Page MenuHomeFreeBSD
Files F147697219

D42120.1784106359.diff
No OneTemporary
Actions

Size
2 KB
Referenced Files
None
Subscribers
None

D42120.1784106359.diff
View Options

Index: security/ca_root_nss/Makefile
===================================================================
--- security/ca_root_nss/Makefile
+++ security/ca_root_nss/Makefile
@@ -1,6 +1,6 @@
PORTNAME= ca_root_nss
PORTVERSION= ${VERSION_NSS}
-PORTREVISION= 1
+PORTREVISION= 2
CATEGORIES= security
MASTER_SITES= MOZILLA/security/nss/releases/${DISTNAME:tu:C/[-.]/_/g}_RTM/src
DISTNAME= nss-${VERSION_NSS}${NSS_SUFFIX}
@@ -17,8 +17,14 @@
NO_ARCH= yes
WRKSRC_SUBDIR= nss
+OPTIONS_DEFINE= ETCSYMLINK
+OPTIONS_DEFAULT= ETCSYMLINK
+
OPTIONS_SUB= yes
+ETCSYMLINK_DESC= Add symlink to /etc/ssl/cert.pem
+ETCSYMLINK_CONFLICTS_INSTALL= ca-roots-[0-9]*
+
CERTDIR?= share/certs
PLIST_SUB+= CERTDIR=${CERTDIR}
@@ -40,7 +46,9 @@
${INSTALL_DATA} ${WRKDIR}/ca-root-nss.crt ${STAGEDIR}${PREFIX}/${CERTDIR}
${MKDIR} ${STAGEDIR}${PREFIX}/etc/ssl
${LN} -sf ../../${CERTDIR}/ca-root-nss.crt ${STAGEDIR}${PREFIX}/etc/ssl/cert.pem.sample
- ${MKDIR} ${STAGEDIR}${PREFIX}/openssl
- ${LN} -sf ../${CERTDIR}/ca-root-nss.crt ${STAGEDIR}${PREFIX}/openssl/cert.pem.sample
+
+do-install-ETCSYMLINK-on:
+ ${MKDIR} ${STAGEDIR}/etc/ssl
+ ${LN} -sf ../..${PREFIX}/${CERTDIR}/ca-root-nss.crt ${STAGEDIR}/etc/ssl/cert.pem
.include <bsd.port.mk>
Index: security/ca_root_nss/files/pkg-message.in
===================================================================
--- security/ca_root_nss/files/pkg-message.in
+++ security/ca_root_nss/files/pkg-message.in
@@ -5,8 +5,18 @@
whose certificates are included in this package have in any way been
audited for trustworthiness or RFC 3647 compliance.
-Assessment and verification of trust is the complete responsibility of the
-system administrator.
+Assessment and verification of trust is the complete responsibility of
+the system administrator.
+
+This package installs symlinks to support root certificate discovery
+for software that either uses other cryptographic libraries than
+OpenSSL, or use OpenSSL but do not follow recommended practice.
+
+If you prefer to do this manually, replace the following symlinks with
+either an empty file or your site-local certificate bundle.
+
+ * /etc/ssl/cert.pem
+ * %%PREFIX%%/etc/ssl/cert.pem
EOM
}
]
Index: security/ca_root_nss/pkg-plist
===================================================================
--- security/ca_root_nss/pkg-plist
+++ security/ca_root_nss/pkg-plist
@@ -1,4 +1,6 @@
%%CERTDIR%%/ca-root-nss.crt
+@sample etc/ssl/cert.pem.sample
+%%ETCSYMLINK%%/etc/ssl/cert.pem
@postexec certctl rehash
@postunexec certctl rehash
@postexec [ ! -e %%LOCALBASE%%/bin/cert-sync ] || %%LOCALBASE%%/bin/cert-sync --quiet %%PREFIX%%/share/certs/ca-root-nss.crt

File Metadata

Mime Type
text/plain
Expires
Wed, Jul 15, 9:05 AM (20 h, 47 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
29141502
Default Alt Text
D42120.1784106359.diff (2 KB)

Event Timeline