pkgsrc/security/ca-certificates/Makefile
kim 40491cd477 security/ca-certificates: Add configurability for certificate store
- The location of the system certificate store can now be set using
  a new configuration file (ca-certificates-dir.conf).

- Installing the certificates to the system certificate store must
  be enabled by the administrator.
2022-06-12 07:05:30 +00:00

89 lines
2.9 KiB
Makefile

# $NetBSD: Makefile,v 1.7 2022/06/12 07:05:30 kim Exp $
PKGNAME= ca-certificates-20211016
PKGREVISION= 3
DISTNAME= ${PKGNAME_NOREV:C/-([^-]*)$/_\1/}
CATEGORIES= security
MASTER_SITES= http://deb.debian.org/debian/pool/main/c/ca-certificates/
EXTRACT_SUFX= .tar.xz
MAINTAINER= pkgsrc-users@NetBSD.org
HOMEPAGE= https://packages.debian.org/source/sid/ca-certificates
COMMENT= Root CA certificates from the Mozilla Project
LICENSE= gnu-gpl-v2 AND mpl-2.0
NO_CONFIGURE= yes
PYTHON_FOR_BUILD_ONLY= yes
PYTHON_VERSIONED_DEPENDENCIES+= cryptography:build
USE_TOOLS= echo:run find:run ln:run openssl:run rm:run sed:run sort:run wc:run
WRKSRC= ${WRKDIR}/${PKGNAME_NOREV}
DATADIR= ${PREFIX}/share/${PKGBASE}
DOCDIR= ${PREFIX}/share/doc/${PKGBASE}
EGDIR= ${PREFIX}/share/examples/${PKGBASE}
MANDIR= ${PREFIX}/${PKGMANDIR}/man8
# Set default certificate store path depending on whether we depend on
# builtin or pkgsrc openssl.
CHECK_BUILTIN.openssl= yes
.include "../../security/openssl/builtin.mk"
CHECK_BUILTIN.openssl= no
.if !empty(USE_BUILTIN.openssl:M[yY][eE][sS])
SSLDIR= /etc/openssl
.else
SSLDIR= ${PKG_SYSCONFDIR}/openssl
.endif
SUBST_CLASSES= conf paths
SUBST_MESSAGE.conf= Adjusting configuration file.
SUBST_STAGE.conf= post-build
SUBST_FILES.conf= ca-certificates.conf
SUBST_SED.conf= -e 's,^share/ca-certificates/,,'
SUBST_MESSAGE.paths= Replacing hard-coded paths.
SUBST_STAGE.paths= post-build
SUBST_FILES.paths= Makefile sbin/Makefile
SUBST_FILES.paths+= ca-certificates.conf
SUBST_FILES.paths+= ca-certificates-dir.conf
SUBST_FILES.paths+= sbin/update-ca-certificates sbin/update-ca-certificates.8
SUBST_FILES.paths+= README.pkgsrc
SUBST_SED.paths= -e 's,/usr/sbin,${PREFIX}/sbin,g'
SUBST_SED.paths+= -e 's,/etc/ca-certificates,${PKG_SYSCONFDIR}/ca-certificates,g'
SUBST_SED.paths+= -e 's,/etc/ssl,${SSLDIR},g'
SUBST_SED.paths+= -e 's,/usr/share/ca-certificates,${DATADIR},g'
INSTALLATION_DIRS= sbin ${DATADIR} ${DOCDIR} ${EGDIR} ${MANDIR}
CONF_FILES= ${EGDIR}/ca-certificates.conf \
${PKG_SYSCONFDIR}/ca-certificates.conf \
${EGDIR}/ca-certificates-dir.conf \
${PKG_SYSCONFDIR}/ca-certificates-dir.conf
pre-build:
@${CP} ${FILESDIR}/ca-certificates.conf ${FILESDIR}/ca-certificates-dir.conf \
${FILESDIR}/README.pkgsrc ${WRKSRC}/
@${GREP} '^share/ca-certificates/' ${FILESDIR}/../PLIST \
>> ${WRKSRC}/ca-certificates.conf
post-extract:
${MV} ${WRKDIR}/work ${WRKSRC}
post-install:
${INSTALL_MAN} \
${WRKSRC}/sbin/update-ca-certificates.8 \
${DESTDIR}${MANDIR}/
${INSTALL_DATA} \
${WRKSRC}/README.pkgsrc \
${WRKSRC}/debian/README.source \
${WRKSRC}/debian/changelog \
${DESTDIR}${DOCDIR}/
${INSTALL_DATA} \
${WRKSRC}/ca-certificates.conf \
${WRKSRC}/ca-certificates-dir.conf \
${DESTDIR}${EGDIR}/
.include "../../lang/python/tool.mk"
.include "../../lang/python/versioned_dependencies.mk"
.include "../../mk/bsd.pkg.mk"