gc() + add patch from Markj

security/ca_root_nss/Makefile

@@ -0,0 +1,60 @@
+PORTNAME=	ca_root_nss
+PORTVERSION=	${VERSION_NSS}
+PORTREVISION=	4
+CATEGORIES=	security
+MASTER_SITES=	MOZILLA/security/nss/releases/${DISTNAME:tu:C/[-.]/_/g}_RTM/src
+DISTNAME=	nss-${VERSION_NSS}${NSS_SUFFIX}
+
+MAINTAINER=	ports-secteam@FreeBSD.org
+COMMENT=	Root certificate bundle from the Mozilla Project
+
+LICENSE=	MPL20
+LICENSE_FILE=	${WRKSRC}/COPYING
+
+USES=		perl5 ssl:build
+USE_PERL5=	build
+
+NO_ARCH=	yes
+WRKSRC_SUBDIR=	nss
+
+OPTIONS_DEFINE=		ETCSYMLINK
+OPTIONS_DEFAULT=	ETCSYMLINK
+OPTIONS_EXCLUDE_FreeBSD_15=	ETCSYMLINK
+OPTIONS_EXCLUDE_FreeBSD_16=	ETCSYMLINK
+
+OPTIONS_SUB=		yes
+
+ETCSYMLINK_DESC=	Add symlinks to default bundle locations
+ETCSYMLINK_CONFLICTS_INSTALL=	ca-roots-[0-9]*
+
+CERTDIR?=	share/certs
+PLIST_SUB+=	CERTDIR=${CERTDIR}
+
+VERSION_NSS=	3.115
+CERTDATA_TXT_PATH=	lib/ckfw/builtins/certdata.txt
+BUNDLE_PROCESSOR=	MAca-bundle.pl
+
+CERTCTL_CMD?=	/usr/sbin/certctl
+
+SUB_FILES=	MAca-bundle.pl pkg-deinstall pkg-install pkg-message
+SUB_LIST=	CERTCTL_CMD=${CERTCTL_CMD} VERSION_NSS=${VERSION_NSS}
+
+do-build:
+	@${SETENV} PATH=${LOCALBASE}/bin:$${PATH} \
+		${PERL} ${WRKDIR}/${BUNDLE_PROCESSOR} \
+	    < ${WRKSRC}/${CERTDATA_TXT_PATH} > \
+	    ${WRKDIR}/ca-root-nss.crt
+
+do-install:
+	${MKDIR} ${STAGEDIR}${PREFIX}/${CERTDIR}
+	${INSTALL_DATA} ${WRKDIR}/ca-root-nss.crt ${STAGEDIR}${PREFIX}/${CERTDIR}
+	${MKDIR} ${STAGEDIR}${PREFIX}/etc/ssl
+	${LN} -sf ../../${CERTDIR}/ca-root-nss.crt ${STAGEDIR}${PREFIX}/etc/ssl/cert.pem.sample
+
+do-install-ETCSYMLINK-on:
+	${MKDIR} ${STAGEDIR}${PREFIX}/openssl
+	${LN} -sf ../etc/ssl/cert.pem ${STAGEDIR}${PREFIX}/openssl/cert.pem
+	${MKDIR} ${STAGEDIR}/etc/ssl
+	${LN} -sf ../..${PREFIX}/etc/ssl/cert.pem ${STAGEDIR}/etc/ssl/cert.pem
+
+.include <bsd.port.mk>