earmv7hf | mozilla-rootcerts-openssl-2.14.tgz
NetBSD 10.0 | earmv7hf | mozilla-rootcerts-openssl-2.13.tgz
NetBSD 10.0 | i386 | mozilla-rootcerts-openssl-2.14.tgz
NetBSD 10.0 | i386 | mozilla-rootcerts-openssl-2.13.tgz
NetBSD 10.0 | i386 | mozilla-rootcerts-openssl-2.15.tgz
NetBSD 10.0 | powerpc | mozilla-rootcerts-openssl-2.12.tgz
NetBSD 10.0 | powerpc | mozilla-rootcerts-openssl-2.13.tgz
NetBSD 10.0 | sparc64 | mozilla-rootcerts-openssl-2.14.tgz
NetBSD 10.0 | sparc | mozilla-rootcerts-openssl-2.14.tgz
NetBSD 10.0 | vax | mozilla-rootcerts-openssl-2.14.tgz
NetBSD 10.0 | x86_64 | mozilla-rootcerts-openssl-2.14.tgz
NetBSD 10.0 | x86_64 | mozilla-rootcerts-openssl-2.13.tgz
NetBSD 10.0 | x86_64 | mozilla-rootcerts-openssl-2.15.tgz
NetBSD 9.0 | aarch64 | mozilla-rootcerts-openssl-2.14.tgz
NetBSD 9.0 | aarch64 | mozilla-rootcerts-openssl-2.13.tgz
NetBSD 9.0 | alpha | mozilla-rootcerts-openssl-2.14.tgz
NetBSD 9.0 | earmv6hf | mozilla-rootcerts-openssl-2.14.tgz
NetBSD 9.0 | earmv6hf | mozilla-rootcerts-openssl-2.13.tgz
NetBSD 9.0 | earmv7hf | mozilla-rootcerts-openssl-2.14.tgz
NetBSD 9.0 | earmv7hf | mozilla-rootcerts-openssl-2.13.tgz
NetBSD 9.0 | i386 | mozilla-rootcerts-openssl-2.15.tgz
NetBSD 9.0 | i386 | mozilla-rootcerts-openssl-2.13.tgz
NetBSD 9.0 | i386 | mozilla-rootcerts-openssl-2.14.tgz
NetBSD 9.0 | powerpc | mozilla-rootcerts-openssl-2.13.tgz
NetBSD 9.0 | powerpc | mozilla-rootcerts-openssl-2.12.tgz
NetBSD 9.0 | powerpc | mozilla-rootcerts-openssl-2.14.tgz
NetBSD 9.0 | sparc64 | mozilla-rootcerts-openssl-2.14.tgz
NetBSD 9.0 | x86_64 | mozilla-rootcerts-openssl-2.15.tgz
NetBSD 9.0 | x86_64 | mozilla-rootcerts-openssl-2.13.tgz
NetBSD 9.0 | x86_64 | mozilla-rootcerts-openssl-2.14.tgz
NetBSD 9.3 | x86_64 | mozilla-rootcerts-openssl-2.15.tgz
NetBSD 9.3 | x86_64 | mozilla-rootcerts-openssl-2.15.tgz

Binary packages can be installed with the high-level tool pkgin (which can be installed with pkg_add) or pkg_add(1) (installed by default). The NetBSD packages collection is also designed to permit easy installation from source.

## Available build options

(none)

## Known vulnerabilities

(no vulnerabilities known)

The pkg_admin audit command locates any installed package which has been mentioned in security advisories as having vulnerabilities.

Please note the vulnerabilities database might not be fully accurate, and not every bug is exploitable with every configuration.

Problem reports, updates or suggestions for this package should be reported with send-pr.