new package

git-svn-id: http://trac.vinelinux.org/repos/projects/specs@6630 ec354946-7b23-47d6-9f5a-488ba84defc7

c/ca-certificates/ca-certificates-vl.spec

@@ -0,0 +1,214 @@
+# certdata.txt is generated by extracting it from Mozilla CVS.
+# This is done by running:
+#
+#   cvs -d :pserver:anonymous@cvs-mirror.mozilla.org:/cvsroot   \
+#     co -p mozilla/security/nss/lib/ckfw/builtins/certdata.txt \
+#     > certdata.txt
+# 
+# Keep the RCS version in sync with the spec Version.
+
+%define pkidir %{_sysconfdir}/pki
+
+Summary: The Mozilla CA root certificate bundle
+Summary(ja): Mozilla の CA ルート証明書バンドル
+Name: ca-certificates
+Version: 2012.85
+Release: 1%{?_dist_release}
+License: Public Domain
+Group: System Environment/Base
+URL: http://www.mozilla.org/
+Source0: certdata.txt
+Source1: blacklist.txt
+Source2: generate-cacerts.pl
+Source3: certdata2pem.py
+BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root
+BuildRequires: perl, java-openjdk, python, rcs
+BuildArch: noarch
+
+%description
+This package contains the set of CA certificates chosen by the
+Mozilla Foundation for use with the Internet PKI.
+
+%prep
+rm -rf %{name}
+mkdir %{name} %{name}/certs %{name}/java
+
+%build
+pushd %{name}/certs
+ cp %{SOURCE0} %{SOURCE1} .
+ python %{SOURCE3} 
+popd
+pushd %{name}
+ (
+   cat <<EOF
+# This is a bundle of X.509 certificates of public Certificate
+# Authorities.  It was generated from the Mozilla root CA list.
+#
+# Source: mozilla/security/nss/lib/ckfw/builtins/certdata.txt
+#
+# Generated from:
+EOF
+   ident -q %{SOURCE0} | sed '1d;s/^/#/';
+   echo '#';
+ ) > ca-bundle.crt
+ (
+   cat <<EOF
+# This is a bundle of X.509 certificates of public Certificate
+# Authorities.  It was generated from the Mozilla root CA list.
+# These certificates are in the OpenSSL "TRUSTED CERTIFICATE"
+# format and have trust bits set accordingly.
+#
+# Source: mozilla/security/nss/lib/ckfw/builtins/certdata.txt
+#
+# Generated from:
+EOF
+   ident -q %{SOURCE0} | sed '1d;s/^/#/';
+   echo '#';
+ ) > ca-bundle.trust.crt
+ for f in certs/*.crt; do 
+   tbits=`sed -n '/^# openssl-trust/{s/^.*=//;p;}' $f`
+   case $tbits in
+   *serverAuth*) openssl x509 -text -in "$f" >> ca-bundle.crt ;;
+   esac
+   if [ -n "$tbits" ]; then
+      targs=""
+      for t in $tbits; do
+         targs="${targs} -addtrust $t"
+      done
+      openssl x509 -text -in "$f" -trustout $targs >> ca-bundle.trust.crt
+   fi
+ done
+popd
+pushd %{name}/java
+ test -s ../ca-bundle.crt || exit 1
+ %{__perl} %{SOURCE2} %{_bindir}/keytool ../ca-bundle.crt
+ touch -r %{SOURCE0} cacerts
+popd
+
+%install
+rm -rf $RPM_BUILD_ROOT
+
+mkdir -p $RPM_BUILD_ROOT{%{pkidir}/tls/certs,%{pkidir}/java}
+
+install -p -m 644 %{name}/ca-bundle.crt $RPM_BUILD_ROOT%{pkidir}/tls/certs/ca-bundle.crt
+install -p -m 644 %{name}/ca-bundle.trust.crt $RPM_BUILD_ROOT%{pkidir}/tls/certs/ca-bundle.trust.crt
+ln -s certs/ca-bundle.crt $RPM_BUILD_ROOT%{pkidir}/tls/cert.pem
+touch -r %{SOURCE0} $RPM_BUILD_ROOT%{pkidir}/tls/certs/ca-bundle.crt
+touch -r %{SOURCE0} $RPM_BUILD_ROOT%{pkidir}/tls/certs/ca-bundle.trust.crt
+
+# Install Java cacerts file.
+mkdir -p -m 700 $RPM_BUILD_ROOT%{pkidir}/java
+install -p -m 644 %{name}/java/cacerts $RPM_BUILD_ROOT%{pkidir}/java/
+
+# /etc/ssl/certs symlink for 3rd-party tools
+mkdir -p -m 755 $RPM_BUILD_ROOT%{_sysconfdir}/ssl
+ln -s ../pki/tls/certs $RPM_BUILD_ROOT%{_sysconfdir}/ssl/certs
+
+%clean
+rm -rf $RPM_BUILD_ROOT
+
+%files
+%defattr(-,root,root,-)
+%dir %{pkidir}/java
+%config(noreplace) %{pkidir}/java/cacerts
+%dir %{pkidir}/tls
+%dir %{pkidir}/tls/certs
+%config(noreplace) %{pkidir}/tls/certs/ca-bundle.*crt
+%{pkidir}/tls/cert.pem
+%dir %{_sysconfdir}/ssl
+%{_sysconfdir}/ssl/certs
+
+%changelog
+* Wed Jul 25 2012 Daisuke SUZUKI <daisuke@linux.or.jp> 2012.85-1
+- update to r1.85
+
+* Mon Mar 26 2012 Daisuke SUZUKI <daisuke@linux.or.jp> 2012.81-1
+- initial build for Vine Linux
+
+* Mon Feb 13 2012 Joe Orton <jorton@redhat.com> - 2012.81-1
+- update to r1.81
+
+* Thu Jan 12 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2011.80-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
+
+* Wed Nov  9 2011 Joe Orton <jorton@redhat.com> - 2011.80-1
+- update to r1.80
+- fix handling of certs with dublicate Subject names (#733032)
+
+* Thu Sep  1 2011 Joe Orton <jorton@redhat.com> - 2011.78-1
+- update to r1.78, removing trust from DigiNotar root (#734679)
+
+* Wed Aug  3 2011 Joe Orton <jorton@redhat.com> - 2011.75-1
+- update to r1.75
+
+* Wed Apr 20 2011 Joe Orton <jorton@redhat.com> - 2011.74-1
+- update to r1.74
+
+* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2011.70-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
+
+* Wed Jan 12 2011 Joe Orton <jorton@redhat.com> - 2011.70-1
+- update to r1.70
+
+* Tue Nov  9 2010 Joe Orton <jorton@redhat.com> - 2010.65-3
+- update to r1.65
+
+* Wed Apr  7 2010 Joe Orton <jorton@redhat.com> - 2010.63-3
+- package /etc/ssl/certs symlink for third-party apps (#572725)
+
+* Wed Apr  7 2010 Joe Orton <jorton@redhat.com> - 2010.63-2
+- rebuild
+
+* Wed Apr  7 2010 Joe Orton <jorton@redhat.com> - 2010.63-1
+- update to certdata.txt r1.63
+- use upstream RCS version in Version
+
+* Fri Mar 19 2010 Joe Orton <jorton@redhat.com> - 2010-4
+- fix ca-bundle.crt (#575111)
+
+* Thu Mar 18 2010 Joe Orton <jorton@redhat.com> - 2010-3
+- update to certdata.txt r1.58
+- add /etc/pki/tls/certs/ca-bundle.trust.crt using 'TRUSTED CERTICATE' format
+- exclude ECC certs from the Java cacerts database
+- catch keytool failures
+- fail parsing certdata.txt on finding untrusted but not blacklisted cert
+
+* Fri Jan 15 2010 Joe Orton <jorton@redhat.com> - 2010-2
+- fix Java cacert database generation: use Subject rather than Issuer
+  for alias name; add diagnostics; fix some alias names.
+
+* Mon Jan 11 2010 Joe Orton <jorton@redhat.com> - 2010-1
+- adopt Python certdata.txt parsing script from Debian
+
+* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2009-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
+
+* Wed Jul 22 2009 Joe Orton <jorton@redhat.com> 2009-1
+- update to certdata.txt r1.53
+
+* Mon Feb 23 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2008-8
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
+
+* Tue Oct 14 2008 Joe Orton <jorton@redhat.com> 2008-7
+- update to certdata.txt r1.49
+
+* Wed Jun 25 2008 Thomas Fitzsimmons <fitzsim@redhat.com> - 2008-6
+- Change generate-cacerts.pl to produce pretty aliases.
+
+* Mon Jun  2 2008 Joe Orton <jorton@redhat.com> 2008-5
+- include /etc/pki/tls/cert.pem symlink to ca-bundle.crt
+
+* Tue May 27 2008 Joe Orton <jorton@redhat.com> 2008-4
+- use package name for temp dir, recreate it in prep
+
+* Tue May 27 2008 Joe Orton <jorton@redhat.com> 2008-3
+- fix source script perms
+- mark packaged files as config(noreplace)
+
+* Tue May 27 2008 Joe Orton <jorton@redhat.com> 2008-2
+- add (but don't use) mkcabundle.pl
+- tweak description
+- use /usr/bin/keytool directly; BR java-openjdk
+
+* Tue May 27 2008 Joe Orton <jorton@redhat.com> 2008-1
+- Initial build (#448497)