From b0e80598c414e40c35b6adba6a2e3082a28cf287 Mon Sep 17 00:00:00 2001
From: "A. Wilcox" <AWilcox@Wilcox-Tech.com>
Date: Tue, 26 Feb 2019 21:14:50 +0000
Subject: user/java-cacerts: new package

This package differs from Alpine's in two important ways:

* The script is in source= and installed, instead of created with a heredoc.

* There is no deinstall script to remove the certificate store.
  This is unnecessary, and violates APK's guarantee that user-generated
  content will not be modified.  We cannot control what users do inside the
  directory, and we cannot take ownership of the entire thing.  So we should
  not remove it.
---
 user/java-cacerts/APKBUILD     | 24 ++++++++++++++++++++++++
 user/java-cacerts/java-cacerts |  3 +++
 2 files changed, 27 insertions(+)
 create mode 100644 user/java-cacerts/APKBUILD
 create mode 100644 user/java-cacerts/java-cacerts

(limited to 'user/java-cacerts')

diff --git a/user/java-cacerts/APKBUILD b/user/java-cacerts/APKBUILD
new file mode 100644
index 000000000..b096f7795
--- /dev/null
+++ b/user/java-cacerts/APKBUILD
@@ -0,0 +1,24 @@
+# Maintainer: A. Wilcox <awilfox@adelielinux.org>
+pkgname=java-cacerts
+pkgver=1.0
+pkgrel=0
+pkgdesc="Script to update Java security certificates"
+url=" "
+arch="noarch"
+options="!check"  # Simple script, no tests
+license="MIT"
+depends="p11-kit p11-kit-trust ca-certificates"
+makedepends=""
+subpackages=""
+source="java-cacerts"
+
+builddir="$srcdir"
+
+package() {
+	cd "$builddir"
+	install -D -m755 "$srcdir"/java-cacerts \
+		"$pkgdir"/etc/ca-certificates/update.d/java-cacerts
+	mkdir -p "$pkgdir"/etc/ssl/certs/java
+}
+
+sha512sums="4cc444bcd15312fad08eb23ec605311ef2c525e8ae5b03bd5dfbcbf63632a0f8c5c475f0f5adecebb0c368aa6543a56f3355cf1b98ff9742e3f30a9cc55d02e8  java-cacerts"
diff --git a/user/java-cacerts/java-cacerts b/user/java-cacerts/java-cacerts
new file mode 100644
index 000000000..bfbe473ba
--- /dev/null
+++ b/user/java-cacerts/java-cacerts
@@ -0,0 +1,3 @@
+#!/bin/sh
+exec trust extract --overwrite --format=java-cacerts --filter=ca-anchors \
+	--purpose server-auth /etc/ssl/certs/java/cacerts
-- 
cgit v1.2.3-60-g2f50