[Buildroot] [PATCH 1/1] ca-certificates: new package
Baruch Siach
baruch at tkos.co.il
Wed Jan 8 11:55:18 UTC 2014
Hi Martin,
On Wed, Jan 08, 2014 at 11:30:25AM +0000, Martin Bark wrote:
> Thanks for the feedback Baruch,
>
> I'll update to use $(BR2_DEBIAN_MIRROR)
>
> Although the files mentioned in debian/copying do not directly end up in
> the rootfs they are used. mozilla/certdata.txt is a big list of
> certificates and mozilla/certdata2pem.py is a python script which is run to
> split mozilla/certdata.txt into all the separate pem files that end up in
> the rootfs. Therefore i think this license info is valid.
I think you are right, but the string should indicate that. Something like
CA_CERTIFICATES_LICENSE = GPLv2+ (script), MPLv2.0 (data)
baruch
> On 8 January 2014 04:52, Baruch Siach <baruch at tkos.co.il> wrote:
> > Thanks for the patch. A few comments below.
> >
> > On Tue, Jan 07, 2014 at 08:29:50PM +0000, Martin Bark wrote:
> > > CA certificates used for SSL based applications. The package installs CA
> > > certificates to /usr/share/ca-certificates and creates symbolic links
> > under
> > > /etc/ssl/certs. For example, the existing libcurl package will use these
> > > certificates for https urls. Based on the debian ca-certifcates package.
> > >
> > > Signed-off-by: Martin Bark <martin at barkynet.com>
> >
> > [...]
> >
> > > +CA_CERTIFICATES_VERSION = 20130906
> > > +CA_CERTIFICATES_SOURCE =
> > ca-certificates_$(CA_CERTIFICATES_VERSION).tar.gz
> > > +CA_CERTIFICATES_SITE =
> > ftp://ftp.debian.org/debian/pool/main/c/ca-certificates
> >
> > Please use $(BR2_DEBIAN_MIRROR). See package/at/at.mk, for example.
> >
> > > +CA_CERTIFICATES_DEPENDENCIES = host-openssl host-python
> > > +CA_CERTIFICATES_LICENSE = GPLv2+ MPLv2.0
> > > +CA_CERTIFICATES_LICENSE_FILES = debian/copyright
> >
> > According to debian/copyright these licenses apply to the specific files
> > listed there. You don't use any of these files as far as I can see.
> >
> > > +define CA_CERTIFICATES_BUILD_CMDS
> > > + PATH=$(HOST_PATH) $(MAKE) -C $(@D) all
> > > +endef
> > > +
> > > +define CA_CERTIFICATES_INSTALL_TARGET_CMDS
> > > + $(INSTALL) -d -m 0755 $(TARGET_DIR)/usr/share/ca-certificates
> > > + $(INSTALL) -d -m 0755 $(TARGET_DIR)/etc/ssl/certs
> > > + $(MAKE) -C $(@D) install DESTDIR=$(TARGET_DIR)
> > > + rm -f $(TARGET_DIR)/usr/sbin/update-ca-certificates
> > > +
> > > + #remove any existing certificates under /etc/ssl/certs
> > > + rm -f $(TARGET_DIR)/etc/ssl/certs/*
> > > +
> > > + #generate symlinks to certificates under /etc/ssl/certs
> > > + ( \
> > > + cd $(TARGET_DIR) ;\
> > > + for i in `find usr/share/ca-certificates -name "*.crt"` ; do \
> > > + ln -sf ../../../$$i etc/ssl/certs/`basename $${i%.crt}.pem`
> > ;\
> > > + done ;\
> > > + )
> > > +
> > > + #create symbolic links to the certificates by their hash values
> > > + $(HOST_DIR)/usr/bin/c_rehash $(TARGET_DIR)/etc/ssl/certs
> > > +endef
> > > +
> > > +$(eval $(generic-package))
> > > --
--
http://baruch.siach.name/blog/ ~. .~ Tk Open Systems
=}------------------------------------------------ooO--U--Ooo------------{=
- baruch at tkos.co.il - tel: +972.2.679.5364, http://www.tkos.co.il -
More information about the buildroot
mailing list