rpms/ca-certificates
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Files
20260223-1mamba
ca-certificates/ca-certificates.spec

219 lines
8.1 KiB
RPMSpec
Raw Permalink Blame History

%define pkidir %{_sysconfdir}/pki
%define catrustdir %{_sysconfdir}/pki/ca-trust
Name: ca-certificates
Version: 20260223
Release: 1mamba
Summary: The Mozilla CA root certificate bundle
Group: System/Tools
Vendor: openmamba
Distribution: openmamba
Packager: Silvan Calarco <silvan@openmamba.org>
URL: https://www.mozilla.org/en-US/
Source: http://ftp.de.debian.org/debian/pool/main/c/ca-certificates/ca-certificates_%{version}.tar.xz
License: Public Domain
BuildArch: noarch
## AUTOBUILDREQ-BEGIN
## AUTOBUILDREQ-END
BuildRequires: openssl
BuildRequires: perl
BuildRequires: python
BuildRequires: rcs
Requires(post): openssl
Provides: ca-certificates-java
Obsoletes: ca-certificates-java < 20230311
Requires(post): p11-kit >= 0.25.10-2mamba
%description
This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI.
%prep
%setup -c -q
cd ca-certificates
sed -i "s|/usr/sbin|%{_bindir}|" sbin/Makefile
mkdir %{name} %{name}/certs %{name}/java
%build
cd ca-certificates
%make
%install
[ "%{buildroot}" != / ] && rm -rf "%{buildroot}"
cd ca-certificates
install -d -m755 %{buildroot}/{%{_sysconfdir}/ca-certificates/update.d,%{_datadir}/ca-certificates,%{_sysconfdir}/ssl/certs}
%makeinstall
install -D -m644 sbin/update-ca-certificates.8 %{buildroot}%{_mandir}/man8/update-ca-certificates.8
install -d -m755 %{buildroot}%{_sysconfdir}/ssl/certs/java
(
echo "# Automatically generated by ${pkgname}-${pkgver}-${pkgrel}"
echo "# see update-ca-certificates man page"
echo "# "
cd %{buildroot}/usr/share/ca-certificates
find . -name '*.crt' | sort | cut -b3-
) > %{buildroot}%{_sysconfdir}/ca-certificates.conf
install -d -m0755 %{buildroot}%{pkidir}/tls/certs
ln -s ../../../ssl/certs/ca-certificates.crt %{buildroot}%{pkidir}/tls/certs/ca-bundle.crt
ln -s certs/ca-bundle.crt %{buildroot}%{pkidir}/tls/cert.pem
install -d -m0755 %{buildroot}%{pkidir}/java/
ln -s ../../ssl/certs/java/cacerts %{buildroot}%{pkidir}/java/cacerts
ln -s certs/ca-certificates.crt %{buildroot}%{_sysconfdir}/ssl/cert.pem
mkdir -p -m 755 %{buildroot}%{catrustdir}/source
mkdir -p -m 755 %{buildroot}%{catrustdir}/source/anchors
mkdir -p -m 755 %{buildroot}%{catrustdir}/source/blocklist
mkdir -p -m 755 %{buildroot}%{catrustdir}/extracted
mkdir -p -m 755 %{buildroot}%{catrustdir}/extracted/pem
mkdir -p -m 555 %{buildroot}%{catrustdir}/extracted/pem/directory-hash
mkdir -p -m 755 %{buildroot}%{catrustdir}/extracted/java
mkdir -p -m 755 %{buildroot}%{catrustdir}/extracted/edk2
mkdir -p -m 755 %{buildroot}%{_datadir}/pki/ca-trust-source
mkdir -p -m 755 %{buildroot}%{_datadir}/pki/ca-trust-source/anchors
mkdir -p -m 755 %{buildroot}%{_datadir}/pki/ca-trust-source/blocklist
mkdir -p -m 755 %{buildroot}%{_datadir}/pki/ca-trust-legacy
%posttrans
if [ $1 -ge 1 ]; then
%{_bindir}/update-ca-certificates --fresh >/dev/null 2>&1
trust extract --overwrite --format=java-cacerts --filter=ca-anchors \
--purpose server-auth %{_sysconfdir}/ssl/certs/java/cacerts
fi
:
%clean
[ "%{buildroot}" != / ] && rm -rf "%{buildroot}"
%files
%defattr(-,root,root)
%config %{_sysconfdir}/ca-certificates.conf
%dir %{_sysconfdir}/ca-certificates
%dir %{_sysconfdir}/ca-certificates/update.d
%dir %{pkidir}/tls
%{pkidir}/tls/cert.pem
%dir %{pkidir}/tls/certs
%{pkidir}/tls/certs/ca-bundle.crt
%dir %{pkidir}/java
%{pkidir}/java/cacerts
%dir %{catrustdir}
%dir %{catrustdir}/source
%dir %{catrustdir}/source/anchors
%dir %{catrustdir}/source/blocklist
%dir %{catrustdir}/extracted
%dir %{catrustdir}/extracted/pem
%dir %{catrustdir}/extracted/pem/directory-hash
%dir %{catrustdir}/extracted/java
%dir %{_sysconfdir}/ssl
%{_sysconfdir}/ssl/certs
%{_sysconfdir}/ssl/cert.pem
%dir %{_sysconfdir}/ssl/certs/java
%{_bindir}/update-ca-certificates
%dir %{_datadir}/ca-certificates
%dir %{_datadir}/ca-certificates/mozilla
%{_datadir}/ca-certificates/mozilla/*.crt
%dir %{_datadir}/pki
%dir %{_datadir}/pki/ca-trust-source
%dir %{_datadir}/pki/ca-trust-source/anchors
%dir %{_datadir}/pki/ca-trust-source/blocklist
%dir %{_datadir}/pki/ca-trust-legacy
%{_mandir}/man8/update-ca-certificates.8*
%changelog
* Thu Mar 19 2026 Automatic Build System <autodist@openmamba.org> 20260223-1mamba
- automatic version update by autodist
* Tue Nov 18 2025 Silvan Calarco <silvan.calarco@mambasoft.it> 20250419-3mamba
- require p11-kit 0.25.10-2mamba which sets trust_paths for trust extract to find them
- install Fedora style folders for cat-trust folders (though not yet used in update-ca-certificates script)
* Tue Oct 14 2025 Silvan Calarco <silvan.calarco@mambasoft.it> 20250419-2mamba
- %posttrans: invert update-ca-certificates and java/cacerts creation run order to prevent empty file generation
* Tue Jun 24 2025 Silvan Calarco <silvan.calarco@mambasoft.it> 20250419-1mamba
- update to 20250419
* Tue Dec 24 2024 Automatic Build System <autodist@openmamba.org> 20241223-1mamba
- automatic version update by autodist
* Sun Feb 04 2024 Automatic Build System <autodist@openmamba.org> 20240203-1mamba
- automatic version update by autodist
* Mon Apr 03 2023 Automatic Build System <autodist@mambasoft.it> 20230311-1mamba
- automatic version update by autodist
* Sun Oct 17 2021 Automatic Build System <autodist@mambasoft.it> 20211016-1mamba
- automatic version update by autodist
* Fri Feb 05 2021 Silvan Calarco <silvan.calarco@mambasoft.it> 20210119-1mamba
- update to 20210119
* Sat Oct 26 2019 Silvan Calarco <silvan.calarco@mambasoft.it> 20190110-1mamba
- update to 20190110
* Fri Nov 02 2018 Silvan Calarco <silvan.calarco@mambasoft.it> 20180409-2mamba
- added symlink /etc/ssl/cert.pem to fix openssl detection
* Thu Sep 06 2018 Silvan Calarco <silvan.calarco@mambasoft.it> 20180409-1mamba
- update to 20180409
* Thu Nov 16 2017 Automatic Build System <autodist@mambasoft.it> 20170717-1mamba
- automatic update by autodist
* Thu Dec 08 2016 Silvan Calarco <silvan.calarco@mambasoft.it> 20161130-1mamba
- update to 20161130
* Thu May 19 2016 Silvan Calarco <silvan.calarco@mambasoft.it> 20160104-1mamba
- update to 20160104
* Wed Jan 20 2016 Silvan Calarco <silvan.calarco@mambasoft.it> 20150426-2mamba
- use trust extract in post script to generate java cacerts bundle; obsolete ca-certificates-java
* Mon Jun 08 2015 Automatic Build System <autodist@mambasoft.it> 20150426-1mamba
- automatic update by autodist
* Sat Mar 14 2015 Silvan Calarco <silvan.calarco@mambasoft.it> 20141019-3mamba
- require openssl because update-ca-certificates needs c_rehash
* Mon Mar 09 2015 Silvan Calarco <silvan.calarco@mambasoft.it> 20141019-2mamba
- run update-ca-certificates in %posttrans script to maybe fix failure in makedist builds
* Sat Nov 22 2014 Automatic Build System <autodist@mambasoft.it> 20141019-1mamba
- automatic update by autodist
* Sun Oct 12 2014 Automatic Build System <autodist@mambasoft.it> 20140927-1mamba
- automatic update by autodist
* Sun May 25 2014 Silvan Calarco <silvan.calarco@mambasoft.it> 20140325-2mamba
- provide required directory /etc/ca-certificates/update.d
* Sun Apr 13 2014 Silvan Calarco <silvan.calarco@mambasoft.it> 20140325-1mamba
- update to 20140325
* Sun Oct 20 2013 Silvan Calarco <silvan.calarco@mambasoft.it> 20130906-2mamba
- readd symlink cert.pem required by java-gcj-compat
* Fri Sep 20 2013 Automatic Build System <autodist@mambasoft.it> 20130906-1mamba
- automatic update by autodist
* Thu Aug 15 2013 Silvan Calarco <silvan.calarco@mambasoft.it> 20130610-3mamba
- rewrite specfile, use canonical package dirs, don't provide ca-bundle*
* Mon Aug 12 2013 Automatic Build System <autodist@mambasoft.it> 20130610-2mamba
- automatic version update by autodist
* Mon Aug 12 2013 Automatic Build System <autodist@mambasoft.it> 20130610-1mamba
- automatic version update by autodist
* Mon Apr 22 2013 Automatic Build System <autodist@mambasoft.it> 20130422git-1mamba
- update to 20130422git
* Tue Apr 10 2012 Silvan Calarco <silvan.calarco@mambasoft.it> 2012.04-1mamba
- update to 2012.04
* Thu Feb 24 2011 Silvan Calarco <silvan.calarco@mambasoft.it> 2010.10-2mamba
- rebuilt in devel
* Tue Oct 05 2010 gil <puntogil@libero.it> 2010.10-1mamba
- package created by autospec
Reference in New Issue View Git Blame Copy Permalink