0020-update-ca-certificates-to20190110.patch 3.2 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071
  1. diff --git a/package/ca-certificates/Config.in b/package/ca-certificates/Config.in
  2. index a278a62..6bb7182 100644
  3. --- a/package/ca-certificates/Config.in
  4. +++ b/package/ca-certificates/Config.in
  5. @@ -6,6 +6,7 @@ config BR2_PACKAGE_CA_CERTIFICATES
  6. connections.
  7. It includes, among others, certificate authorities used by the
  8. - Debian infrastructure and those shipped with Mozilla's browsers.
  9. + Debian infrastructure and those shipped with Mozilla's
  10. + browsers.
  11. http://anonscm.debian.org/gitweb/?p=collab-maint/ca-certificates.git
  12. diff --git a/package/ca-certificates/ca-certificates.hash b/package/ca-certificates/ca-certificates.hash
  13. index b467316..e83902f 100644
  14. --- a/package/ca-certificates/ca-certificates.hash
  15. +++ b/package/ca-certificates/ca-certificates.hash
  16. @@ -1,3 +1 @@
  17. -# hashes from: $(CA_CERTIFICATES_SITE)/ca-certificates_$(CA_CERTIFICATES_VERSION).dsc :
  18. -sha1 4525a194736c6691dbd59fa87281b722837b4768 ca-certificates_20160104.tar.xz
  19. -sha256 09eb770122e23260316120c0cbbddc8a1d33e7147210ce44e146084d5d5abcdd ca-certificates_20160104.tar.xz
  20. +sha256 ee4bf0f4c6398005f5b5ca4e0b87b82837ac5c3b0280a1cb3a63c47555c3a675 ca-certificates_20190110.tar.xz
  21. diff --git a/package/ca-certificates/ca-certificates.mk b/package/ca-certificates/ca-certificates.mk
  22. index f26be64..21e2c03 100644
  23. --- a/package/ca-certificates/ca-certificates.mk
  24. +++ b/package/ca-certificates/ca-certificates.mk
  25. @@ -4,19 +4,19 @@
  26. #
  27. ################################################################################
  28. -CA_CERTIFICATES_VERSION = 20160104
  29. +CA_CERTIFICATES_VERSION = 20190110
  30. CA_CERTIFICATES_SOURCE = ca-certificates_$(CA_CERTIFICATES_VERSION).tar.xz
  31. -CA_CERTIFICATES_SITE = http://snapshot.debian.org/archive/debian/20160104T220912Z/pool/main/c/ca-certificates
  32. +CA_CERTIFICATES_SITE = http://snapshot.debian.org/archive/debian/20190510T144732Z/pool/main/c/ca-certificates
  33. CA_CERTIFICATES_DEPENDENCIES = host-openssl
  34. # ca-certificates can be built with either python 2 or python 3
  35. # but it must be at least python 2.7
  36. CA_CERTIFICATES_DEPENDENCIES += \
  37. $(if $(BR2_PACKAGE_PYTHON3),host-python3,host-python)
  38. -CA_CERTIFICATES_LICENSE = GPLv2+ (script), MPLv2.0 (data)
  39. +CA_CERTIFICATES_LICENSE = GPL-2.0+ (script), MPL-2.0 (data)
  40. CA_CERTIFICATES_LICENSE_FILES = debian/copyright
  41. define CA_CERTIFICATES_BUILD_CMDS
  42. - $(TARGET_MAKE_ENV) $(MAKE) -C $(@D) all
  43. + $(TARGET_MAKE_ENV) $(MAKE) -C $(@D) clean all
  44. endef
  45. define CA_CERTIFICATES_INSTALL_TARGET_CMDS
  46. @@ -31,13 +31,17 @@ define CA_CERTIFICATES_INSTALL_TARGET_CMDS
  47. # Create symlinks to certificates under /etc/ssl/certs
  48. # and generate the bundle
  49. cd $(TARGET_DIR) ;\
  50. - for i in `find usr/share/ca-certificates -name "*.crt"` ; do \
  51. + for i in `find usr/share/ca-certificates -name "*.crt" | LC_COLLATE=C sort` ; do \
  52. ln -sf ../../../$$i etc/ssl/certs/`basename $${i} .crt`.pem ;\
  53. - cat $$i >>etc/ssl/certs/ca-certificates.crt ;\
  54. - done
  55. + cat $$i ;\
  56. + done >$(@D)/ca-certificates.crt
  57. # Create symlinks to the certificates by their hash values
  58. $(HOST_DIR)/usr/bin/c_rehash $(TARGET_DIR)/etc/ssl/certs
  59. +
  60. + # Install the certificates bundle
  61. + $(INSTALL) -D -m 644 $(@D)/ca-certificates.crt \
  62. + $(TARGET_DIR)/etc/ssl/certs/ca-certificates.crt
  63. endef
  64. $(eval $(generic-package))