Re: How to handle updates to mozilla-rootcerts?

[Greg Troxel <gdt%lexort.com@localhost>]

Martin Husemann <martin%duskware.de@localhost> writes:

> On Sun, Apr 22, 2018 at 07:29:43PM -0400, Greg Troxel wrote:
>> Agreed in theory, but the mozilla rootcerts package has code to find the
>> system openssl config and change it at install time, and it seems that
>> various packages have it as a build dependency.
>
> Random thought:
>
> maybe this build dependency should be replaced by a "make sure
> that we can fetch using https" check?
>
> If the build machine has working https (including certificate validation),
> all is fine.

I think it should be possible to use the mozilla set for pkgsrc-induced
https fetches without changing the system configuration.  Then we can
avoid the whole issue.