1*4882a593Smuzhiyun################################################################################ 2*4882a593Smuzhiyun# 3*4882a593Smuzhiyun# ca-certificates 4*4882a593Smuzhiyun# 5*4882a593Smuzhiyun################################################################################ 6*4882a593Smuzhiyun 7*4882a593SmuzhiyunCA_CERTIFICATES_VERSION = 20211016 8*4882a593SmuzhiyunCA_CERTIFICATES_SOURCE = ca-certificates_$(CA_CERTIFICATES_VERSION).tar.xz 9*4882a593SmuzhiyunCA_CERTIFICATES_SITE = https://snapshot.debian.org/archive/debian/20211022T144903Z/pool/main/c/ca-certificates 10*4882a593SmuzhiyunCA_CERTIFICATES_DEPENDENCIES = host-openssl host-python3 host-python-cryptography 11*4882a593SmuzhiyunCA_CERTIFICATES_LICENSE = GPL-2.0+ (script), MPL-2.0 (data) 12*4882a593SmuzhiyunCA_CERTIFICATES_LICENSE_FILES = debian/copyright 13*4882a593Smuzhiyun 14*4882a593Smuzhiyundefine CA_CERTIFICATES_BUILD_CMDS 15*4882a593Smuzhiyun $(TARGET_MAKE_ENV) $(MAKE) -C $(@D) clean all 16*4882a593Smuzhiyunendef 17*4882a593Smuzhiyun 18*4882a593Smuzhiyundefine CA_CERTIFICATES_INSTALL_TARGET_CMDS 19*4882a593Smuzhiyun $(INSTALL) -d -m 0755 $(TARGET_DIR)/usr/share/ca-certificates 20*4882a593Smuzhiyun $(INSTALL) -d -m 0755 $(TARGET_DIR)/etc/ssl/certs 21*4882a593Smuzhiyun $(TARGET_MAKE_ENV) $(MAKE) -C $(@D) install DESTDIR=$(TARGET_DIR) 22*4882a593Smuzhiyun rm -f $(TARGET_DIR)/usr/sbin/update-ca-certificates 23*4882a593Smuzhiyun 24*4882a593Smuzhiyun # Remove any existing certificates under /etc/ssl/certs 25*4882a593Smuzhiyun rm -f $(TARGET_DIR)/etc/ssl/certs/* 26*4882a593Smuzhiyun 27*4882a593Smuzhiyun # Create symlinks to certificates under /etc/ssl/certs 28*4882a593Smuzhiyun # and generate the bundle 29*4882a593Smuzhiyun cd $(TARGET_DIR) ;\ 30*4882a593Smuzhiyun for i in `find usr/share/ca-certificates -name "*.crt" | LC_COLLATE=C sort` ; do \ 31*4882a593Smuzhiyun ln -sf ../../../$$i etc/ssl/certs/`basename $${i} .crt`.pem ;\ 32*4882a593Smuzhiyun cat $$i ;\ 33*4882a593Smuzhiyun done >$(@D)/ca-certificates.crt 34*4882a593Smuzhiyun 35*4882a593Smuzhiyun # Create symlinks to the certificates by their hash values 36*4882a593Smuzhiyun $(HOST_DIR)/bin/c_rehash $(TARGET_DIR)/etc/ssl/certs 37*4882a593Smuzhiyun 38*4882a593Smuzhiyun # Install the certificates bundle 39*4882a593Smuzhiyun $(INSTALL) -D -m 644 $(@D)/ca-certificates.crt \ 40*4882a593Smuzhiyun $(TARGET_DIR)/etc/ssl/certs/ca-certificates.crt 41*4882a593Smuzhiyunendef 42*4882a593Smuzhiyun 43*4882a593Smuzhiyun$(eval $(generic-package)) 44