From: <abe...@us...> - 2016-03-18 21:58:16
|
Revision: 7598 http://sourceforge.net/p/astlinux/code/7598 Author: abelbeck Date: 2016-03-18 21:58:15 +0000 (Fri, 18 Mar 2016) Log Message: ----------- ca-certificates, new package installing trusted root certificates, single file bundle, mainly for use by 'curl' Modified Paths: -------------- branches/1.0/astlinux-ast11.config branches/1.0/astlinux-ast13.config branches/1.0/astlinux18.config branches/1.0/package/Config.in branches/1.0/package/libcurl/libcurl.mk branches/1.0/x86_64-configs/astlinux-ast11.config branches/1.0/x86_64-configs/astlinux-ast13.config branches/1.0/x86_64-configs/astlinux18.config Added Paths: ----------- branches/1.0/package/ca-certificates/ branches/1.0/package/ca-certificates/Config.in branches/1.0/package/ca-certificates/ca-certificates.mk Modified: branches/1.0/astlinux-ast11.config =================================================================== --- branches/1.0/astlinux-ast11.config 2016-03-16 17:17:18 UTC (rev 7597) +++ branches/1.0/astlinux-ast11.config 2016-03-18 21:58:15 UTC (rev 7598) @@ -1,7 +1,7 @@ # # Automatically generated make config: don't edit -# Buildroot 2011.08-svn7563-dirty Configuration -# Sat Feb 27 17:06:59 2016 +# Buildroot 2011.08-svn7597-dirty Configuration +# Fri Mar 18 13:54:34 2016 # BR2_HAVE_DOT_CONFIG=y # BR2_arm is not set @@ -520,6 +520,7 @@ # Crypto # # BR2_PACKAGE_BEECRYPT is not set +BR2_PACKAGE_CA_CERTIFICATES=y # BR2_PACKAGE_GNUTLS is not set # BR2_PACKAGE_LIBGCRYPT is not set # BR2_PACKAGE_LIBGPG_ERROR is not set Modified: branches/1.0/astlinux-ast13.config =================================================================== --- branches/1.0/astlinux-ast13.config 2016-03-16 17:17:18 UTC (rev 7597) +++ branches/1.0/astlinux-ast13.config 2016-03-18 21:58:15 UTC (rev 7598) @@ -1,7 +1,7 @@ # # Automatically generated make config: don't edit -# Buildroot 2011.08-svn7563-dirty Configuration -# Sat Feb 27 17:06:59 2016 +# Buildroot 2011.08-svn7597-dirty Configuration +# Fri Mar 18 13:54:38 2016 # BR2_HAVE_DOT_CONFIG=y # BR2_arm is not set @@ -520,6 +520,7 @@ # Crypto # # BR2_PACKAGE_BEECRYPT is not set +BR2_PACKAGE_CA_CERTIFICATES=y # BR2_PACKAGE_GNUTLS is not set # BR2_PACKAGE_LIBGCRYPT is not set # BR2_PACKAGE_LIBGPG_ERROR is not set Modified: branches/1.0/astlinux18.config =================================================================== --- branches/1.0/astlinux18.config 2016-03-16 17:17:18 UTC (rev 7597) +++ branches/1.0/astlinux18.config 2016-03-18 21:58:15 UTC (rev 7598) @@ -1,7 +1,7 @@ # # Automatically generated make config: don't edit -# Buildroot 2011.08-svn7563-dirty Configuration -# Sat Feb 27 17:06:59 2016 +# Buildroot 2011.08-svn7597-dirty Configuration +# Fri Mar 18 13:54:31 2016 # BR2_HAVE_DOT_CONFIG=y # BR2_arm is not set @@ -520,6 +520,7 @@ # Crypto # # BR2_PACKAGE_BEECRYPT is not set +BR2_PACKAGE_CA_CERTIFICATES=y # BR2_PACKAGE_GNUTLS is not set # BR2_PACKAGE_LIBGCRYPT is not set # BR2_PACKAGE_LIBGPG_ERROR is not set Modified: branches/1.0/package/Config.in =================================================================== --- branches/1.0/package/Config.in 2016-03-16 17:17:18 UTC (rev 7597) +++ branches/1.0/package/Config.in 2016-03-18 21:58:15 UTC (rev 7598) @@ -289,6 +289,7 @@ menu "Crypto" source "package/beecrypt/Config.in" +source "package/ca-certificates/Config.in" source "package/gnutls/Config.in" source "package/libgcrypt/Config.in" source "package/libgpg-error/Config.in" Added: branches/1.0/package/ca-certificates/Config.in =================================================================== --- branches/1.0/package/ca-certificates/Config.in (rev 0) +++ branches/1.0/package/ca-certificates/Config.in 2016-03-18 21:58:15 UTC (rev 7598) @@ -0,0 +1,9 @@ +config BR2_PACKAGE_CA_CERTIFICATES + bool "CA Certificates" + depends on BR2_PACKAGE_OPENSSL + help + This package includes PEM files of CA certificates to allow + SSL-based applications to check for the authenticity of SSL + connections. + + https://curl.haxx.se/docs/caextract.html Added: branches/1.0/package/ca-certificates/ca-certificates.mk =================================================================== --- branches/1.0/package/ca-certificates/ca-certificates.mk (rev 0) +++ branches/1.0/package/ca-certificates/ca-certificates.mk 2016-03-18 21:58:15 UTC (rev 7598) @@ -0,0 +1,31 @@ +################################################################################ +# +# ca-certificates +# +################################################################################ + +CA_CERTIFICATES_VERSION = 20160120 +CA_CERTIFICATES_SOURCE = cacert-$(CA_CERTIFICATES_VERSION).pem +CA_CERTIFICATES_SITE = http://files.astlinux.org + +## +## curl -o dl/cacert-20160120.pem https://curl.haxx.se/ca/cacert.pem +## ./scripts/upload-dl-pair dl/cacert-20160120.pem +## + +define CA_CERTIFICATES_EXTRACT_CMDS + cp $(DL_DIR)/$(CA_CERTIFICATES_SOURCE) $(@D)/cacert.pem +endef + +define CA_CERTIFICATES_INSTALL_TARGET_CMDS + $(INSTALL) -m 0755 -d $(TARGET_DIR)/usr/lib/ssl/certs + $(INSTALL) -m 0444 -D $(@D)/cacert.pem $(TARGET_DIR)/usr/share/ca-certificates/ca-bundle.crt + ln -sf /usr/share/ca-certificates/ca-bundle.crt $(TARGET_DIR)/usr/lib/ssl/certs/ca-bundle.crt +endef + +define CA_CERTIFICATES_UNINSTALL_TARGET_CMDS + rm -f $(TARGET_DIR)/usr/lib/ssl/certs/ca-bundle.crt + rm -rf $(TARGET_DIR)/usr/share/ca-certificates +endef + +$(eval $(call GENTARGETS,package,ca-certificates)) Modified: branches/1.0/package/libcurl/libcurl.mk =================================================================== --- branches/1.0/package/libcurl/libcurl.mk 2016-03-16 17:17:18 UTC (rev 7597) +++ branches/1.0/package/libcurl/libcurl.mk 2016-03-18 21:58:15 UTC (rev 7598) @@ -30,8 +30,9 @@ # Fix it by setting LD_LIBRARY_PATH to something sensible so those libs # are found first. LIBCURL_CONF_ENV += LD_LIBRARY_PATH=$$LD_LIBRARY_PATH:/lib:/usr/lib -LIBCURL_CONF_OPT += --with-ssl=$(STAGING_DIR)/usr \ - --with-ca-path=/usr/lib/ssl/certs +LIBCURL_CONF_OPT += \ + --with-ssl=$(STAGING_DIR)/usr \ + --with-ca-bundle=/usr/lib/ssl/certs/ca-bundle.crt else LIBCURL_CONF_OPT += --without-ssl endif Modified: branches/1.0/x86_64-configs/astlinux-ast11.config =================================================================== --- branches/1.0/x86_64-configs/astlinux-ast11.config 2016-03-16 17:17:18 UTC (rev 7597) +++ branches/1.0/x86_64-configs/astlinux-ast11.config 2016-03-18 21:58:15 UTC (rev 7598) @@ -1,7 +1,7 @@ # # Automatically generated make config: don't edit -# Buildroot 2011.08-svn7563-dirty Configuration -# Sat Feb 27 17:06:59 2016 +# Buildroot 2011.08-svn7597-dirty Configuration +# Fri Mar 18 13:54:56 2016 # BR2_HAVE_DOT_CONFIG=y BR2_ARCH_IS_64=y @@ -501,6 +501,7 @@ # Crypto # # BR2_PACKAGE_BEECRYPT is not set +BR2_PACKAGE_CA_CERTIFICATES=y # BR2_PACKAGE_GNUTLS is not set # BR2_PACKAGE_LIBGCRYPT is not set # BR2_PACKAGE_LIBGPG_ERROR is not set Modified: branches/1.0/x86_64-configs/astlinux-ast13.config =================================================================== --- branches/1.0/x86_64-configs/astlinux-ast13.config 2016-03-16 17:17:18 UTC (rev 7597) +++ branches/1.0/x86_64-configs/astlinux-ast13.config 2016-03-18 21:58:15 UTC (rev 7598) @@ -1,7 +1,7 @@ # # Automatically generated make config: don't edit -# Buildroot 2011.08-svn7563-dirty Configuration -# Sat Feb 27 17:07:00 2016 +# Buildroot 2011.08-svn7597-dirty Configuration +# Fri Mar 18 13:54:58 2016 # BR2_HAVE_DOT_CONFIG=y BR2_ARCH_IS_64=y @@ -501,6 +501,7 @@ # Crypto # # BR2_PACKAGE_BEECRYPT is not set +BR2_PACKAGE_CA_CERTIFICATES=y # BR2_PACKAGE_GNUTLS is not set # BR2_PACKAGE_LIBGCRYPT is not set # BR2_PACKAGE_LIBGPG_ERROR is not set Modified: branches/1.0/x86_64-configs/astlinux18.config =================================================================== --- branches/1.0/x86_64-configs/astlinux18.config 2016-03-16 17:17:18 UTC (rev 7597) +++ branches/1.0/x86_64-configs/astlinux18.config 2016-03-18 21:58:15 UTC (rev 7598) @@ -1,7 +1,7 @@ # # Automatically generated make config: don't edit -# Buildroot 2011.08-svn7563-dirty Configuration -# Sat Feb 27 17:06:59 2016 +# Buildroot 2011.08-svn7597-dirty Configuration +# Fri Mar 18 13:54:54 2016 # BR2_HAVE_DOT_CONFIG=y BR2_ARCH_IS_64=y @@ -501,6 +501,7 @@ # Crypto # # BR2_PACKAGE_BEECRYPT is not set +BR2_PACKAGE_CA_CERTIFICATES=y # BR2_PACKAGE_GNUTLS is not set # BR2_PACKAGE_LIBGCRYPT is not set # BR2_PACKAGE_LIBGPG_ERROR is not set This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |