libressl: Add script to update ca-certificates.

kisslinux · Sep 2, 2019 · 48c55d3 · 48c55d3
1 parent fba07e1
commit 48c55d3
Show file tree

Hide file tree

Showing 5 changed files with 19 additions and 1 deletion.
diff --git a/core/libressl/build b/core/libressl/build
@@ -9,5 +9,7 @@ patch -p0 < getprogname-musl.patch
 make
 make DESTDIR="$1" install
 
+install -Dm 755 update-certdata.sh "$1/etc/ssl"
+
 # Remove majority of man pages (2700 files~).
 rm -rf "$1/usr/share/man/man3"
diff --git a/core/libressl/checksums b/core/libressl/checksums
@@ -1,2 +1,3 @@
 c4c78167fae325b47aebd8beb54b6041d6f6a56b3743f4bd5d79b15642f9d5d4  libressl-2.9.2.tar.gz
 b532a1587c6ba73f905db5021a4c6032d821b2e8b94155f762df250f8a6de811  getprogname-musl.patch
+57cedb6745330bc52df27fd5e80a0c7c757ad36beb3fe16a709cdb990e96087a  update-certdata.sh
diff --git a/core/libressl/files/update-certdata.sh b/core/libressl/files/update-certdata.sh
@@ -0,0 +1,14 @@
+#!/bin/sh -e
+#
+# update-certdata.sh
+
+[ -w /etc/ssl ] || {
+    printf '%s\n' "${0##*/}: root required to update cert." >&2
+    exit 1
+}
+
+cd /etc/ssl && {
+    wget https://curl.haxx.se/ca/cacert.pem
+    mv -f cacert.pem cert.pem
+    printf '%s\n' "${0##*/}: updated cert.pm"
+}
diff --git a/core/libressl/sources b/core/libressl/sources
@@ -1,2 +1,3 @@
 https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.9.2.tar.gz
 patches/getprogname-musl.patch
+files/update-certdata.sh
diff --git a/core/libressl/version b/core/libressl/version
@@ -1 +1 @@
-2.9.2 1
+2.9.2 2