[Buildroot] [PATCH 1/1] ca-certificates: new package

Martin Bark martin at barkynet.com
Wed Jan 8 13:13:53 UTC 2014


Baruch,

I'll make that change and submit a v2 patch

Thanks

Martin


On 8 January 2014 11:55, Baruch Siach <baruch at tkos.co.il> wrote:

> Hi Martin,
>
> On Wed, Jan 08, 2014 at 11:30:25AM +0000, Martin Bark wrote:
> > Thanks for the feedback Baruch,
> >
> > I'll update to use $(BR2_DEBIAN_MIRROR)
> >
> > Although the files mentioned in debian/copying do not directly end up in
> > the rootfs they are used.  mozilla/certdata.txt is a big list of
> > certificates and mozilla/certdata2pem.py is a python script which is run
> to
> > split mozilla/certdata.txt into all the separate pem files that end up in
> > the rootfs.  Therefore i think this license info is valid.
>
> I think you are right, but the string should indicate that. Something like
>
> CA_CERTIFICATES_LICENSE = GPLv2+ (script), MPLv2.0 (data)
>
> baruch
>
> > On 8 January 2014 04:52, Baruch Siach <baruch at tkos.co.il> wrote:
> > > Thanks for the patch. A few comments below.
> > >
> > > On Tue, Jan 07, 2014 at 08:29:50PM +0000, Martin Bark wrote:
> > > > CA certificates used for SSL based applications.  The package
> installs CA
> > > > certificates to /usr/share/ca-certificates and creates symbolic links
> > > under
> > > > /etc/ssl/certs.  For example, the existing libcurl package will use
> these
> > > > certificates for https urls.  Based on the debian ca-certifcates
> package.
> > > >
> > > > Signed-off-by: Martin Bark <martin at barkynet.com>
> > >
> > > [...]
> > >
> > > > +CA_CERTIFICATES_VERSION = 20130906
> > > > +CA_CERTIFICATES_SOURCE =
> > > ca-certificates_$(CA_CERTIFICATES_VERSION).tar.gz
> > > > +CA_CERTIFICATES_SITE =
> > > ftp://ftp.debian.org/debian/pool/main/c/ca-certificates
> > >
> > > Please use $(BR2_DEBIAN_MIRROR). See package/at/at.mk, for example.
> > >
> > > > +CA_CERTIFICATES_DEPENDENCIES = host-openssl host-python
> > > > +CA_CERTIFICATES_LICENSE = GPLv2+ MPLv2.0
> > > > +CA_CERTIFICATES_LICENSE_FILES = debian/copyright
> > >
> > > According to debian/copyright these licenses apply to the specific
> files
> > > listed there. You don't use any of these files as far as I can see.
> > >
> > > > +define CA_CERTIFICATES_BUILD_CMDS
> > > > +    PATH=$(HOST_PATH) $(MAKE) -C $(@D) all
> > > > +endef
> > > > +
> > > > +define CA_CERTIFICATES_INSTALL_TARGET_CMDS
> > > > +    $(INSTALL) -d -m 0755 $(TARGET_DIR)/usr/share/ca-certificates
> > > > +    $(INSTALL) -d -m 0755 $(TARGET_DIR)/etc/ssl/certs
> > > > +    $(MAKE) -C $(@D) install DESTDIR=$(TARGET_DIR)
> > > > +    rm -f $(TARGET_DIR)/usr/sbin/update-ca-certificates
> > > > +
> > > > +    #remove any existing certificates under /etc/ssl/certs
> > > > +    rm -f  $(TARGET_DIR)/etc/ssl/certs/*
> > > > +
> > > > +    #generate symlinks to certificates under /etc/ssl/certs
> > > > +    ( \
> > > > +      cd $(TARGET_DIR) ;\
> > > > +      for i in `find usr/share/ca-certificates -name "*.crt"` ; do \
> > > > +            ln -sf ../../../$$i etc/ssl/certs/`basename
> $${i%.crt}.pem`
> > > ;\
> > > > +      done ;\
> > > > +    )
> > > > +
> > > > +    #create symbolic links to the certificates by their hash values
> > > > +    $(HOST_DIR)/usr/bin/c_rehash $(TARGET_DIR)/etc/ssl/certs
> > > > +endef
> > > > +
> > > > +$(eval $(generic-package))
> > > > --
>
> --
>      http://baruch.siach.name/blog/                  ~. .~   Tk Open
> Systems
> =}------------------------------------------------ooO--U--Ooo------------{=
>    - baruch at tkos.co.il - tel: +972.2.679.5364, http://www.tkos.co.il -
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.busybox.net/pipermail/buildroot/attachments/20140108/9d9efdfa/attachment-0002.html>


More information about the buildroot mailing list