From 48c55d3c8ff92fb3f89921a7646dceea9c9eb6f9 Mon Sep 17 00:00:00 2001
From: Dylan Araps <dylan.araps@gmail.com>
Date: Mon, 2 Sep 2019 16:13:54 +0300
Subject: [PATCH] libressl: Add script to update ca-certificates.

---
 core/libressl/build                    |  2 ++
 core/libressl/checksums                |  1 +
 core/libressl/files/update-certdata.sh | 14 ++++++++++++++
 core/libressl/sources                  |  1 +
 core/libressl/version                  |  2 +-
 5 files changed, 19 insertions(+), 1 deletion(-)
 create mode 100755 core/libressl/files/update-certdata.sh

diff --git a/core/libressl/build b/core/libressl/build
index 723c0a969..bcae23c1f 100755
--- a/core/libressl/build
+++ b/core/libressl/build
@@ -9,5 +9,7 @@ patch -p0 < getprogname-musl.patch
 make
 make DESTDIR="$1" install
 
+install -Dm 755 update-certdata.sh "$1/etc/ssl"
+
 # Remove majority of man pages (2700 files~).
 rm -rf "$1/usr/share/man/man3"
diff --git a/core/libressl/checksums b/core/libressl/checksums
index d5adc4cf0..ad49f318c 100644
--- a/core/libressl/checksums
+++ b/core/libressl/checksums
@@ -1,2 +1,3 @@
 c4c78167fae325b47aebd8beb54b6041d6f6a56b3743f4bd5d79b15642f9d5d4  libressl-2.9.2.tar.gz
 b532a1587c6ba73f905db5021a4c6032d821b2e8b94155f762df250f8a6de811  getprogname-musl.patch
+57cedb6745330bc52df27fd5e80a0c7c757ad36beb3fe16a709cdb990e96087a  update-certdata.sh
diff --git a/core/libressl/files/update-certdata.sh b/core/libressl/files/update-certdata.sh
new file mode 100755
index 000000000..0c333e7a8
--- /dev/null
+++ b/core/libressl/files/update-certdata.sh
@@ -0,0 +1,14 @@
+#!/bin/sh -e
+#
+# update-certdata.sh
+
+[ -w /etc/ssl ] || {
+    printf '%s\n' "${0##*/}: root required to update cert." >&2
+    exit 1
+}
+
+cd /etc/ssl && {
+    wget https://curl.haxx.se/ca/cacert.pem
+    mv -f cacert.pem cert.pem
+    printf '%s\n' "${0##*/}: updated cert.pm"
+}
diff --git a/core/libressl/sources b/core/libressl/sources
index 24adc84ce..3859cade5 100644
--- a/core/libressl/sources
+++ b/core/libressl/sources
@@ -1,2 +1,3 @@
 https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.9.2.tar.gz
 patches/getprogname-musl.patch
+files/update-certdata.sh
diff --git a/core/libressl/version b/core/libressl/version
index cdb72eb93..04540b382 100644
--- a/core/libressl/version
+++ b/core/libressl/version
@@ -1 +1 @@
-2.9.2 1
+2.9.2 2