mirror of
https://github.com/dslm4515/BMLFS.git
synced 2025-08-20 14:31:47 +00:00
89 lines
3.4 KiB
Bash
89 lines
3.4 KiB
Bash
#! /bin/bash
|
|
|
|
# CA Certificates 2023-03-11
|
|
# Source: http://ftp.debian.org/debian/pool/main/c/ca-certificates/ca-certificates_20230311.tar.xz
|
|
#
|
|
# ** Unpacks to a directory named 'ca-certificates' **
|
|
#
|
|
# $BUILD = Directory to temporarily install
|
|
# $PKGS = Directory to store built packages
|
|
#
|
|
# DEPS
|
|
# Required: p11-kit
|
|
# Recommended: NONE
|
|
# Optional: NSS
|
|
|
|
cc ../files/certdata2pem.c -o mozilla/certdata2pem
|
|
|
|
cp -v ../files/remove-expired-certs.sh mozilla/
|
|
chmod -v +x mozilla/remove-expired-certs.sh
|
|
|
|
sed -i mozilla/Makefile -e 's,python3 certdata2pem.py,./certdata2pem,g'
|
|
sed -i mozilla/Makefile -e "s;\(.*\)\(certdata2pem.*\);\1\2\n\1./remove-expired-certs.sh;"
|
|
|
|
|
|
read -p "Compile? " && make -j2 &&
|
|
|
|
read -p "Install? " &&
|
|
|
|
# If not using pkgtools from Slackware and not using a package manager, skip to next section
|
|
sudo -S mkdir -pv $BUILD/usr/share/ca-certificates &&
|
|
sudo -S mkdir -pv $BUILD/etc/ssl/certs &&
|
|
sudo -S mkdir -pv $BUILD/usr/{sbin,bin}
|
|
|
|
sudo -S make install DESTDIR=$BUILD &&
|
|
|
|
sudo -S install -Dm644 sbin/update-ca-certificates.8 \
|
|
$BUILD/usr/share/man/man8/update-ca-certificates.8 &&
|
|
sudo -S mv $BUILD/usr/share/ca-certificates/mozilla/* $BUILD/usr/share/ca-certificates/ &&
|
|
|
|
cd $BUILD/usr/share/ca-certificates &&
|
|
sudo -E sh -c 'find . -name "*.crt" | sort | cut -b3- > $BUILD/etc/ca-certificates.conf' &&
|
|
sudo -S sed -i 's,openssl rehash,openssl certhash,g' $BUILD/usr/sbin/update-ca-certificates &&
|
|
sudo -S mv ${BUILD}/usr/sbin/* ${BUILD}/usr/bin
|
|
sudo -S rm -vfr ${BUILD}/usr/sbin
|
|
sudo -S ln -s /etc/ssl/certs/ca-certificates.crt $BUILD/etc/ssl/certs.pem
|
|
cd $BUILD && sudo mkdir install
|
|
cat > /tmp/slack-desc << "EOF"
|
|
# HOW TO EDIT THIS FILE:
|
|
# The "handy ruler" below makes it easier to edit a package description. Line
|
|
# up the first '|' above the ':' following the base package name, and the '|'
|
|
# on the right side marks the last column you can put a character in. You must
|
|
# make exactly 11 lines for the formatting to be correct. It's also
|
|
# customary to leave one space after the ':'.
|
|
|
|
|-----handy-ruler-----------------------------------------------------|
|
|
ca-certificates: ca-certificates (PEM Files of CA Certificates)
|
|
ca-certificates:
|
|
ca-certificates: This package includes PEM files of CA certificates to allow SSL-based
|
|
ca-certificates: applications to check for the authenticity of SSL connections.
|
|
ca-certificates:
|
|
ca-certificates: Homepage: http://packages.qa.debian.org/c/ca-certificates.html
|
|
ca-certificates:
|
|
ca-certificates:
|
|
ca-certificates:
|
|
ca-certificates:
|
|
ca-certificates:
|
|
EOF
|
|
sudo mv -v /tmp/slack-desc $BUILD/install/
|
|
sudo -S makepkg -l y -c n $PKGS/ca-certificates-2023.03.11-${PSUFFIX}
|
|
cp -v install/doinst.sh /tmp/ &&
|
|
cat >> /tmp/doinst.sh << "EOF"
|
|
echo "Updating certificates..." &&
|
|
/usr/bin/update-ca-certificates
|
|
EOF
|
|
sudo -S mv -v /tmp/doinst.sh install/ &&
|
|
sudo -S makepkg -l y -c n $PKGS/ca-certificates-2023.03.11-${PSUFFIX}
|
|
|
|
|
|
#if not using any package manager:
|
|
# sudo -S make DESTDIR=/ install
|
|
# sudo -S install -Dm644 sbin/update-ca-certificates.8 \
|
|
# /usr/share/man/man8/update-ca-certificates.8
|
|
# sudo -S mv /usr/share/ca-certificates/mozilla/* /usr/share/ca-certificates/
|
|
# cd /usr/share/ca-certificates
|
|
# su -c "find . -name '*.crt' | sort | cut -b3- > /etc/ca-certificates.conf"
|
|
#sudo -S sed -i 's,openssl rehash,openssl certhash,g' /usr/sbin/update-ca-certificates &&
|
|
#sudo -S mv /usr/sbin/ca* /usr/bin
|
|
#sudo -S ln -s /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs.pem
|