summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorA. Wilcox <AWilcox@Wilcox-Tech.com>2019-02-26 21:14:50 +0000
committerA. Wilcox <AWilcox@Wilcox-Tech.com>2019-02-26 21:14:50 +0000
commitb0e80598c414e40c35b6adba6a2e3082a28cf287 (patch)
tree4db397e4a0336053414e2008146693678d98b554
parentb8859d4019084a8fc323aae9de544aef7c717bff (diff)
downloadpackages-b0e80598c414e40c35b6adba6a2e3082a28cf287.tar.gz
packages-b0e80598c414e40c35b6adba6a2e3082a28cf287.tar.bz2
packages-b0e80598c414e40c35b6adba6a2e3082a28cf287.tar.xz
packages-b0e80598c414e40c35b6adba6a2e3082a28cf287.zip
user/java-cacerts: new package
This package differs from Alpine's in two important ways: * The script is in source= and installed, instead of created with a heredoc. * There is no deinstall script to remove the certificate store. This is unnecessary, and violates APK's guarantee that user-generated content will not be modified. We cannot control what users do inside the directory, and we cannot take ownership of the entire thing. So we should not remove it.
-rw-r--r--user/java-cacerts/APKBUILD24
-rw-r--r--user/java-cacerts/java-cacerts3
2 files changed, 27 insertions, 0 deletions
diff --git a/user/java-cacerts/APKBUILD b/user/java-cacerts/APKBUILD
new file mode 100644
index 000000000..b096f7795
--- /dev/null
+++ b/user/java-cacerts/APKBUILD
@@ -0,0 +1,24 @@
+# Maintainer: A. Wilcox <awilfox@adelielinux.org>
+pkgname=java-cacerts
+pkgver=1.0
+pkgrel=0
+pkgdesc="Script to update Java security certificates"
+url=" "
+arch="noarch"
+options="!check" # Simple script, no tests
+license="MIT"
+depends="p11-kit p11-kit-trust ca-certificates"
+makedepends=""
+subpackages=""
+source="java-cacerts"
+
+builddir="$srcdir"
+
+package() {
+ cd "$builddir"
+ install -D -m755 "$srcdir"/java-cacerts \
+ "$pkgdir"/etc/ca-certificates/update.d/java-cacerts
+ mkdir -p "$pkgdir"/etc/ssl/certs/java
+}
+
+sha512sums="4cc444bcd15312fad08eb23ec605311ef2c525e8ae5b03bd5dfbcbf63632a0f8c5c475f0f5adecebb0c368aa6543a56f3355cf1b98ff9742e3f30a9cc55d02e8 java-cacerts"
diff --git a/user/java-cacerts/java-cacerts b/user/java-cacerts/java-cacerts
new file mode 100644
index 000000000..bfbe473ba
--- /dev/null
+++ b/user/java-cacerts/java-cacerts
@@ -0,0 +1,3 @@
+#!/bin/sh
+exec trust extract --overwrite --format=java-cacerts --filter=ca-anchors \
+ --purpose server-auth /etc/ssl/certs/java/cacerts