Re: CVS commit: pkgsrc/lang/rust

[Greg Troxel <gdt%lexort.com@localhost>]

Leonardo Taccari <leot%NetBSD.org@localhost> writes:

> Hello Ryo,
>
> Ryo ONODERA writes:
>> [...]
>> cargo requires root CA certificates, bump PKGREVISON
>>
>> * NetBSD base has no root CA certificate, depend on mozilla-rootcerts-openssl.
>> [...]
>
> Can this be avoided and instead depends on mozilla-rootcerts pointing
> cargo to corresponding certificates if really needed?
>
> While mozilla-rootcerts-openssl could be pretty handy it automatically
> populate /etc/ssl/certs and in some situations this can be not
> desiderable.

Agreed.   I think it's not ok for any package to depend on
mozilla-rootcerts-openssl so that trust anchors are not configured
behind the user's back.

(It's fine for rust to depend on mozilla-rootcerts, which causes the
certs to be present but not configured as trust anchors, and to
configure them within the rust build.)