From a479f83c22492ec2771baf77ade0d0ad76d0c8eb Mon Sep 17 00:00:00 2001 From: Michal Josef Špaček Date: Mar 15 2024 11:05:34 +0000 Subject: 20240313 bump --- diff --git a/.gitignore b/.gitignore index 0a1ae29..883e9a9 100644 --- a/.gitignore +++ b/.gitignore @@ -19,3 +19,4 @@ /Mozilla-CA-20230807.tar.gz /Mozilla-CA-20230821.tar.gz /Mozilla-CA-20231213.tar.gz +/Mozilla-CA-20240313.tar.gz diff --git a/Mozilla-CA-20231213-Redirect-to-ca-certificates-bundle.patch b/Mozilla-CA-20231213-Redirect-to-ca-certificates-bundle.patch deleted file mode 100644 index 06e2686..0000000 --- a/Mozilla-CA-20231213-Redirect-to-ca-certificates-bundle.patch +++ /dev/null @@ -1,65 +0,0 @@ -From ab01996d4d539cada0013b837b782f27db6b96ff Mon Sep 17 00:00:00 2001 -From: =?UTF-8?q?Petr=20P=C3=ADsa=C5=99?= -Date: Fri, 16 Sep 2011 10:33:54 +0200 -Subject: [PATCH] Redirect to ca-certificates bundle -MIME-Version: 1.0 -Content-Type: text/plain; charset=UTF-8 -Content-Transfer-Encoding: 8bit - -This patch replaces Mozilla-CA certificate bundle with a bundle -delivered by ca-certificates RPM package used as a single source of -the Mozilla certificate bundle. - -See for more -details. - -Signed-off-by: Petr Písař - -diff --git a/MANIFEST b/MANIFEST -index a88847b..6577ede 100644 ---- a/MANIFEST -+++ b/MANIFEST -@@ -1,7 +1,6 @@ - .editorconfig - Changes - lib/Mozilla/CA.pm --lib/Mozilla/CA/cacert.pem - maint/cacert-diff - maint/get-tarball-name - maint/make-tarball -diff --git a/Makefile.PL b/Makefile.PL -index 9faf720..a491813 100644 ---- a/Makefile.PL -+++ b/Makefile.PL -@@ -90,3 +90,11 @@ - - ExtUtils::MakeMaker::WriteMakefile(%MM_ARGS); - ## END BOILERPLATE ########################################################### -+ -+package MY; -+sub MY::libscan { -+ my $name = shift->SUPER::libscan(@_); -+ # Remove private certificate bundle -+ if ($name =~ /cacert.pem\z/) { $name = '' }; -+ return $name; -+} -diff --git a/lib/Mozilla/CA.pm b/lib/Mozilla/CA.pm -index e4a6c56..fdb3c75 100644 ---- a/lib/Mozilla/CA.pm -+++ b/lib/Mozilla/CA.pm -@@ -5,11 +5,9 @@ - our $VERSION = '20231213'; - - use File::Spec (); --use File::Basename qw(dirname); - - sub SSL_ca_file { -- my $file = File::Spec->catfile(dirname(__FILE__), "CA", "cacert.pem"); -- return File::Spec->rel2abs($file); -+ return File::Spec->catfile('/etc/pki/tls/certs/ca-bundle.crt'); - } - - 1; --- -2.25.4 - diff --git a/Mozilla-CA-20240313-Redirect-to-ca-certificates-bundle.patch b/Mozilla-CA-20240313-Redirect-to-ca-certificates-bundle.patch new file mode 100644 index 0000000..008a10c --- /dev/null +++ b/Mozilla-CA-20240313-Redirect-to-ca-certificates-bundle.patch @@ -0,0 +1,65 @@ +From ab01996d4d539cada0013b837b782f27db6b96ff Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Petr=20P=C3=ADsa=C5=99?= +Date: Fri, 16 Sep 2011 10:33:54 +0200 +Subject: [PATCH] Redirect to ca-certificates bundle +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +This patch replaces Mozilla-CA certificate bundle with a bundle +delivered by ca-certificates RPM package used as a single source of +the Mozilla certificate bundle. + +See for more +details. + +Signed-off-by: Petr Písař + +diff --git a/MANIFEST b/MANIFEST +index a88847b..6577ede 100644 +--- a/MANIFEST ++++ b/MANIFEST +@@ -1,7 +1,6 @@ + .editorconfig + Changes + lib/Mozilla/CA.pm +-lib/Mozilla/CA/cacert.pem + maint/cacert-diff + maint/get-tarball-name + maint/make-tarball +diff --git a/Makefile.PL b/Makefile.PL +index 9faf720..a491813 100644 +--- a/Makefile.PL ++++ b/Makefile.PL +@@ -90,3 +90,11 @@ + + ExtUtils::MakeMaker::WriteMakefile(%MM_ARGS); + ## END BOILERPLATE ########################################################### ++ ++package MY; ++sub MY::libscan { ++ my $name = shift->SUPER::libscan(@_); ++ # Remove private certificate bundle ++ if ($name =~ /cacert.pem\z/) { $name = '' }; ++ return $name; ++} +diff --git a/lib/Mozilla/CA.pm b/lib/Mozilla/CA.pm +index e4a6c56..fdb3c75 100644 +--- a/lib/Mozilla/CA.pm ++++ b/lib/Mozilla/CA.pm +@@ -5,11 +5,9 @@ + our $VERSION = '20240313'; + + use File::Spec (); +-use File::Basename qw(dirname); + + sub SSL_ca_file { +- my $file = File::Spec->catfile(dirname(__FILE__), "CA", "cacert.pem"); +- return File::Spec->rel2abs($file); ++ return File::Spec->catfile('/etc/pki/tls/certs/ca-bundle.crt'); + } + + 1; +-- +2.25.4 + diff --git a/perl-Mozilla-CA.spec b/perl-Mozilla-CA.spec index 931b670..d62628a 100644 --- a/perl-Mozilla-CA.spec +++ b/perl-Mozilla-CA.spec @@ -2,8 +2,8 @@ Name: perl-Mozilla-CA # You do not need to back-port a new version for updating a list of the # certificates. They are taken from ca-certificates package instead # per bug #738383. -Version: 20231213 -Release: 3%{?dist} +Version: 20240313 +Release: 1%{?dist} Summary: Mozilla's CA certificate bundle in PEM format # README: MPL-2.0 ## Unbundled @@ -13,7 +13,7 @@ License: MPL-2.0 URL: https://metacpan.org/release/Mozilla-CA Source0: https://cpan.metacpan.org/authors/id/A/AB/ABH/Mozilla-CA-%{version}.tar.gz # Use a CA bundle from ca-certificates package, bug #738383 -Patch0: Mozilla-CA-20231213-Redirect-to-ca-certificates-bundle.patch +Patch0: Mozilla-CA-20240313-Redirect-to-ca-certificates-bundle.patch BuildArch: noarch BuildRequires: coreutils BuildRequires: make @@ -81,6 +81,9 @@ make test %{_libexecdir}/%{name} %changelog +* Fri Mar 15 2024 Michal Josef Špaček - 20240313-1 +- 20240313 bump + * Thu Jan 25 2024 Fedora Release Engineering - 20231213-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild diff --git a/sources b/sources index a365698..6e6e798 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (Mozilla-CA-20231213.tar.gz) = 888c0847d4911348a775a25a0cb4609176d521a24e7f4dabe75bad9f286ca1cae9a79e52a4cacab529e306df699937059442cd77e0f560a8e0e731ca25c2e61c +SHA512 (Mozilla-CA-20240313.tar.gz) = b5666f30a483e0abeb04182d8c02e8d3c3457672debf628152f3566ed7f5fc4942d7ac186b14802cd549d35abe2fc93cd505373d8a9af77fee57a2948d9a4984