879aef85da
which contains all the trusted certificates in PEM format. This file can e.g. be used with command line clients like "curl" or "wget" to validate certificates.
60 lines
1.9 KiB
Makefile
60 lines
1.9 KiB
Makefile
# $NetBSD: Makefile,v 1.22 2016/02/06 10:22:54 tron Exp $
|
|
|
|
DISTNAME= mozilla-rootcerts-1.0.${CERTDATA_DATE}
|
|
PKGREVISION= 1
|
|
CATEGORIES= security
|
|
MASTER_SITES= -https://hg.mozilla.org/mozilla-central/raw-file/2f1a37cb43ac/security/nss/lib/ckfw/builtins/certdata.txt
|
|
DISTFILES= ${CERTDATA}
|
|
EXTRACT_SUFX= # empty
|
|
|
|
MAINTAINER= pkgsrc-users@NetBSD.org
|
|
HOMEPAGE= https://hg.mozilla.org/mozilla-central/log/tip/security/nss/lib/ckfw/builtins/certdata.txt
|
|
COMMENT= Root CA certificates from the Mozilla Project
|
|
LICENSE= mpl-2.0
|
|
|
|
USE_TOOLS= awk:run echo:run expr:run ln:run ls:run openssl:run rm:run mkdir:run
|
|
|
|
# This must be kept in sync with security/mozilla-rootcerts-openssl
|
|
CERTDATA_DATE= 20150804
|
|
CERTDATA= certdata-${CERTDATA_DATE}.txt
|
|
|
|
WRKSRC= ${WRKDIR}
|
|
DATADIR= ${PREFIX}/share/${PKGBASE}
|
|
|
|
CHECK_BUILTIN.openssl= yes
|
|
.include "../../security/openssl/builtin.mk"
|
|
CHECK_BUILTIN.openssl= no
|
|
.if !empty(USE_BUILTIN.openssl:M[yY][eE][sS])
|
|
SSLDIR= /etc/openssl/certs
|
|
.else
|
|
SSLDIR= ${PKG_SYSCONFDIR}/openssl/certs
|
|
.endif
|
|
|
|
CERT_SCRIPT= mozilla-rootcerts.sh
|
|
|
|
SUBST_CLASSES= paths
|
|
SUBST_MESSAGE.paths= Replacing hard-coded paths.
|
|
SUBST_STAGE.paths= post-configure
|
|
SUBST_FILES.paths= ${CERT_SCRIPT}
|
|
SUBST_VARS.paths= AWK ECHO EXPR LN LOCALBASE LS RM DATADIR MKDIR SSLDIR
|
|
SUBST_SED.paths= -e 's,@OPENSSL@,${TOOLS_PATH.openssl},g'
|
|
|
|
INSTALLATION_DIRS= sbin ${DATADIR}
|
|
|
|
do-extract:
|
|
${CP} ${FILESDIR}/${CERT_SCRIPT} ${WRKSRC}
|
|
${CP} ${DISTDIR}/${CERTDATA} ${WRKSRC}
|
|
|
|
do-build:
|
|
${MKDIR} ${WRKSRC}/certs
|
|
cd ${WRKSRC}/certs && \
|
|
${SH} ${WRKSRC}/${CERT_SCRIPT} -f ${WRKSRC}/${CERTDATA} extract
|
|
${LS} -rt ${WRKSRC}/certs/*.pem | ${XARGS} ${CAT} >${WRKSRC}/cacert.pem
|
|
|
|
do-install:
|
|
${INSTALL_SCRIPT} ${WRKSRC}/${CERT_SCRIPT} \
|
|
${DESTDIR}${PREFIX}/sbin/mozilla-rootcerts
|
|
${INSTALL_DATA} ${WRKSRC}/${CERTDATA} ${DESTDIR}${DATADIR}/certdata.txt
|
|
${INSTALL_DATA} ${WRKSRC}/cacert.pem ${DESTDIR}${DATADIR}/cacert.pem
|
|
|
|
.include "../../mk/bsd.pkg.mk"
|