ca-roots port -- a list of SSL Certificate Authority root certs

svn path=/head/; revision=32317

security/Makefile

@@ -6,6 +6,7 @@
     SUBDIR += bjorb
     SUBDIR += bro
     SUBDIR += bugs
+    SUBDIR += ca-roots
     SUBDIR += calife
     SUBDIR += cfs
     SUBDIR += checkpassword

security/ca-roots/Makefile

@@ -0,0 +1,21 @@
+# Ports collection makefile for:  ca-roots
+# Date created:			  Sep 5, 2000
+# Whom:				  nsayer
+#
+# $FreeBSD$
+#
+
+PORTNAME=	ca-roots
+PORTVERSION=	1.0
+CATEGORIES=	security
+DISTFILES=	# none
+
+MAINTAINER=	nsayer@FreeBSD.org
+
+NO_BUILD=	yes
+
+do-install:
+		${MKDIR} ${PREFIX}/share/certs
+		${INSTALL_DATA} ${FILESDIR}/ca-root.crt ${PREFIX}/share/certs
+
+.include <bsd.port.mk>

security/ca-roots/distinfo

@@ -0,0 +1 @@
+# no distfiles

security/ca-roots/pkg-comment

@@ -0,0 +1 @@
+A list of SSL CA root certificates

security/ca-roots/pkg-descr

@@ -0,0 +1,11 @@
+This port simply contains a list of SSL Certificate Authority root
+certificates. Such a list performs a similar role for SSL Certificate
+verfication that the root cache does for DNS servers.
+
+This list originally came from mod_ssl (where it was ca-bundle.crt. They
+originally got their list from Netscape Communicator/Navigator),
+but will be maintained separately. The maintainer will apply strict
+criteria to suggestions for additions to this list (in concert with
+the FreeBSD security officer). CAs wishing to be added will need
+to assure the FreeBSD user community that their certification procedures
+are sufficiently secure to render their certificates trustworthy.

security/ca-roots/pkg-plist

@@ -0,0 +1,3 @@
+@exec mkdir -p %D/share/certs
+share/certs/ca-root.crt
+@unexec rmdir %D/share/certs