kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/security/mozilla-rootcerts-openssl/Makefile

59 lines
1.5 KiB
Makefile
Raw Normal View History

mozilla-rootcerts-openssl: adapt for mozilla-rootcerts change
2021-10-14 14:42:43 +02:00
# $NetBSD: Makefile,v 1.18 2021/10/14 12:42:43 wiz Exp $
Add mozilla-rootcerts-openssl. It operates the mozilla-rootcerts installer script in order to allow managing the resulting output openssl certs with the package tools. Since openssl does not support more than one directory of certificates (sheesh) this is an abusive package - it installs directly into the openssl certs directory even though this is a sysconfig directory that should normally only be touched using the config files infrastructure. And, for native openssl, it's in the root /etc outside of $PREFIX. Nonetheless, having this package is better than not having it. Probably at some point this and the mozilla-rootcerts package should be folded together in some fashion; but I didn't want to do that up front, and in particular I didn't want to muck with the installer script in mozilla-rootcerts any more than necessary to make this package possible. This in particular prevented e.g. installing the certs in share/ and symlinking them into the certs directory. As things are, if you already have the certs installed manually you can install this package over them cleanly, and thenceforth not have to update them by hand.
2015-04-18 22:21:25 +02:00
mozilla-rootcerts-openssl: bump for 20211014.
2021-10-14 14:40:10 +02:00
PKGNAME= mozilla-rootcerts-openssl-2.7
Add mozilla-rootcerts-openssl. It operates the mozilla-rootcerts installer script in order to allow managing the resulting output openssl certs with the package tools. Since openssl does not support more than one directory of certificates (sheesh) this is an abusive package - it installs directly into the openssl certs directory even though this is a sysconfig directory that should normally only be touched using the config files infrastructure. And, for native openssl, it's in the root /etc outside of $PREFIX. Nonetheless, having this package is better than not having it. Probably at some point this and the mozilla-rootcerts package should be folded together in some fashion; but I didn't want to do that up front, and in particular I didn't want to muck with the installer script in mozilla-rootcerts any more than necessary to make this package possible. This in particular prevented e.g. installing the certs in share/ and symlinking them into the certs directory. As things are, if you already have the certs installed manually you can install this package over them cleanly, and thenceforth not have to update them by hand.
2015-04-18 22:21:25 +02:00
CATEGORIES= security
MASTER_SITES= # empty
DISTFILES= # empty
MAINTAINER= dholland@NetBSD.org
#HOMEPAGE= none
COMMENT= Wedge for installing and managing mozilla-rootcerts
LICENSE= modified-bsd
USE_TOOLS+= openssl
WRKSRC= ${WRKDIR}
BUILD_DIRS= # empty
mozilla-rootcerts-openssl: adapt for mozilla-rootcerts change
2021-10-14 14:42:43 +02:00
BUILD_DEPENDS+= mozilla-rootcerts-1.0.20210916{,nb[0-9]*}:../../security/mozilla-rootcerts
Add mozilla-rootcerts-openssl. It operates the mozilla-rootcerts installer script in order to allow managing the resulting output openssl certs with the package tools. Since openssl does not support more than one directory of certificates (sheesh) this is an abusive package - it installs directly into the openssl certs directory even though this is a sysconfig directory that should normally only be touched using the config files infrastructure. And, for native openssl, it's in the root /etc outside of $PREFIX. Nonetheless, having this package is better than not having it. Probably at some point this and the mozilla-rootcerts package should be folded together in some fashion; but I didn't want to do that up front, and in particular I didn't want to muck with the installer script in mozilla-rootcerts any more than necessary to make this package possible. This in particular prevented e.g. installing the certs in share/ and symlinking them into the certs directory. As things are, if you already have the certs installed manually you can install this package over them cleanly, and thenceforth not have to update them by hand.
2015-04-18 22:21:25 +02:00
SCRIPT= ${LOCALBASE}/sbin/mozilla-rootcerts
CHECK_BUILTIN.openssl= yes
.include "../../security/openssl/builtin.mk"
CHECK_BUILTIN.openssl= no
#
# This package needs to install directly into openssl's certs directory
# because openssl is dumb and doesn't support multiple cert directories.
# (Otherwise we'd install under ${PREFIX}/share.)
#
# For native openssl this is in /etc outside of ${PREFIX}. Beware.
#
.if !empty(USE_BUILTIN.openssl:M[yY][eE][sS])
security/mozilla-rootcerts-openssl: Allow in-pkgsrc unprivileged install This was marked NOT_FOR_UNPRIVILEGED, but that is only appropriate when the package (abusively, as a pre-existing well-discussed compromise) writes outside of the pkgsrc prefix. Patch by Jason Bacon, with general approval on tech-pkg. ok dholland@
2020-03-12 14:43:35 +01:00
NOT_FOR_UNPRIVILEGED= yes
Add mozilla-rootcerts-openssl. It operates the mozilla-rootcerts installer script in order to allow managing the resulting output openssl certs with the package tools. Since openssl does not support more than one directory of certificates (sheesh) this is an abusive package - it installs directly into the openssl certs directory even though this is a sysconfig directory that should normally only be touched using the config files infrastructure. And, for native openssl, it's in the root /etc outside of $PREFIX. Nonetheless, having this package is better than not having it. Probably at some point this and the mozilla-rootcerts package should be folded together in some fashion; but I didn't want to do that up front, and in particular I didn't want to muck with the installer script in mozilla-rootcerts any more than necessary to make this package possible. This in particular prevented e.g. installing the certs in share/ and symlinking them into the certs directory. As things are, if you already have the certs installed manually you can install this package over them cleanly, and thenceforth not have to update them by hand.
2015-04-18 22:21:25 +02:00
PLACE= /etc
SET_PREFIX= yes
PLIST_SUBST+= MYETCDIR=etc
CHECK_FILES_SUPPORTED= no
.else
Make this work properly with pkgsrc openssl. I thought I'd tested that case, but it seems to have been flagrantly broken, and hopefully now it isn't. Thanks to richard@ for testing.
2015-07-05 21:02:04 +02:00
PLACE= ${MY_PKG_SYSCONFDIR}
Catch up with mozilla-rootcerts package A recent rototill of mozilla-rootcerts removed the notion of /etc/ssl. Remove that notion here so this builds again. Add comment questioning setting PREFIX to /etc when pkgsrc openssl is used, now that /etc/ssl is no longer used.
2017-06-22 19:53:59 +02:00
# probably SET_PREFIX should not be set
Make this work properly with pkgsrc openssl. I thought I'd tested that case, but it seems to have been flagrantly broken, and hopefully now it isn't. Thanks to richard@ for testing.
2015-07-05 21:02:04 +02:00
SET_PREFIX= yes
PLIST_SUBST+= MYETCDIR=${MY_PKG_SYSCONFDIR:S/^${PREFIX}//}
Add mozilla-rootcerts-openssl. It operates the mozilla-rootcerts installer script in order to allow managing the resulting output openssl certs with the package tools. Since openssl does not support more than one directory of certificates (sheesh) this is an abusive package - it installs directly into the openssl certs directory even though this is a sysconfig directory that should normally only be touched using the config files infrastructure. And, for native openssl, it's in the root /etc outside of $PREFIX. Nonetheless, having this package is better than not having it. Probably at some point this and the mozilla-rootcerts package should be folded together in some fashion; but I didn't want to do that up front, and in particular I didn't want to muck with the installer script in mozilla-rootcerts any more than necessary to make this package possible. This in particular prevented e.g. installing the certs in share/ and symlinking them into the certs directory. As things are, if you already have the certs installed manually you can install this package over them cleanly, and thenceforth not have to update them by hand.
2015-04-18 22:21:25 +02:00
.endif
OPENSSLDIR= ${PLACE}/openssl/certs
do-install:
${INSTALL_DATA_DIR} ${DESTDIR}${OPENSSLDIR}
cd ${WRKSRC} && ${SCRIPT} -d ${DESTDIR} install
${CHMOD} go+r ${DESTDIR}${OPENSSLDIR}/*.pem
Catch up with mozilla-rootcerts package A recent rototill of mozilla-rootcerts removed the notion of /etc/ssl. Remove that notion here so this builds again. Add comment questioning setting PREFIX to /etc when pkgsrc openssl is used, now that /etc/ssl is no longer used.
2017-06-22 19:53:59 +02:00
${CHMOD} go+r ${DESTDIR}${OPENSSLDIR}/*.crt
Add mozilla-rootcerts-openssl. It operates the mozilla-rootcerts installer script in order to allow managing the resulting output openssl certs with the package tools. Since openssl does not support more than one directory of certificates (sheesh) this is an abusive package - it installs directly into the openssl certs directory even though this is a sysconfig directory that should normally only be touched using the config files infrastructure. And, for native openssl, it's in the root /etc outside of $PREFIX. Nonetheless, having this package is better than not having it. Probably at some point this and the mozilla-rootcerts package should be folded together in some fashion; but I didn't want to do that up front, and in particular I didn't want to muck with the installer script in mozilla-rootcerts any more than necessary to make this package possible. This in particular prevented e.g. installing the certs in share/ and symlinking them into the certs directory. As things are, if you already have the certs installed manually you can install this package over them cleanly, and thenceforth not have to update them by hand.
2015-04-18 22:21:25 +02:00
.include "../../mk/bsd.pkg.mk"
# This must be after bsd.pkg.mk is included to work.
Make this work properly with pkgsrc openssl. I thought I'd tested that case, but it seems to have been flagrantly broken, and hopefully now it isn't. Thanks to richard@ for testing.
2015-07-05 21:02:04 +02:00
MY_PKG_SYSCONFDIR:= ${PKG_SYSCONFDIR}
Add mozilla-rootcerts-openssl. It operates the mozilla-rootcerts installer script in order to allow managing the resulting output openssl certs with the package tools. Since openssl does not support more than one directory of certificates (sheesh) this is an abusive package - it installs directly into the openssl certs directory even though this is a sysconfig directory that should normally only be touched using the config files infrastructure. And, for native openssl, it's in the root /etc outside of $PREFIX. Nonetheless, having this package is better than not having it. Probably at some point this and the mozilla-rootcerts package should be folded together in some fashion; but I didn't want to do that up front, and in particular I didn't want to muck with the installer script in mozilla-rootcerts any more than necessary to make this package possible. This in particular prevented e.g. installing the certs in share/ and symlinking them into the certs directory. As things are, if you already have the certs installed manually you can install this package over them cleanly, and thenceforth not have to update them by hand.
2015-04-18 22:21:25 +02:00
.if ${SET_PREFIX} == "yes"
PREFIX= /
.endif
Reference in a new issue Copy permalink