PKGBUILDs/core/nss/bundle.sh

23 lines
622 B
Bash
Raw Normal View History

2019-09-04 00:29:18 +00:00
#!/bin/sh
# From Fedora's ca-certificates.spec
(
cat <<EOF
# This is a bundle of X.509 certificates of public Certificate
# Authorities. It was generated from the Mozilla root CA list.
# These certificates and trust/distrust attributes use the file format accepted
# by the p11-kit-trust module.
#
# Source: nss/lib/ckfw/builtins/certdata.txt
# Source: nss/lib/ckfw/builtins/nssckbi.h
#
# Generated from:
EOF
cat certs/nssckbi.h | grep -w NSS_BUILTINS_LIBRARY_VERSION | awk '{print "# " $2 " " $3}'
echo '#'
) > ca-bundle.trust.p11-kit
for p in certs/*.tmp-p11-kit; do
cat "$p" >> ca-bundle.trust.p11-kit
done