A standard install command grabs pre-built stuff from 
https://packages.macports.org/privoxy-pki-bundle 
<https://packages.macports.org/privoxy-pki-bundle>. This pre-built stuff is 
inevitably stale because it inevitably contains expired certs. We want to port 
to install stuff, just not pre-built expired stuff.

The desired behavior is to always install from “source,” i.e. the behavior that 
goes with “port -s install” which always installs the latest up-to-date PKI. 

How does one write a Portfile to prevent installs from being cached at 
https://packages.macports.org/privoxy-pki-bundle ? 


> sudo port install privoxy-pki-bundle
> --->  Computing dependencies for privoxy-pki-bundle
> --->  Fetching archive for privoxy-pki-bundle
> --->  Attempting to fetch 
> privoxy-pki-bundle-3.0.33_3+user_pki_bundle.darwin_21.x86_64.tbz2 from 
> https://packages.macports.org/privoxy-pki-bundle



> On May 22, 2022, at 5:19 AM, Ryan Schmidt <ryandes...@macports.org> wrote:
> 
> On May 21, 2022, at 12:40, Steven Smith wrote:
> 
>> Is there a way to achieve the second objective: prevent MacPorts from 
>> building and caching its own copy of the port contents, which for this port 
>> will inevitably be filled with expired certificates?
>> 
>> Right now, avoiding this issue requires installing the port from “source” 
>> with `port -s install`.
> 
> Again I don't understand the question.
> 
> If you don't want the port to install anything, write the destroot phase to 
> do that. Except that a port must install at least one file. But this doesn't 
> sound like what you're asking.
> 
> Why will what the port installs inevitably be filled with expired 
> certificates? What would be the cause of that happening?
> 
> If the port's contents should be changed (in the binaries produced by the 
> buildbot and on user systems) then change the port to install the new 
> contents and increase its revision.
> 
> Perhaps there is something unique about this software that I don't 
> understand. (I have no idea what this software is.)
> 

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to