pkgsrc-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[pkgsrc/trunk]: pkgsrc/security/mozilla-rootcerts-openssl Add mozilla-rootcer...



details:   https://anonhg.NetBSD.org/pkgsrc/rev/5c85917665f6
branches:  trunk
changeset: 650136:5c85917665f6
user:      dholland <dholland%pkgsrc.org@localhost>
date:      Sat Apr 18 20:21:25 2015 +0000

description:
Add mozilla-rootcerts-openssl.

It operates the mozilla-rootcerts installer script in order to allow
managing the resulting output openssl certs with the package tools.

Since openssl does not support more than one directory of certificates
(sheesh) this is an abusive package - it installs directly into the
openssl certs directory even though this is a sysconfig directory that
should normally only be touched using the config files infrastructure.
And, for native openssl, it's in the root /etc outside of $PREFIX.

Nonetheless, having this package is better than not having it.

Probably at some point this and the mozilla-rootcerts package should
be folded together in some fashion; but I didn't want to do that up
front, and in particular I didn't want to muck with the installer
script in mozilla-rootcerts any more than necessary to make this
package possible. This in particular prevented e.g. installing the
certs in share/ and symlinking them into the certs directory.

As things are, if you already have the certs installed manually you
can install this package over them cleanly, and thenceforth not have
to update them by hand.

diffstat:

 security/mozilla-rootcerts-openssl/DESCR    |    7 +
 security/mozilla-rootcerts-openssl/Makefile |   59 ++++
 security/mozilla-rootcerts-openssl/PLIST    |  356 ++++++++++++++++++++++++++++
 3 files changed, 422 insertions(+), 0 deletions(-)

diffs (truncated from 434 to 300 lines):

diff -r 6992aa171135 -r 5c85917665f6 security/mozilla-rootcerts-openssl/DESCR
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/security/mozilla-rootcerts-openssl/DESCR  Sat Apr 18 20:21:25 2015 +0000
@@ -0,0 +1,7 @@
+This is a hack for managing the certificate files installed into
+the OpenSSL certs directory by the mozilla-rootcerts package.
+
+For native OpenSSL it operates directly in /etc/ssl/certs (because it
+has to) and not under the pkgsrc prefix, and even for pkgsrc OpenSSL
+it still scribbles in $PREFIX/etc/ssl/certs where packages normally
+shouldn't. Be advised.
diff -r 6992aa171135 -r 5c85917665f6 security/mozilla-rootcerts-openssl/Makefile
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/security/mozilla-rootcerts-openssl/Makefile       Sat Apr 18 20:21:25 2015 +0000
@@ -0,0 +1,59 @@
+# $NetBSD: Makefile,v 1.1 2015/04/18 20:21:25 dholland Exp $
+
+PKGNAME=       mozilla-rootcerts-openssl-1
+CATEGORIES=    security
+MASTER_SITES=  # empty
+DISTFILES=     # empty
+
+MAINTAINER=    dholland%NetBSD.org@localhost
+#HOMEPAGE=     none
+COMMENT=       Wedge for installing and managing mozilla-rootcerts
+LICENSE=       modified-bsd
+
+USE_TOOLS+=    openssl
+WRKSRC=                ${WRKDIR}
+BUILD_DIRS=    # empty
+
+BUILD_DEPENDS+=        mozilla-rootcerts>=1.0.20141117nb1:../../security/mozilla-rootcerts
+SCRIPT=                ${LOCALBASE}/sbin/mozilla-rootcerts
+
+CHECK_BUILTIN.openssl= yes
+.include "../../security/openssl/builtin.mk"
+CHECK_BUILTIN.openssl= no
+
+#
+# This package needs to install directly into openssl's certs directory
+# because openssl is dumb and doesn't support multiple cert directories.
+# (Otherwise we'd install under ${PREFIX}/share.)
+#
+# For native openssl this is in /etc outside of ${PREFIX}. Beware.
+#
+.if !empty(USE_BUILTIN.openssl:M[yY][eE][sS])
+PLACE=                 /etc
+SET_PREFIX=            yes
+PLIST_SUBST+=          MYETCDIR=etc
+CHECK_FILES_SUPPORTED= no
+NOT_FOR_UNPRIVILEGED=  yes
+
+.else
+PLACE=                 ${PKG_SYSCONFDIR}
+SET_PREFIX=            no
+PLIST_SUBST+=          ${PKG_SYSCONFDIR:S/^${PREFIX}//}
+.endif
+
+OPENSSLDIR=            ${PLACE}/openssl/certs
+SSLDIR=                        ${PLACE}/ssl/certs
+
+do-install:
+       ${INSTALL_DATA_DIR} ${DESTDIR}${OPENSSLDIR}
+       #${INSTALL_DATA_DIR} ${DESTDIR}${SSLDIR} # must *not* exist
+       cd ${WRKSRC} && ${SCRIPT} -d ${DESTDIR} install
+       ${CHMOD} go+r ${DESTDIR}${OPENSSLDIR}/*.pem
+       ${CHMOD} go+r ${DESTDIR}${SSLDIR}/*.crt
+
+.include "../../mk/bsd.pkg.mk"
+
+# This must be after bsd.pkg.mk is included to work.
+.if ${SET_PREFIX} == "yes"
+PREFIX=                        /
+.endif
diff -r 6992aa171135 -r 5c85917665f6 security/mozilla-rootcerts-openssl/PLIST
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/security/mozilla-rootcerts-openssl/PLIST  Sat Apr 18 20:21:25 2015 +0000
@@ -0,0 +1,356 @@
+@comment $NetBSD: PLIST,v 1.1 2015/04/18 20:21:25 dholland Exp $
+${MYETCDIR}/openssl/certs/024dc131.0
+${MYETCDIR}/openssl/certs/034868d6.0
+${MYETCDIR}/openssl/certs/039c618a.0
+${MYETCDIR}/openssl/certs/062cdee6.0
+${MYETCDIR}/openssl/certs/064e0aa9.0
+${MYETCDIR}/openssl/certs/080911ac.0
+${MYETCDIR}/openssl/certs/0810ba98.0
+${MYETCDIR}/openssl/certs/09789157.0
+${MYETCDIR}/openssl/certs/0b759015.0
+${MYETCDIR}/openssl/certs/0ba01d19.0
+${MYETCDIR}/openssl/certs/0c4c9b6c.0
+${MYETCDIR}/openssl/certs/0d1b923b.0
+${MYETCDIR}/openssl/certs/116bf586.0
+${MYETCDIR}/openssl/certs/128805a3.0
+${MYETCDIR}/openssl/certs/157753a5.0
+${MYETCDIR}/openssl/certs/1636090b.0
+${MYETCDIR}/openssl/certs/1874d4aa.0
+${MYETCDIR}/openssl/certs/18856ac4.0
+${MYETCDIR}/openssl/certs/1d3472b9.0
+${MYETCDIR}/openssl/certs/1e09d511.0
+${MYETCDIR}/openssl/certs/1ec4d31a.0
+${MYETCDIR}/openssl/certs/2251b13a.0
+${MYETCDIR}/openssl/certs/244b5494.0
+${MYETCDIR}/openssl/certs/24ad0b63.0
+${MYETCDIR}/openssl/certs/2ab3b959.0
+${MYETCDIR}/openssl/certs/2ae6433e.0
+${MYETCDIR}/openssl/certs/2b349938.0
+${MYETCDIR}/openssl/certs/2c3e3f84.0
+${MYETCDIR}/openssl/certs/2c543cd1.0
+${MYETCDIR}/openssl/certs/2e4eed3c.0
+${MYETCDIR}/openssl/certs/2e5ac55d.0
+${MYETCDIR}/openssl/certs/349f2832.0
+${MYETCDIR}/openssl/certs/3513523f.0
+${MYETCDIR}/openssl/certs/381ce4dd.0
+${MYETCDIR}/openssl/certs/3b2716e5.0
+${MYETCDIR}/openssl/certs/3bde41ac.0
+${MYETCDIR}/openssl/certs/3e45d192.0
+${MYETCDIR}/openssl/certs/3ee7e181.0
+${MYETCDIR}/openssl/certs/3efd4dc0.0
+${MYETCDIR}/openssl/certs/40547a79.0
+${MYETCDIR}/openssl/certs/415660c1.0
+${MYETCDIR}/openssl/certs/415660c1.1
+${MYETCDIR}/openssl/certs/4304c5e5.0
+${MYETCDIR}/openssl/certs/442adcac.0
+${MYETCDIR}/openssl/certs/480720ec.0
+${MYETCDIR}/openssl/certs/4881cc08.0
+${MYETCDIR}/openssl/certs/48bec511.0
+${MYETCDIR}/openssl/certs/4a6481c9.0
+${MYETCDIR}/openssl/certs/4bfab552.0
+${MYETCDIR}/openssl/certs/4f316efb.0
+${MYETCDIR}/openssl/certs/5273a94c.0
+${MYETCDIR}/openssl/certs/5443e9e3.0
+${MYETCDIR}/openssl/certs/54657681.0
+${MYETCDIR}/openssl/certs/5620c4aa.0
+${MYETCDIR}/openssl/certs/56657bde.0
+${MYETCDIR}/openssl/certs/578d5c04.0
+${MYETCDIR}/openssl/certs/57b0f75e.0
+${MYETCDIR}/openssl/certs/57bbd831.0
+${MYETCDIR}/openssl/certs/57bcb2da.0
+${MYETCDIR}/openssl/certs/592c0a9a.0
+${MYETCDIR}/openssl/certs/5ad8a5d6.0
+${MYETCDIR}/openssl/certs/5c44d531.0
+${MYETCDIR}/openssl/certs/5cd81ad7.0
+${MYETCDIR}/openssl/certs/5d63b0ae.0
+${MYETCDIR}/openssl/certs/5f15c80c.0
+${MYETCDIR}/openssl/certs/607986c7.0
+${MYETCDIR}/openssl/certs/6410666e.0
+${MYETCDIR}/openssl/certs/653b494a.0
+${MYETCDIR}/openssl/certs/65b876bd.0
+${MYETCDIR}/openssl/certs/667c66d4.0
+${MYETCDIR}/openssl/certs/67d559d1.0
+${MYETCDIR}/openssl/certs/6b99d060.0
+${MYETCDIR}/openssl/certs/6f2c1157.0
+${MYETCDIR}/openssl/certs/706f604c.0
+${MYETCDIR}/openssl/certs/749e9e03.0
+${MYETCDIR}/openssl/certs/75d1b2ed.0
+${MYETCDIR}/openssl/certs/76cb8f92.0
+${MYETCDIR}/openssl/certs/76faf6c0.0
+${MYETCDIR}/openssl/certs/778e3cb0.0
+${MYETCDIR}/openssl/certs/790a7190.0
+${MYETCDIR}/openssl/certs/79ad8b43.0
+${MYETCDIR}/openssl/certs/7d0b38bd.0
+${MYETCDIR}/openssl/certs/7d5a75e4.0
+${MYETCDIR}/openssl/certs/7f3d5d1d.0
+${MYETCDIR}/openssl/certs/8096d0a9.0
+${MYETCDIR}/openssl/certs/812e17de.0
+${MYETCDIR}/openssl/certs/8160b96c.0
+${MYETCDIR}/openssl/certs/861a399d.0
+${MYETCDIR}/openssl/certs/861e0100.0
+${MYETCDIR}/openssl/certs/876f1e28.0
+${MYETCDIR}/openssl/certs/8867006a.0
+${MYETCDIR}/openssl/certs/88f89ea7.0
+${MYETCDIR}/openssl/certs/8b59b1ad.0
+${MYETCDIR}/openssl/certs/8d86cdd1.0
+${MYETCDIR}/openssl/certs/8e52d3cd.0
+${MYETCDIR}/openssl/certs/9007ae68.0
+${MYETCDIR}/openssl/certs/930ac5d2.0
+${MYETCDIR}/openssl/certs/93bc0acc.0
+${MYETCDIR}/openssl/certs/9818ca0b.0
+${MYETCDIR}/openssl/certs/988a38cb.0
+${MYETCDIR}/openssl/certs/9c2e7d30.0
+${MYETCDIR}/openssl/certs/9c472bf7.0
+${MYETCDIR}/openssl/certs/9c8dfbd4.0
+${MYETCDIR}/openssl/certs/9d04f354.0
+${MYETCDIR}/openssl/certs/9d520b32.0
+${MYETCDIR}/openssl/certs/9f541fb4.0
+${MYETCDIR}/openssl/certs/a5fd78f0.0
+${MYETCDIR}/openssl/certs/a6a593ba.0
+${MYETCDIR}/openssl/certs/a760e1bd.0
+${MYETCDIR}/openssl/certs/a8dee976.0
+${MYETCDIR}/openssl/certs/a94d09e5.0
+${MYETCDIR}/openssl/certs/ad088e1d.0
+${MYETCDIR}/openssl/certs/ae8153b9.0
+${MYETCDIR}/openssl/certs/ae8153b9.1
+${MYETCDIR}/openssl/certs/aee5f10d.0
+${MYETCDIR}/openssl/certs/b0e59380.0
+${MYETCDIR}/openssl/certs/b1159c4c.0
+${MYETCDIR}/openssl/certs/b13cc6df.0
+${MYETCDIR}/openssl/certs/b1b8a7f3.0
+${MYETCDIR}/openssl/certs/b204d74a.0
+${MYETCDIR}/openssl/certs/b42ff584.0
+${MYETCDIR}/openssl/certs/b66938e9.0
+${MYETCDIR}/openssl/certs/b6c5745d.0
+${MYETCDIR}/openssl/certs/b727005e.0
+${MYETCDIR}/openssl/certs/b7a5b843.0
+${MYETCDIR}/openssl/certs/b7e7231a.0
+${MYETCDIR}/openssl/certs/b8e83700.0
+${MYETCDIR}/openssl/certs/ba89ed3b.0
+${MYETCDIR}/openssl/certs/bad35b78.0
+${MYETCDIR}/openssl/certs/bb2d49a0.0
+${MYETCDIR}/openssl/certs/bd1910d4.0
+${MYETCDIR}/openssl/certs/c01cdfa2.0
+${MYETCDIR}/openssl/certs/c089bbbd.0
+${MYETCDIR}/openssl/certs/c0ff1f52.0
+${MYETCDIR}/openssl/certs/c28a8a30.0
+${MYETCDIR}/openssl/certs/c47d9980.0
+${MYETCDIR}/openssl/certs/c5d3212a.0
+${MYETCDIR}/openssl/certs/c5e082db.0
+${MYETCDIR}/openssl/certs/c8841d13.0
+${MYETCDIR}/openssl/certs/c99398f3.0
+${MYETCDIR}/openssl/certs/c9f83a1c.0
+${MYETCDIR}/openssl/certs/ca6e4ad9.0
+${MYETCDIR}/openssl/certs/cb357862.0
+${MYETCDIR}/openssl/certs/cb59f961.0
+${MYETCDIR}/openssl/certs/cbeee9e2.0
+${MYETCDIR}/openssl/certs/cbf06781.0
+${MYETCDIR}/openssl/certs/cc450945.0
+${MYETCDIR}/openssl/certs/cd58d51e.0
+${MYETCDIR}/openssl/certs/cfa1c2ee.0
+${MYETCDIR}/openssl/certs/d4dae3dd.0
+${MYETCDIR}/openssl/certs/d6325660.0
+${MYETCDIR}/openssl/certs/d7e8dc79.0
+${MYETCDIR}/openssl/certs/d853d49e.0
+${MYETCDIR}/openssl/certs/d957f522.0
+${MYETCDIR}/openssl/certs/d9d12c58.0
+${MYETCDIR}/openssl/certs/dc45b0bd.0
+${MYETCDIR}/openssl/certs/dd8e9d41.0
+${MYETCDIR}/openssl/certs/e113c810.0
+${MYETCDIR}/openssl/certs/e18bfb83.0
+${MYETCDIR}/openssl/certs/e2799e36.0
+${MYETCDIR}/openssl/certs/e36a6752.0
+${MYETCDIR}/openssl/certs/e536d871.0
+${MYETCDIR}/openssl/certs/e8de2f56.0
+${MYETCDIR}/openssl/certs/eb99629b.0
+${MYETCDIR}/openssl/certs/ee1365c0.0
+${MYETCDIR}/openssl/certs/ee64a828.0
+${MYETCDIR}/openssl/certs/eed8c118.0
+${MYETCDIR}/openssl/certs/ef2f636c.0
+${MYETCDIR}/openssl/certs/f060240e.0
+${MYETCDIR}/openssl/certs/f081611a.0
+${MYETCDIR}/openssl/certs/f30dd6ad.0
+${MYETCDIR}/openssl/certs/f3377b1b.0
+${MYETCDIR}/openssl/certs/f387163d.0
+${MYETCDIR}/openssl/certs/f39fc864.0
+${MYETCDIR}/openssl/certs/f90208f7.0
+${MYETCDIR}/openssl/certs/fc5a8f99.0
+${MYETCDIR}/openssl/certs/fcac10e3.0
+${MYETCDIR}/openssl/certs/mozilla-rootcert-0.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-1.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-10.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-100.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-101.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-102.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-103.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-104.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-105.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-106.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-107.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-108.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-109.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-11.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-110.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-111.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-112.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-113.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-114.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-115.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-116.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-117.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-118.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-119.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-12.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-120.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-121.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-13.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-131.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-132.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-133.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-134.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-135.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-136.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-137.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-138.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-139.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-14.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-140.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-141.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-142.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-15.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-151.pem
+${MYETCDIR}/openssl/certs/mozilla-rootcert-152.pem



Home | Main Index | Thread Index | Old Index