Add update-ca-trust script

This commit is contained in:
2026-06-22 10:32:39 +03:00
parent 019ff04448
commit fdcaf3137c
5 changed files with 443 additions and 1 deletions
+15
View File
@@ -27,6 +27,10 @@ package() {
# Install man page
install -Dm644 "$BPM_SOURCE"/sbin/update-ca-certificates.8 "$BPM_OUTPUT"/usr/share/man/man8/update-ca-certificates.8
# Install update-ca-trust
install -Dm755 "$BPM_WORKDIR"/update-ca-trust "$BPM_OUTPUT"/usr/sbin/update-ca-trust
install -Dm644 "$BPM_WORKDIR"/update-ca-trust.8 "$BPM_OUTPUT"/usr/share/man/man8/update-ca-trust.8
# Generate ca-certificates.conf
cd "$BPM_OUTPUT"/usr/share/ca-certificates
find . -name '*.crt' | sort | cut -b3- | install -Dm644 /dev/stdin "$BPM_OUTPUT"/etc/ca-certificates.conf
@@ -35,6 +39,17 @@ package() {
install -d "$BPM_OUTPUT"/etc/ssl
ln -s /etc/ssl/certs/ca-certificates.crt "$BPM_OUTPUT"/etc/ssl/certs.pem
# Create trust-source directories
install -d "$BPM_OUTPUT"/etc/ca-certificates/trust-source/{anchors,blocklist}
install -d "$BPM_OUTPUT"/usr/share/ca-certificates/trust-source/{anchors,blocklist}
# Create directories used by update-ca-trust
install -d "$BPM_OUTPUT"/etc/ssl/certs/java
install -d "$BPM_OUTPUT"/etc/ssl/extracted
# Install bpm hook
install -Dm644 "$BPM_WORKDIR"/40-update-ca-trust.bpmhook "$BPM_OUTPUT"/var/lib/bpm/hooks/40-update-ca-trust.bpmhook
# Install package license
install -Dm644 "$BPM_SOURCE"/debian/copyright "$BPM_OUTPUT"/usr/share/licenses/ca-certificates/copyright
}