8b03b2a664
Update Mozilla certificate authority bundle to version 2.22. The following certificate authorities were added (+): + "GDCA TrustAUTH R5 ROOT" + "SSL.com EV Root Certification Authority ECC" + "SSL.com EV Root Certification Authority RSA R2" + "SSL.com Root Certification Authority ECC" + "SSL.com Root Certification Authority RSA" + "TrustCor ECA-1" + "TrustCor RootCert CA-1" + "TrustCor RootCert CA-2" The following certificate authorities were removed (-): - "ACEDICOM Root" - "AddTrust Low-Value Services Root" - "AddTrust Public Services Root" - "AddTrust Qualified Certificates Root" - "CA Disig Root R1" - "CNNIC ROOT" - "Camerfirma Chambers of Commerce Root" - "Camerfirma Global Chambersign Root" - "Certinomis - Autorité Racine" - "Certum Root CA" - "China Internet Network Information Center EV Certificates Root" - "Comodo Secure Services root" - "Comodo Trusted Services root" - "DST ACES CA X6" - "GeoTrust Global CA 2" - "PSCProcert" - "Security Communication EV RootCA1" - "Swisscom Root CA 1" - "Swisscom Root CA 2" - "Swisscom Root EV CA 2" - "TURKTRUST Certificate Services Provider Root 2007" - "TUBITAK UEKAE Kok Sertifika Hizmet Saglayicisi - Surum 3" - "UTN USERFirst Hardware Root CA" Signed-off-by: Martin Bark <martin@barkynet.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
44 lines
1.6 KiB
Makefile
44 lines
1.6 KiB
Makefile
################################################################################
|
|
#
|
|
# ca-certificates
|
|
#
|
|
################################################################################
|
|
|
|
CA_CERTIFICATES_VERSION = 20180409
|
|
CA_CERTIFICATES_SOURCE = ca-certificates_$(CA_CERTIFICATES_VERSION).tar.xz
|
|
CA_CERTIFICATES_SITE = http://snapshot.debian.org/archive/debian/20180411T111033Z/pool/main/c/ca-certificates
|
|
CA_CERTIFICATES_DEPENDENCIES = host-openssl
|
|
# ca-certificates can be built with either python 2 or python 3
|
|
# but it must be at least python 2.7
|
|
CA_CERTIFICATES_DEPENDENCIES += \
|
|
$(if $(BR2_PACKAGE_PYTHON3),host-python3,host-python)
|
|
CA_CERTIFICATES_LICENSE = GPL-2.0+ (script), MPL-2.0 (data)
|
|
CA_CERTIFICATES_LICENSE_FILES = debian/copyright
|
|
|
|
define CA_CERTIFICATES_BUILD_CMDS
|
|
$(TARGET_MAKE_ENV) $(MAKE) -C $(@D) all
|
|
endef
|
|
|
|
define CA_CERTIFICATES_INSTALL_TARGET_CMDS
|
|
$(INSTALL) -d -m 0755 $(TARGET_DIR)/usr/share/ca-certificates
|
|
$(INSTALL) -d -m 0755 $(TARGET_DIR)/etc/ssl/certs
|
|
$(TARGET_MAKE_ENV) $(MAKE) -C $(@D) install DESTDIR=$(TARGET_DIR)
|
|
rm -f $(TARGET_DIR)/usr/sbin/update-ca-certificates
|
|
|
|
# Remove any existing certificates under /etc/ssl/certs
|
|
rm -f $(TARGET_DIR)/etc/ssl/certs/*
|
|
|
|
# Create symlinks to certificates under /etc/ssl/certs
|
|
# and generate the bundle
|
|
cd $(TARGET_DIR) ;\
|
|
for i in `find usr/share/ca-certificates -name "*.crt"` ; do \
|
|
ln -sf ../../../$$i etc/ssl/certs/`basename $${i} .crt`.pem ;\
|
|
cat $$i >>etc/ssl/certs/ca-certificates.crt ;\
|
|
done
|
|
|
|
# Create symlinks to the certificates by their hash values
|
|
$(HOST_DIR)/bin/c_rehash $(TARGET_DIR)/etc/ssl/certs
|
|
endef
|
|
|
|
$(eval $(generic-package))
|