sysmo-bts
/
meta-sysmocom-bsp
9
1
Fork 0
Code Issues Pull Requests Releases Activity
meta-sysmocom-bsp/recipes-extra/ca-certificates/ca-cacert-rootcert.bb

27 lines
877 B
BlitzBasic
Raw Normal View History

ca-cacert-rootcert.bb: Have the complete root for CACert
2012-07-09 14:56:27 +00:00
CRIPTION = "CACert Root and Class3 PKI"
ca-cacert-root: Do not use the full-blown ca-certificates First ca-certificates does not create a symlink from /etc/ssl/certs to /usr/lib/ssl/certs, second it does not run the c_rehash perl utility making the recipe pretty useless and third it trusts way too many cert authorities.
2012-07-09 14:18:04 +00:00
HOMEPAGE = "http://www.cacert.org/index.php?id=3"
SECTION = "misc"
LICENSE = "RDL-COD14"
misc: poky/LICENSE has changed.. reference a hopefully more stable file Only reference the COPYING.MIT as it is unlikely to change in the next upgrade.
2014-11-02 08:40:15 +00:00
LIC_FILES_CHKSUM = "file://${COREBASE}/meta/COPYING.MIT;md5=3da9cfbcb788c80a0384361b4de20420"
ca-cacert-rootcert.bb: Have the complete root for CACert
2012-07-09 14:56:27 +00:00
PR = "r6"
ca-cacert-root: Do not use the full-blown ca-certificates First ca-certificates does not create a symlink from /etc/ssl/certs to /usr/lib/ssl/certs, second it does not run the c_rehash perl utility making the recipe pretty useless and third it trusts way too many cert authorities.
2012-07-09 14:18:04 +00:00
ca-cacert-rootcert: Add the letsencrypt certificate here as well This is not quite "ca-cacert" anymore, more like "ca-sysmocom" for the root certificates needed for us. Fixes: SYS#2499
2016-04-09 16:23:28 +00:00
SRC_URI = "file://root.crt file://class3.crt file://DST_Root_CA_X3.pem"
ca-cacert-root: Do not use the full-blown ca-certificates First ca-certificates does not create a symlink from /etc/ssl/certs to /usr/lib/ssl/certs, second it does not run the c_rehash perl utility making the recipe pretty useless and third it trusts way too many cert authorities.
2012-07-09 14:18:04 +00:00
do_install() {
ca-cacert-rootcert.bb: Have the complete root for CACert
2012-07-09 14:56:27 +00:00
install -d ${D}${libdir}/ssl/certs
install -m 0644 ${WORKDIR}/root.crt ${D}${libdir}/ssl/certs/cacert.org.pem
cat ${WORKDIR}/class3.crt >> ${D}${libdir}/ssl/certs/cacert.org.pem
ca-cacert-rootcert: Add the letsencrypt certificate here as well This is not quite "ca-cacert" anymore, more like "ca-sysmocom" for the root certificates needed for us. Fixes: SYS#2499
2016-04-09 16:23:28 +00:00
install -m 0644 ${WORKDIR}/DST_Root_CA_X3.pem ${D}${libdir}/ssl/certs/
ca-cacert-rootcert.bb: Create symlinks for all fingerprints of the cert
2012-07-09 14:35:52 +00:00
ca-cacert-rootcert.bb: Have the complete root for CACert
2012-07-09 14:56:27 +00:00
# Create hash symlinks
cd ${D}${libdir}/ssl/certs
ln -s cacert.org.pem e5662767.0
ln -s cacert.org.pem 5ed36f99.0
ln -s cacert.org.pem 99d0fa06.0
ca-cacert-rootcert: Add the letsencrypt certificate here as well This is not quite "ca-cacert" anymore, more like "ca-sysmocom" for the root certificates needed for us. Fixes: SYS#2499
2016-04-09 16:23:28 +00:00
ln -s DST_Root_CA_X3.pem 2e5ac55d.0
ca-cacert-root: Do not use the full-blown ca-certificates First ca-certificates does not create a symlink from /etc/ssl/certs to /usr/lib/ssl/certs, second it does not run the c_rehash perl utility making the recipe pretty useless and third it trusts way too many cert authorities.
2012-07-09 14:18:04 +00:00
}
FILES_${PN} = "${libdir}/ssl/certs/*"
ca-cacert-rootcert.bb: Have the complete root for CACert
2012-07-09 14:56:27 +00:00