security/p11-kit: use base system consolidated anchor lists
Currently p11-kit already uses base-system certificates from /usr/share/certs
(since 8672992ef7f072f87304e953231de77179143f1d 2023-02-01 11:05:18 +0000).
Base system's certctl tool allows administrator to add locally trusted anchors
in /usr/local/share/certs, but p11-kit's current behaviour will ignore them.
Use system's consolidated certificates in /etc/ssl/certs and
/etc/ssl/untrusted instead of /usr/share/certs/trusted and
/usr/share/certs/untrusted.
These directories (/etc/ssl/ ones) are managed by system's certctl tool,
and reflects the same content plus admin's managed trusted/untrusted certs.
This change should not break any current behaviour on FreeBSD > 12.2.
This is also coherent with debian's behaviour (on debian, p11_trust_paths
is set to /etc/ssl/certs/ca-certificates.crt, updated by system's
[6 lines not shown]
sysutils/intel-nvmupdate-*: Add OEM ports
OEM adapters from Dell, HPE and Lenovo can use independent eTrack and
nvm settings, so the Intel utilities don't recognize all adapters.
Additionally, Intel doesn't supply public nvm updates for the LOM/OCP parts.
These ports combine a suitable version of Intel's FreeBSD nvmupdate binary
with the OEM firmware payloads and configurations.
devel/py-pytest-rich: New port: Leverage rich for richer test session output
required by misc/py-transformers
PR: 298597
Approved by: Baptiste Daroussin <bapt at FreeBSD.org> (on behalf of portmgr@)
textproc/py-sacrebleu: New port: Compute shareable BLEU, chrF, and TER scores for machine translation
required by misc/py-transformers
PR: 298607
Approved by: Baptiste Daroussin <bapt at FreeBSD.org> (on behalf of portmgr@)
