From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 972A7138331 for ; Wed, 18 Apr 2018 08:27:30 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 80626E092F; Wed, 18 Apr 2018 08:27:29 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 597D5E0930 for ; Wed, 18 Apr 2018 08:27:29 +0000 (UTC) Received: from oystercatcher.gentoo.org (unknown [IPv6:2a01:4f8:202:4333:225:90ff:fed9:fc84]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 1048A335C49 for ; Wed, 18 Apr 2018 08:27:28 +0000 (UTC) Received: from localhost.localdomain (localhost [IPv6:::1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id 6CA9628F for ; Wed, 18 Apr 2018 08:27:26 +0000 (UTC) From: "Lars Wendler" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Lars Wendler" Message-ID: <1524040034.d918cce6210806d599ca19d622cf020cec633afc.polynomial-c@gentoo> Subject: [gentoo-commits] repo/gentoo:master commit in: app-misc/ca-certificates/ X-VCS-Repository: repo/gentoo X-VCS-Files: app-misc/ca-certificates/ca-certificates-20180409.3.36.1-r1.ebuild X-VCS-Directories: app-misc/ca-certificates/ X-VCS-Committer: polynomial-c X-VCS-Committer-Name: Lars Wendler X-VCS-Revision: d918cce6210806d599ca19d622cf020cec633afc X-VCS-Branch: master Date: Wed, 18 Apr 2018 08:27:26 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: dc38f227-bf23-4cce-aa6a-0401f8bc8475 X-Archives-Hash: d30c5f58456014de263ff198317c3ceb commit: d918cce6210806d599ca19d622cf020cec633afc Author: Lars Wendler gentoo org> AuthorDate: Wed Apr 18 08:26:10 2018 +0000 Commit: Lars Wendler gentoo org> CommitDate: Wed Apr 18 08:27:14 2018 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d918cce6 app-misc/ca-certificates: Dropped "insecure_certs" USE flag. This also removes the now empty elog message about "removed certs". Closes: https://bugs.gentoo.org/653456 Closes: https://bugs.gentoo.org/653458 Package-Manager: Portage-2.3.30, Repoman-2.3.9 .../ca-certificates-20180409.3.36.1-r1.ebuild | 16 ++-------------- 1 file changed, 2 insertions(+), 14 deletions(-) diff --git a/app-misc/ca-certificates/ca-certificates-20180409.3.36.1-r1.ebuild b/app-misc/ca-certificates/ca-certificates-20180409.3.36.1-r1.ebuild index d3eccf90357..8d5bc12f58e 100644 --- a/app-misc/ca-certificates/ca-certificates-20180409.3.36.1-r1.ebuild +++ b/app-misc/ca-certificates/ca-certificates-20180409.3.36.1-r1.ebuild @@ -60,7 +60,7 @@ fi LICENSE="MPL-1.1" SLOT="0" KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86 ~ppc-aix ~x64-cygwin ~amd64-fbsd ~x86-fbsd ~amd64-linux ~arm-linux ~x86-linux ~ppc-macos ~x64-macos ~x86-macos ~m68k-mint ~sparc-solaris ~sparc64-solaris ~x64-solaris ~x86-solaris ~x86-winnt" -IUSE="insecure_certs" +IUSE="" ${PRECOMPILED} || IUSE+=" cacert" DEPEND="" @@ -105,7 +105,7 @@ src_prepare() { if use cacert ; then pushd "${S}"/nss-${NSS_VER} >/dev/null - epatch "${DISTDIR}"/nss-cacert-class1-class3.patch + eapply -p0 "${DISTDIR}"/nss-cacert-class1-class3.patch popd >/dev/null fi fi @@ -140,18 +140,6 @@ src_compile() { mv usr/share/doc/{ca-certificates,${PF}} || die fi - if ! use insecure_certs ; then - elog "To prevent applications relying on system's trusted root certificate store" - elog "from using CAs where at least one major browser vendor Gentoo is following" - elog "has decided to apply trust level restrictions, the following" - elog "certificate(s) were removed:" - # Remove untrusted certs from StartCom and WoSign (bug #598072) - elog "$(find "${c}" -type f \( \ - -iname '*startcom*' \ - -o -iname '*wosign*' \ - \) -printf '%P removed; see https://bugs.gentoo.org/598072 for details\n' -delete)" - fi - ( echo "# Automatically generated by ${CATEGORY}/${PF}" echo "# $(date -u)"