diff options
Diffstat (limited to 'meta/recipes-support/ca-certificates/ca-certificates_20190110.bb')
-rw-r--r-- | meta/recipes-support/ca-certificates/ca-certificates_20190110.bb | 87 |
1 files changed, 87 insertions, 0 deletions
diff --git a/meta/recipes-support/ca-certificates/ca-certificates_20190110.bb b/meta/recipes-support/ca-certificates/ca-certificates_20190110.bb new file mode 100644 index 0000000000..b9f57900c8 --- /dev/null +++ b/meta/recipes-support/ca-certificates/ca-certificates_20190110.bb | |||
@@ -0,0 +1,87 @@ | |||
1 | SUMMARY = "Common CA certificates" | ||
2 | DESCRIPTION = "This package includes PEM files of CA certificates to allow \ | ||
3 | SSL-based applications to check for the authenticity of SSL connections. \ | ||
4 | This derived from Debian's CA Certificates." | ||
5 | HOMEPAGE = "http://packages.debian.org/sid/ca-certificates" | ||
6 | SECTION = "misc" | ||
7 | LICENSE = "GPL-2.0+ & MPL-2.0" | ||
8 | LIC_FILES_CHKSUM = "file://debian/copyright;md5=aeb420429b1659507e0a5a1b123e8308" | ||
9 | |||
10 | # This is needed to ensure we can run the postinst at image creation time | ||
11 | DEPENDS = "" | ||
12 | DEPENDS_class-native = "openssl-native" | ||
13 | DEPENDS_class-nativesdk = "openssl-native" | ||
14 | # Need c_rehash from openssl and run-parts from debianutils | ||
15 | PACKAGE_WRITE_DEPS += "openssl-native debianutils-native" | ||
16 | |||
17 | SRCREV = "c28799b138b044c963d24c4a69659b6e5486e3be" | ||
18 | |||
19 | SRC_URI = "git://salsa.debian.org/debian/ca-certificates.git;protocol=https \ | ||
20 | file://0002-update-ca-certificates-use-SYSROOT.patch \ | ||
21 | file://0001-update-ca-certificates-don-t-use-Debianisms-in-run-p.patch \ | ||
22 | file://update-ca-certificates-support-Toybox.patch \ | ||
23 | file://default-sysroot.patch \ | ||
24 | file://sbindir.patch \ | ||
25 | file://0003-update-ca-certificates-use-relative-symlinks-from-ET.patch \ | ||
26 | " | ||
27 | |||
28 | S = "${WORKDIR}/git" | ||
29 | |||
30 | inherit allarch | ||
31 | |||
32 | EXTRA_OEMAKE = "\ | ||
33 | 'CERTSDIR=${datadir}/ca-certificates' \ | ||
34 | 'SBINDIR=${sbindir}' \ | ||
35 | " | ||
36 | |||
37 | do_compile_prepend() { | ||
38 | oe_runmake clean | ||
39 | } | ||
40 | |||
41 | do_install () { | ||
42 | install -d ${D}${datadir}/ca-certificates \ | ||
43 | ${D}${sysconfdir}/ssl/certs \ | ||
44 | ${D}${sysconfdir}/ca-certificates/update.d | ||
45 | oe_runmake 'DESTDIR=${D}' install | ||
46 | |||
47 | install -d ${D}${mandir}/man8 | ||
48 | install -m 0644 sbin/update-ca-certificates.8 ${D}${mandir}/man8/ | ||
49 | |||
50 | install -d ${D}${sysconfdir} | ||
51 | { | ||
52 | echo "# Lines starting with # will be ignored" | ||
53 | echo "# Lines starting with ! will remove certificate on next update" | ||
54 | echo "#" | ||
55 | find ${D}${datadir}/ca-certificates -type f -name '*.crt' | \ | ||
56 | sed 's,^${D}${datadir}/ca-certificates/,,' | ||
57 | } >${D}${sysconfdir}/ca-certificates.conf | ||
58 | } | ||
59 | |||
60 | do_install_append_class-target () { | ||
61 | sed -i -e 's,/etc/,${sysconfdir}/,' \ | ||
62 | -e 's,/usr/share/,${datadir}/,' \ | ||
63 | -e 's,/usr/local,${prefix}/local,' \ | ||
64 | ${D}${sbindir}/update-ca-certificates \ | ||
65 | ${D}${mandir}/man8/update-ca-certificates.8 | ||
66 | } | ||
67 | |||
68 | pkg_postinst_${PN}_class-target () { | ||
69 | SYSROOT="$D" $D${sbindir}/update-ca-certificates | ||
70 | } | ||
71 | |||
72 | CONFFILES_${PN} += "${sysconfdir}/ca-certificates.conf" | ||
73 | |||
74 | # Rather than make a postinst script that works for both target and nativesdk, | ||
75 | # we just run update-ca-certificate from do_install() for nativesdk. | ||
76 | CONFFILES_${PN}_append_class-nativesdk = " ${sysconfdir}/ssl/certs/ca-certificates.crt" | ||
77 | do_install_append_class-nativesdk () { | ||
78 | SYSROOT="${D}${SDKPATHNATIVE}" ${D}${sbindir}/update-ca-certificates | ||
79 | } | ||
80 | |||
81 | do_install_append_class-native () { | ||
82 | SYSROOT="${D}${base_prefix}" ${D}${sbindir}/update-ca-certificates | ||
83 | } | ||
84 | |||
85 | RDEPENDS_${PN} += "openssl" | ||
86 | |||
87 | BBCLASSEXTEND = "native nativesdk" | ||