Commit ea6b7bd5 authored by Yann E. MORIN's avatar Yann E. MORIN Committed by Thomas Petazzoni
Browse files

package/ca-certificates: generate the bundle of certs 



glib-networking wants to use the certificates bundle, not the individual
certificates.

Generating the bundle is usually done with update-ca-certificates, but
that does not support running out-of-tree.

Fortiunately, and as Gustavo put it, update-ca-certificates is jsut a
glorified 'cat'. It is supposed to be fed a config file stating which
certificate to add/remove to/from the bundle, otherwise nothing fancy
(Oh, yes, running hooks after updating the bundle).

Since we do not need any of this in Buidlroot, we jsut generate a bundle
with all certificates unconditionally.

Reported-by: default avatarGustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: default avatar"Yann E. MORIN" <yann.morin.1998@free.fr>
Cc: Gustavo Zacarias <gustavo@zacarias.com.ar>
Acked-by: default avatarGustavo Zacarias <gustavo@zacarias.com.ar>
Tested-by: default avatarGustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: default avatarThomas Petazzoni <thomas.petazzoni@free-electrons.com>
parent 69476977

package/ca-certificates/ca-certificates.mk

+2 −0
Original line number Diff line number Diff line
@@ -25,9 +25,11 @@ define CA_CERTIFICATES_INSTALL_TARGET_CMDS 
	rm -f  $(TARGET_DIR)/etc/ssl/certs/*



	# Create symlinks to certificates under /etc/ssl/certs

	# and generate the bundle

	cd $(TARGET_DIR) ;\

	for i in `find usr/share/ca-certificates -name "*.crt"` ; do \

		ln -sf ../../../$$i etc/ssl/certs/`basename $${i} .crt`.pem ;\

		cat $$i >>etc/ssl/certs/ca-certificates.crt ;\

	done



	# Create symlinks to the certificates by their hash values