aboutsummaryrefslogtreecommitdiffstats
path: root/security/ca_root_nss/Makefile
blob: 9662270908aabe962c79eb4b142a7053c9ffca88 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
# $FreeBSD$

PORTNAME=   ca_root_nss
PORTVERSION=    ${VERSION_NSS}
CATEGORIES= security
MASTER_SITES=   MOZILLA/security/nss/releases/${DISTNAME:tu:C/[-.]/_/g}_RTM/src
DISTNAME=   nss-${VERSION_NSS}${NSS_SUFFIX}

MAINTAINER= ports-secteam@FreeBSD.org
COMMENT=    Root certificate bundle from the Mozilla Project

LICENSE=    MPL20

OPTIONS_DEFINE=     ETCSYMLINK
OPTIONS_DEFAULT=    ETCSYMLINK

OPTIONS_SUB=        yes

ETCSYMLINK_DESC=    Add symlink to /etc/ssl/cert.pem
ETCSYMLINK_CONFLICTS_INSTALL=   ca-roots-[0-9]*

USES=       perl5 ssl:build
USE_PERL5=  build
NO_ARCH=    yes
NO_WRKSUBDIR=   yes

CERTDIR?=   share/certs
PLIST_SUB+= CERTDIR=${CERTDIR}

# !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
# !!!  These versions are intended to track security/nss.        !!!
# !!!  Please DO NOT submit patches for new version until it has !!!
# !!!  been committed there first.                               !!!
# !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
VERSION_NSS=    3.36
#NSS_SUFFIX=    -with-ckbi-1.98
CERTDATA_TXT_PATH=  nss-${VERSION_NSS}/nss/lib/ckfw/builtins/certdata.txt
BUNDLE_PROCESSOR=   MAca-bundle.pl

SUB_FILES=  MAca-bundle.pl pkg-message
SUB_LIST=   VERSION_NSS=${VERSION_NSS}

.include <bsd.port.options.mk>

do-extract:
    @${MKDIR} ${WRKDIR}
    @${TAR} -C ${WRKDIR} -xf ${DISTDIR}/nss-${VERSION_NSS}${NSS_SUFFIX}${EXTRACT_SUFX} \
        ${CERTDATA_TXT_PATH}
    @${CP} ${WRKDIR}/${CERTDATA_TXT_PATH} ${WRKDIR}
    @${RM} -r ${WRKDIR}/nss-${VERSION_NSS}

do-build:   apply-slist
    @${SETENV} PATH=${LOCALBASE}/bin:$${PATH} \
        ${PERL} ${WRKDIR}/${BUNDLE_PROCESSOR} \
        < ${WRKDIR}/certdata.txt > \
        ${WRKDIR}/ca-root-nss.crt

do-install:
    ${MKDIR} ${STAGEDIR}${PREFIX}/${CERTDIR}
    ${INSTALL_DATA} ${WRKDIR}/ca-root-nss.crt ${STAGEDIR}${PREFIX}/${CERTDIR}
.if ${PORT_OPTIONS:METCSYMLINK}
    ${MKDIR} ${STAGEDIR}/etc/ssl
    ${LN} -sf ${PREFIX}/${CERTDIR}/ca-root-nss.crt ${STAGEDIR}/etc/ssl/cert.pem
.endif
    ${MKDIR} ${STAGEDIR}${PREFIX}/etc/ssl
    ${LN} -sf ${PREFIX}/${CERTDIR}/ca-root-nss.crt ${STAGEDIR}${PREFIX}/etc/ssl/cert.pem.sample
    ${MKDIR} ${STAGEDIR}${PREFIX}/openssl
    ${LN} -sf ${PREFIX}/${CERTDIR}/ca-root-nss.crt ${STAGEDIR}${PREFIX}/openssl/cert.pem.sample

.include <bsd.port.mk>