54 lines
1.7 KiB
Plaintext
54 lines
1.7 KiB
Plaintext
|
# Description: CACERTS for JAVA
|
||
|
|
# URL: https://openjdk.java.net/
|
||
|
|
# Maintainer: John Vogel, jvogel4 at stny dot rr dot com
|
||
|
|
|
||
|
|
## https://hg.mozilla.org/mozilla-central/log/tip/security/nss/lib/ckfw/builtins/certdata.txt
|
||
|
|
## cvsweb.netbsd.org/bsdweb.cgi/~checkout~/pkgsrc/security/mozilla-rootcerts/Makefile?rev=1.42&content-type=text/plain
|
||
|
|
|
||
|
|
name=java-cacerts
|
||
|
|
version=20201204
|
||
|
|
certdata_rev=bc61343b5d68
|
||
|
|
pkgsrc_quarter=2020Q4
|
||
|
|
release=1
|
||
|
|
source=(certdata-$certdata_rev.txt
|
||
|
|
mozilla-rootcerts-$pkgsrc_quarter.sh
|
||
|
|
openjdk8-boot-20190719-bin.tar.xz)
|
||
|
|
|
||
|
|
build() {
|
||
|
|
sed -e "/# cd \/etc\/openssl\/certs/s//# cd \/usr\/share\/$name\/certs/" \
|
||
|
|
-e '/@AWK@/s,,/usr/bin/awk,' \
|
||
|
|
-e "/@DATADIR@/s,,/usr/share/$name," \
|
||
|
|
-e '/@ECHO@/s,,/bin/echo,' \
|
||
|
|
-e '/@EXPR@/s,,/usr/bin/expr,' \
|
||
|
|
-e '/@LN@/s,,/bin/ln,' \
|
||
|
|
-e '/@LS@/s,,/bin/ls,' \
|
||
|
|
-e '/@MKDIR@/s,,/bin/mkdir,' \
|
||
|
|
-e '/@OPENSSL@/s,,/usr/bin/openssl,' \
|
||
|
|
-e '/@PREFIX@/s,,/usr,' \
|
||
|
|
-e "/@SSLDIR@/s,,/usr/share/$name," \
|
||
|
|
-e '/@RM@/s,,/bin/rm,' \
|
||
|
|
-e 's,self extract,self -f $certfile extract,' \
|
||
|
|
-e 's,self rehash,self -f $certfile rehash,' \
|
||
|
|
$SRC/mozilla-rootcerts-$pkgsrc_quarter.sh > $SRC/mozilla-rootcerts
|
||
|
|
|
||
|
|
OLD_PATH=$PATH
|
||
|
|
export JAVA_HOME=$SRC/openjdk8-boot
|
||
|
|
export PATH=$JAVA_HOME/bin:$OLD_PATH
|
||
|
|
|
||
|
|
# Generate java's cacerts.
|
||
|
|
# Big thanks to pkgsrc's mozilla-rootcerts and openjdk pkg's for this part.
|
||
|
|
install -d -m 0755 $PKG/etc/ssl/java
|
||
|
|
mkdir $SRC/cacerts
|
||
|
|
cd $SRC/cacerts
|
||
|
|
sh $SRC/mozilla-rootcerts -f $SRC/certdata-$certdata_rev.txt extract
|
||
|
|
for cert in *.pem; do
|
||
|
|
keytool \
|
||
|
|
-noprompt \
|
||
|
|
-importcert \
|
||
|
|
-keystore $PKG/etc/ssl/java/cacerts \
|
||
|
|
-alias $(echo $cert | sed 's,.*/\([^/]*\)\.pem,\1,') \
|
||
|
|
-file $cert \
|
||
|
|
-storepass changeit
|
||
|
|
done
|
||
|
|
}
|