ca-certificates: new package

CA certificates used for SSL based applications.  The package installs CA
certificates to /usr/share/ca-certificates and creates symbolic links under
/etc/ssl/certs.  For example, the existing libcurl package will use these
certificates for https urls.  Based on the debian ca-certifcates package.

[Peter: fixup comments as pointed out by Yann]
Signed-off-by: Martin Bark <martin@barkynet.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
This commit is contained in:
Martin Bark 2014-01-10 15:39:44 +00:00 committed by Peter Korsgaard
parent 9f596dbdf5
commit beb24ce2b0
3 changed files with 49 additions and 0 deletions

View File

@ -473,6 +473,7 @@ endmenu
menu "Crypto"
source "package/beecrypt/Config.in"
source "package/ca-certificates/Config.in"
source "package/cryptodev/Config.in"
source "package/gnutls/Config.in"
source "package/libassuan/Config.in"

View File

@ -0,0 +1,11 @@
config BR2_PACKAGE_CA_CERTIFICATES
bool "CA Certificates"
help
This package includes PEM files of CA certificates to allow
SSL-based applications to check for the authenticity of SSL
connections.
It includes, among others, certificate authorities used by the
Debian infrastructure and those shipped with Mozilla's browsers.
http://anonscm.debian.org/gitweb/?p=collab-maint/ca-certificates.git

View File

@ -0,0 +1,37 @@
################################################################################
#
# ca-certificates
#
################################################################################
CA_CERTIFICATES_VERSION = 20130906
CA_CERTIFICATES_SOURCE = ca-certificates_$(CA_CERTIFICATES_VERSION).tar.gz
CA_CERTIFICATES_SITE = http://snapshot.debian.org/archive/debian/20130907T154615Z/pool/main/c/ca-certificates
CA_CERTIFICATES_DEPENDENCIES = host-openssl host-python
CA_CERTIFICATES_LICENSE = GPLv2+ (script), MPLv2.0 (data)
CA_CERTIFICATES_LICENSE_FILES = debian/copyright
define CA_CERTIFICATES_BUILD_CMDS
$(TARGET_MAKE_ENV) $(MAKE) -C $(@D) all
endef
define CA_CERTIFICATES_INSTALL_TARGET_CMDS
$(INSTALL) -d -m 0755 $(TARGET_DIR)/usr/share/ca-certificates
$(INSTALL) -d -m 0755 $(TARGET_DIR)/etc/ssl/certs
$(MAKE) -C $(@D) install DESTDIR=$(TARGET_DIR)
rm -f $(TARGET_DIR)/usr/sbin/update-ca-certificates
# Remove any existing certificates under /etc/ssl/certs
rm -f $(TARGET_DIR)/etc/ssl/certs/*
# Create symlinks to certificates under /etc/ssl/certs
cd $(TARGET_DIR) ;\
for i in `find usr/share/ca-certificates -name "*.crt"` ; do \
ln -sf ../../../$$i etc/ssl/certs/`basename $${i} .crt`.pem ;\
done
# Create symlinks to the certificates by their hash values
$(HOST_DIR)/usr/bin/c_rehash $(TARGET_DIR)/etc/ssl/certs
endef
$(eval $(generic-package))