From a8b955125793a087a766bfc70302f0b62778e26f Mon Sep 17 00:00:00 2001
From: Holger Hans Peter Freyther <holger@moiji-mobile.com>
Date: Sat, 9 Apr 2016 18:23:28 +0200
Subject: [PATCH] ca-cacert-rootcert: Add the letsencrypt certificate here as
 well

This is not quite "ca-cacert" anymore, more like "ca-sysmocom" for
the root certificates needed for us.

Fixes: SYS#2499
---
 .../ca-certificates/ca-cacert-rootcert.bb     |  5 ++++-
 .../ca-certificates/files/DST_Root_CA_X3.pem  | 20 +++++++++++++++++++
 2 files changed, 24 insertions(+), 1 deletion(-)
 create mode 100644 recipes-extra/ca-certificates/files/DST_Root_CA_X3.pem

diff --git a/recipes-extra/ca-certificates/ca-cacert-rootcert.bb b/recipes-extra/ca-certificates/ca-cacert-rootcert.bb
index 271b43c..9ddf95c 100644
--- a/recipes-extra/ca-certificates/ca-cacert-rootcert.bb
+++ b/recipes-extra/ca-certificates/ca-cacert-rootcert.bb
@@ -5,18 +5,21 @@ LICENSE = "RDL-COD14"
 LIC_FILES_CHKSUM = "file://${COREBASE}/meta/COPYING.MIT;md5=3da9cfbcb788c80a0384361b4de20420"
 PR = "r6"
 
-SRC_URI = "file://root.crt file://class3.crt"
+SRC_URI = "file://root.crt file://class3.crt file://DST_Root_CA_X3.pem"
 
 do_install() {
         install -d ${D}${libdir}/ssl/certs
         install -m 0644 ${WORKDIR}/root.crt ${D}${libdir}/ssl/certs/cacert.org.pem
         cat ${WORKDIR}/class3.crt >> ${D}${libdir}/ssl/certs/cacert.org.pem
+        install -m 0644 ${WORKDIR}/DST_Root_CA_X3.pem ${D}${libdir}/ssl/certs/
 
         # Create hash symlinks
         cd ${D}${libdir}/ssl/certs
         ln -s cacert.org.pem e5662767.0
         ln -s cacert.org.pem 5ed36f99.0
         ln -s cacert.org.pem 99d0fa06.0
+
+        ln -s DST_Root_CA_X3.pem 2e5ac55d.0
 }
 
 FILES_${PN} = "${libdir}/ssl/certs/*"
diff --git a/recipes-extra/ca-certificates/files/DST_Root_CA_X3.pem b/recipes-extra/ca-certificates/files/DST_Root_CA_X3.pem
new file mode 100644
index 0000000..b2e43c9
--- /dev/null
+++ b/recipes-extra/ca-certificates/files/DST_Root_CA_X3.pem
@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----