[oe-commits] Thomas Zimmermann : ca-certificates: add package for ssl certificates

[git version control]

Module: openembedded.git
Branch: shr/unstable
Commit: 0c657954819306057e7c0ee3a007e4da05ffcd99
URL:    http://gitweb.openembedded.net/?p=openembedded.git&a=commit;h=0c657954819306057e7c0ee3a007e4da05ffcd99

Author: Thomas Zimmermann <ml at vdm-design.de>
Date:   Thu Mar  4 14:57:54 2010 +0100

ca-certificates: add package for ssl certificates

* this is package for ssl certificates as they are no longer
  provided by curl nor openssl
* this package contains the certificates from debian
* uses update-ca-certificates from debian without the
  part that creates hash links to the certs, because
  that uses c_rehash from openssl which is a perl script

Signed-off-by: Thomas Zimmermann <ml at vdm-design.de>

---

 .../ca-certificates/ca-certificates_20090814.bb    |   40 ++++++++++++++++++++
 .../ca-certificates/files/remove-c-rehash.patch    |   29 ++++++++++++++
 2 files changed, 69 insertions(+), 0 deletions(-)

diff --git a/recipes/ca-certificates/ca-certificates_20090814.bb b/recipes/ca-certificates/ca-certificates_20090814.bb
new file mode 100644
index 0000000..ae85fea
--- /dev/null
+++ b/recipes/ca-certificates/ca-certificates_20090814.bb
@@ -0,0 +1,40 @@
+DESCRIPTION = "Common CA certificates"
+HOMEPAGE = "http://packages.debian.org/sid/ca-certificates"
+SECTION = "misc"
+PRIORITY = "optional"
+LICENSE = "GPL"
+
+SRC_URI = "http://ftp.de.debian.org/debian/pool/main/c/ca-certificates/ca-certificates_${PV}.tar.gz;name=archive \
+           file://remove-c-rehash.patch;patch=1"
+SRC_URI[archive.md5sum] = "307052c985bec7f9a00eb84293eef779"
+SRC_URI[archive.sha256sum] = "6924fafc35dd020da99bc86842f95f2a97a3a5ff084b0635eea815fe2777fc7c"
+
+inherit autotools
+
+do_install_prepend() {
+        mkdir -p ${D}/usr/share/ca-certificates
+        mkdir -p ${D}/usr/sbin
+        mkdir -p ${D}/etc/ssl/certs
+        mkdir -p ${D}/etc/ca-certificates/update.d
+}
+
+do_install_append() {
+        cd ${D}/usr/share/ca-certificates
+        echo "# Lines starting with # will be ignored" > ${D}/etc/ca-certificates.conf
+        echo "# Lines starting with ! will remove certificate on next update" >> ${D}/etc/ca-certificates.conf
+        echo "#" >> ${D}/etc/ca-certificates.conf
+        for crt in $(find . -type f -name '*.crt' -print)
+        do
+                crt=$(echo $crt | sed -e 's/\.\///')
+                echo $crt >> ${D}/etc/ca-certificates.conf
+        done
+}
+
+PACKAGE_ARCH = "all"
+PACKAGES = "${PN}"
+
+pkg_postinst_${PN} () {
+        /usr/sbin/update-ca-certificates
+}
+
+CONFFILES_${PN} = "/etc/ca-certificates.conf"
diff --git a/recipes/ca-certificates/files/remove-c-rehash.patch b/recipes/ca-certificates/files/remove-c-rehash.patch
new file mode 100644
index 0000000..9d9b8ad
--- /dev/null
+++ b/recipes/ca-certificates/files/remove-c-rehash.patch
@@ -0,0 +1,29 @@
+--- ca-certificates-20090814/sbin/update-ca-certificates.orig	2010-02-25 19:25:08.272807308 +0100
++++ ca-certificates-20090814/sbin/update-ca-certificates	2010-02-25 19:25:33.962806273 +0100
+@@ -133,16 +133,16 @@
+ ADDED_CNT=$(wc -l < "$ADDED")
+ REMOVED_CNT=$(wc -l < "$REMOVED")
+ 
+-if [ "$ADDED_CNT" -gt 0 ] || [ "$REMOVED_CNT" -gt 0 ]
+-then
+-  # only run if set of files has changed
+-  if [ "$verbose" = 0 ]
+-  then
+-    c_rehash . > /dev/null
+-  else
+-    c_rehash .
+-  fi
+-fi
++#if [ "$ADDED_CNT" -gt 0 ] || [ "$REMOVED_CNT" -gt 0 ]
++#then
++#  # only run if set of files has changed
++#  if [ "$verbose" = 0 ]
++#  then
++#    c_rehash . > /dev/null
++#  else
++#    c_rehash .
++#  fi
++#fi
+ 
+ echo "$ADDED_CNT added, $REMOVED_CNT removed; done."
+