|
 |
d01a981 |
### Note that mkcabundle.pl is used to generate ca-bundle.crt
|
|
|
d01a981 |
### before generating a source RPM, and is not used during the
|
|
|
d01a981 |
### build.
|
|
|
d01a981 |
|
|
|
d01a981 |
%define pkidir %{_sysconfdir}/pki
|
|
|
d01a981 |
|
|
|
d01a981 |
Summary: The Mozilla CA root certificate bundle
|
|
|
d01a981 |
Name: ca-certificates
|
|
|
d01a981 |
Version: 2008
|
|
|
e908127 |
Release: 7
|
|
|
d01a981 |
License: Public Domain
|
|
|
d01a981 |
Group: System Environment/Base
|
|
|
d01a981 |
URL: http://www.mozilla.org/
|
|
|
d01a981 |
Source0: ca-bundle.crt
|
|
|
d01a981 |
Source1: generate-cacerts.pl
|
|
|
d01a981 |
Source2: mkcabundle.pl
|
|
|
d01a981 |
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root
|
|
|
d01a981 |
BuildRequires: perl, java-openjdk
|
|
|
d01a981 |
BuildArch: noarch
|
|
|
d01a981 |
|
|
|
d01a981 |
%description
|
|
|
d01a981 |
This package contains the set of CA certificates chosen by the
|
|
|
d01a981 |
Mozilla Foundation for use with the Internet PKI.
|
|
|
d01a981 |
|
|
|
d01a981 |
%prep
|
|
|
d01a981 |
rm -rf %{name}
|
|
|
d01a981 |
mkdir %{name}
|
|
|
d01a981 |
|
|
|
d01a981 |
%build
|
|
|
d01a981 |
pushd %{name}
|
|
|
d01a981 |
%{__perl} %{SOURCE1} %{_bindir}/keytool %{SOURCE0}
|
|
|
d01a981 |
touch -r %{SOURCE0} cacerts
|
|
|
d01a981 |
popd
|
|
|
d01a981 |
|
|
|
d01a981 |
%install
|
|
|
d01a981 |
rm -rf $RPM_BUILD_ROOT
|
|
|
d01a981 |
|
|
|
d01a981 |
mkdir -p $RPM_BUILD_ROOT{%{pkidir}/tls/certs,%{pkidir}/java}
|
|
|
d01a981 |
|
|
|
d01a981 |
install -p -m 644 %{SOURCE0} $RPM_BUILD_ROOT%{pkidir}/tls/certs/ca-bundle.crt
|
|
|
65c3b04 |
ln -s certs/ca-bundle.crt $RPM_BUILD_ROOT%{pkidir}/tls/cert.pem
|
|
|
d01a981 |
|
|
|
d01a981 |
# Install Java cacerts file.
|
|
|
d01a981 |
mkdir -p -m 700 $RPM_BUILD_ROOT%{pkidir}/java
|
|
|
d01a981 |
install -p -m 644 %{name}/cacerts $RPM_BUILD_ROOT%{pkidir}/java/
|
|
|
d01a981 |
|
|
|
d01a981 |
%clean
|
|
|
d01a981 |
rm -rf $RPM_BUILD_ROOT
|
|
|
d01a981 |
|
|
|
d01a981 |
%files
|
|
|
d01a981 |
%defattr(-,root,root,-)
|
|
|
d01a981 |
%dir %{pkidir}/java
|
|
|
d01a981 |
%config(noreplace) %{pkidir}/java/cacerts
|
|
|
d01a981 |
%dir %{pkidir}/tls
|
|
|
d01a981 |
%dir %{pkidir}/tls/certs
|
|
|
d01a981 |
%config(noreplace) %{pkidir}/tls/certs/ca-bundle.crt
|
|
|
866d688 |
%{pkidir}/tls/cert.pem
|
|
|
d01a981 |
|
|
|
d01a981 |
%changelog
|
|
|
e908127 |
* Tue Oct 14 2008 Joe Orton <jorton@redhat.com> 2008-7
|
|
|
e908127 |
- update to certdata.txt r1.49
|
|
|
e908127 |
|
|
Thomas Fitzsimmons |
180c47e |
* Wed Jun 25 2008 Thomas Fitzsimmons <fitzsim@redhat.com> - 2008-6
|
|
Thomas Fitzsimmons |
180c47e |
- Change generate-cacerts.pl to produce pretty aliases.
|
|
Thomas Fitzsimmons |
180c47e |
|
|
|
65c3b04 |
* Mon Jun 2 2008 Joe Orton <jorton@redhat.com> 2008-5
|
|
|
65c3b04 |
- include /etc/pki/tls/cert.pem symlink to ca-bundle.crt
|
|
|
65c3b04 |
|
|
|
d01a981 |
* Tue May 27 2008 Joe Orton <jorton@redhat.com> 2008-4
|
|
|
d01a981 |
- use package name for temp dir, recreate it in prep
|
|
|
d01a981 |
|
|
|
d01a981 |
* Tue May 27 2008 Joe Orton <jorton@redhat.com> 2008-3
|
|
|
d01a981 |
- fix source script perms
|
|
|
d01a981 |
- mark packaged files as config(noreplace)
|
|
|
d01a981 |
|
|
|
d01a981 |
* Tue May 27 2008 Joe Orton <jorton@redhat.com> 2008-2
|
|
|
d01a981 |
- add (but don't use) mkcabundle.pl
|
|
|
d01a981 |
- tweak description
|
|
|
d01a981 |
- use /usr/bin/keytool directly; BR java-openjdk
|
|
|
d01a981 |
|
|
|
d01a981 |
* Tue May 27 2008 Joe Orton <jorton@redhat.com> 2008-1
|
|
|
d01a981 |
- Initial build (#448497)
|