mirror of
https://github.com/lfs-book/make-ca.git
synced 2026-01-09 14:17:23 +00:00
b651169925
hg.mozilla.org now redirects to hg-edge.mozilla.org. This presents a couple of unique challenges: - OpenSSL s_client cannot follow redirects. - hg-edge.mozilla.org is configured differently than hg.mozilla.org was. - The certificate used for hg-edge.mozilla.org is signed by Let's Encrypt instead of the Mozilla CA root. To fix this, we have done the following: - Removed the mozilla CA root from the make-ca package, and replaced it with ISRG-Root-X1, which is the signing root certificate for Let's Encrypt certificates. - Adjusted the Makefile to install the new signing root certificate. - Changed the URL for downloading the certdata.txt file to hg-edge.mozilla.org - Fixed problems with retrieving the certificate data from that website by specifying the HTTP version and turning off keep-alive support. As part of this we need to change from using "echo" to "printf" due to a behavior change in how "\n" is handled. Note that "\n" must be specified or else the connection will hang. This will allow certificate data to be updated once again.
66 lines
1.6 KiB
Makefile
66 lines
1.6 KiB
Makefile
MANDIR=/usr/share/man
|
|
SBINDIR=/usr/sbin
|
|
ETCDIR=/etc/make-ca
|
|
LIBEXECDIR=/usr/libexec/make-ca
|
|
|
|
all: make_ca man
|
|
|
|
make_ca:
|
|
chmod 755 make-ca
|
|
|
|
man: make_ca
|
|
chmod 755 help2man
|
|
LC_ALL=C ./help2man -s 8 -N ./make-ca -i include.h2m -o make-ca.8
|
|
|
|
clean: clean_make_ca clean_man
|
|
|
|
clean_make_ca:
|
|
chmod 0644 make-ca
|
|
|
|
clean_man:
|
|
rm -f make-ca.8
|
|
chmod 0644 help2man
|
|
|
|
install: all install_bin install_man install_systemd install_conf \
|
|
install_cs install_mozilla_ca_root
|
|
|
|
install_bin:
|
|
install -vdm755 $(DESTDIR)$(SBINDIR)
|
|
install -vm755 make-ca $(DESTDIR)$(SBINDIR)
|
|
install -vdm755 $(DESTDIR)$(LIBEXECDIR)
|
|
install -vm700 copy-trust-modifications $(DESTDIR)$(LIBEXECDIR)
|
|
|
|
install_cs:
|
|
install -vdm755 $(DESTDIR)$(ETCDIR)
|
|
install -vm644 CS.txt $(DESTDIR)$(ETCDIR)
|
|
|
|
install_systemd:
|
|
if test -x /usr/sbin/systemctl -o -x /usr/bin/systemctl; then \
|
|
if test -d /usr/lib/systemd/system; then \
|
|
install -vdm755 ${DESTDIR}/usr/lib/systemd/system; \
|
|
install -vm644 systemd/* $(DESTDIR)/usr/lib/systemd/system; \
|
|
elif test -d /lib/systemd/system; then \
|
|
install -vdm755 ${DESTDIR}/lib/systemd/system; \
|
|
install -vm644 systemd/* ${DESTDIR}/lib/systemd/system; \
|
|
fi; \
|
|
fi
|
|
|
|
install_man: man
|
|
install -vdm755 $(DESTDIR)$(MANDIR)/man8
|
|
install -vm644 make-ca.8 $(DESTDIR)$(MANDIR)/man8
|
|
|
|
install_conf:
|
|
install -vdm755 $(DESTDIR)$(ETCDIR)
|
|
install -vm644 make-ca.conf.dist $(DESTDIR)$(ETCDIR)
|
|
|
|
install_mozilla_ca_root:
|
|
install -vdm755 $(DESTDIR)$(ETCDIR)
|
|
install -vm644 ISRG_Root_X1.pem $(DESTDIR)$(ETCDIR)
|
|
|
|
uninstall:
|
|
rm -f $(DESTDIR)$(SBINDIR)/make-ca
|
|
rm -f $(DESTDIR)$(MANDIR)/man8/make-ca.8
|
|
|
|
.PHONY: all install
|
|
|