- use same method for generating /etc/certs/ca-certificates.crt at package build...

[packages/ca-certificates.git] / ca-certificates-undebianize.patch

diff --git a/ca-certificates-undebianize.patch b/ca-certificates-undebianize.patch
index 43e689d8ec8e0cc776f6f51a71be938433060215..35e52b69fb3ebaf0f6ad2332349f2f3718d318c5 100644 (file)
--- a/ca-certificates-undebianize.patch
+++ b/ca-certificates-undebianize.patch
@@ -1,33 +1,40 @@
-diff -ur ca-certificates/sbin/update-ca-certificates ca-certificates-undebianize/sbin/update-ca-certificates
---- ca-certificates/sbin/update-ca-certificates        2008-04-11 20:47:29.000000000 +0200
-+++ ca-certificates-undebianize/sbin/update-ca-certificates    2008-11-01 12:17:37.000000000 +0100
+--- ca-certificates-undebianize/sbin/update-ca-certificates    2008-11-01 12:17:37.000000000 +0100
++++ ca-certificates-20090814/sbin/update-ca-certificates       2010-05-05 14:03:33.683398895 +0300

 @@ -38,7 +38,7 @@
 @@ -38,7 +38,7 @@

- CERTSCONF=/etc/ca-certificates.conf

  CERTSDIR=/usr/share/ca-certificates
  CERTSDIR=/usr/share/ca-certificates

--CERTBUNDLE=ca-certificates.crt
+ LOCALCERTSDIR=/usr/local/share/ca-certificates
+ CERTBUNDLE=ca-certificates.crt

 -ETCCERTSDIR=/etc/ssl/certs
 -ETCCERTSDIR=/etc/ssl/certs

-+CERTBUNDLE=/etc/openssl/ca-certificates.crt

 +ETCCERTSDIR=/etc/openssl/certs
 +ETCCERTSDIR=/etc/openssl/certs

- cd $ETCCERTSDIR
- if [ "$fresh" = 1 ]; then
-   echo -n "Clearing symlinks in $ETCCERTSDIR..."
-@@ -88,15 +88,6 @@
-     c_rehash .
-   fi
-   echo "done."
--
--  HOOKSDIR=/etc/ca-certificates/update.d
--  echo -n "Running hooks in $HOOKSDIR...."
--  VERBOSE_ARG=
--  [ "$verbose" = 0 ] || VERBOSE_ARG=--verbose
--  eval run-parts $VERB_ARG --test -- $HOOKSDIR | while read hook; do
--  printf -- "${removed:+$removed\n}${added:+$added\n}" | eval $hook
--  done
--  echo "done."
- else
-   echo "done."
+ 
+ cleanup() {
+   rm -f "$TEMPBUNDLE"
+@@ -57,7 +57,7 @@
+ REMOVED="$(mktemp -t "ca-certificates.tmp.XXXXXX")"
+ 
+ # Adds a certificate to the list of trusted ones.  This includes a symlink
+-# in /etc/ssl/certs to the certificate file and its inclusion into the
++# in /etc/openssl/certs to the certificate file and its inclusion into the
+ # bundle.
+ add() {
+   CERT="$1"
+@@ -88,16 +88,6 @@

  fi
  fi

-diff -ur ca-certificates/sbin/update-ca-certificates.8 ca-certificates-undebianize/sbin/update-ca-certificates.8
+ 
+ echo "$ADDED_CNT added, $REMOVED_CNT removed; done."
+-
+-HOOKSDIR=/etc/ca-certificates/update.d
+-echo -n "Running hooks in $HOOKSDIR...."
+-VERBOSE_ARG=
+-[ "$verbose" = 0 ] || VERBOSE_ARG=--verbose
+-eval run-parts $VERBOSE_ARG --test -- $HOOKSDIR | while read hook
+-do
+-  ( cat $ADDED
+-    cat $REMOVED ) | $hook || echo E: $hook exited with code $?.
+-done
+ echo "done."
+ 
+ # vim:set et sw=2:

 --- ca-certificates/sbin/update-ca-certificates.8      2008-04-11 20:47:29.000000000 +0200
 +++ ca-certificates-undebianize/sbin/update-ca-certificates.8  2008-11-01 12:18:14.000000000 +0100
 @@ -16,7 +16,7 @@
 --- ca-certificates/sbin/update-ca-certificates.8      2008-04-11 20:47:29.000000000 +0200
 +++ ca-certificates-undebianize/sbin/update-ca-certificates.8  2008-11-01 12:18:14.000000000 +0100
 @@ -16,7 +16,7 @@


@@ -40,18 +47,18 @@ diff -ur ca-certificates/sbin/update-ca-certificates.8 ca-certificates-undebiani
  .B update-ca-certificates
  .RI [ options ]
 @@ -26,7 +26,7 @@
  .B update-ca-certificates
  .RI [ options ]
 @@ -26,7 +26,7 @@

- commands.

  This manual page was written for the Debian distribution.
  .PP
  This manual page was written for the Debian distribution.
  .PP

--\fBupdate-ca-certificates\fP is a program that updates /etc/ssl/certs
-+\fBupdate-ca-certificates\fP is a program that updates /etc/openssl/certs
- directory to hold SSL certificates and generates certificates.crt that is
- single-file version of CA certificates.
+ \fBupdate-ca-certificates\fP is a program that updates the directory
+-/etc/ssl/certs to hold SSL certificates and generates certificates.crt,
++/etc/openssl/certs to hold SSL certificates and generates certificates.crt,
+ a concatenated single-file list of certificates.

  .PP
  .PP

+ It reads the file /etc/ca-certificates.conf. Each line gives a pathname of

 @@ -34,11 +34,6 @@
 @@ -34,11 +34,6 @@

- activated CA certificates under /usr/share/ca-certificates.
- Lines that begin with "#" is comment line. 
- Lines that begin with "!" is deselect, deactivation of the CA certificates. 
+ .PP
+ Furthermore all certificates found below /usr/local/share/ca-certificates
+ are also included as implicitly trusted.

 -.PP
 -Before terminating, \fBupdate-ca-certificates\fP invokes
 -\fBrun-parts\fP on /etc/ca-certificates/update.d and calls each hook with
 -.PP
 -Before terminating, \fBupdate-ca-certificates\fP invokes
 -\fBrun-parts\fP on /etc/ca-certificates/update.d and calls each hook with