9f5c8bd430
The impetus for this change was that wget fails to load pages signed by Let's Encrypt due to missing root certs. This version has the updated and correct certs. 0002-mozilla-certdata2pem.py-Fix-compat-with-cryptography.patch Patch dropped because the fix is incorporated upstream. Signed-off-by: Steve Hay <me@stevenhay.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
44 lines
1.6 KiB
Makefile
44 lines
1.6 KiB
Makefile
################################################################################
|
|
#
|
|
# ca-certificates
|
|
#
|
|
################################################################################
|
|
|
|
CA_CERTIFICATES_VERSION = 20230311
|
|
CA_CERTIFICATES_SOURCE = ca-certificates_$(CA_CERTIFICATES_VERSION).tar.xz
|
|
CA_CERTIFICATES_SITE = https://snapshot.debian.org/archive/debian/20230317T205011Z/pool/main/c/ca-certificates
|
|
CA_CERTIFICATES_DEPENDENCIES = host-openssl host-python3
|
|
CA_CERTIFICATES_LICENSE = GPL-2.0+ (script), MPL-2.0 (data)
|
|
CA_CERTIFICATES_LICENSE_FILES = debian/copyright
|
|
|
|
define CA_CERTIFICATES_BUILD_CMDS
|
|
$(TARGET_MAKE_ENV) $(MAKE) -C $(@D) clean all
|
|
endef
|
|
|
|
define CA_CERTIFICATES_INSTALL_TARGET_CMDS
|
|
$(INSTALL) -d -m 0755 $(TARGET_DIR)/usr/share/ca-certificates
|
|
$(INSTALL) -d -m 0755 $(TARGET_DIR)/etc/ssl/certs
|
|
$(TARGET_MAKE_ENV) $(MAKE) -C $(@D) install DESTDIR=$(TARGET_DIR)
|
|
rm -f $(TARGET_DIR)/usr/sbin/update-ca-certificates
|
|
|
|
# Remove any existing certificates under /etc/ssl/certs
|
|
rm -f $(TARGET_DIR)/etc/ssl/certs/*
|
|
|
|
# Create symlinks to certificates under /etc/ssl/certs
|
|
# and generate the bundle
|
|
cd $(TARGET_DIR) ;\
|
|
for i in `find usr/share/ca-certificates -name "*.crt" | LC_COLLATE=C sort` ; do \
|
|
ln -sf ../../../$$i etc/ssl/certs/`basename $${i} .crt`.pem ;\
|
|
cat $$i ;\
|
|
done >$(@D)/ca-certificates.crt
|
|
|
|
# Create symlinks to the certificates by their hash values
|
|
$(HOST_DIR)/bin/c_rehash $(TARGET_DIR)/etc/ssl/certs
|
|
|
|
# Install the certificates bundle
|
|
$(INSTALL) -D -m 644 $(@D)/ca-certificates.crt \
|
|
$(TARGET_DIR)/etc/ssl/certs/ca-certificates.crt
|
|
endef
|
|
|
|
$(eval $(generic-package))
|