Re: mozilla rootcerts in base

[Tobias Nygren <tnn%NetBSD.org@localhost>]

On Tue, 29 Aug 2023 08:36:37 +0000
pin <voidpin%protonmail.com@localhost> wrote:

> I'm fine with rebuilding the 23 packages but, I would like to be sure that security/mozilla-rootcerts doesn't get re-installed.

Some packages do bundle certificates at build time so it may come back
as a build dependency.

I think your dependency chains can be mostly traced to p11-kit, which
wants to be configured with an explicit path:

CONFIGURE_ARGS+=	--with-trust-paths=${PREFIX}/share/mozilla-rootcerts/cacert.pem

Adding a builtin.mk to the mozilla-rootcerts package that
exposes the path to trust store as a pkgsrc variable could be one
way to solve this.

-Tobias