freebsd-skq/secure/caroot/trusted/Makefile

# $FreeBSD$

BINDIR=		/usr/share/certs/trusted

TRUSTED_CERTS!=	echo ${.CURDIR}/*.pem 2> /dev/null || true

FILES+=	 ${TRUSTED_CERTS}

cleancerts:
	@[ -z "${TRUSTED_CERTS}" ] || rm ${TRUSTED_CERTS}

.include <bsd.prog.mk>
[1/3] Initial infrastructure for SSL root bundle in base This setup will add the trusted certificates from the Mozilla NSS bundle to base. This commit includes: - CAROOT option to opt out of installation of certs - mtree amendments for final destinations - infrastructure to fetch/update certs, along with instructions A follow-up commit will add a certctl(8) utility to give the user control over trust specifics. Another follow-up commit will actually commit the initial result of updatecerts. This work was done primarily by allanjude@, with minor contributions by myself. No objection from: secteam Relnotes: yes Differential Revision: https://reviews.freebsd.org/D16856 2019-10-02 01:05:29 +00:00			`# $FreeBSD$`

			`BINDIR= /usr/share/certs/trusted`

caroot: switch to using echo+shell glob to enumerate certs This solves an issue on stable/12 that causes certs to not get installed. ls is apparently not in PATH during installworld, so TRUSTED_CERTS ends up blank and nothing gets installed. We don't really require anything ls-specific, though, so let's just simplify it. MFC after: 3 days 2020-08-23 23:56:57 +00:00			`TRUSTED_CERTS!= echo ${.CURDIR}/*.pem 2> /dev/null \|\| true`
[1/3] Initial infrastructure for SSL root bundle in base This setup will add the trusted certificates from the Mozilla NSS bundle to base. This commit includes: - CAROOT option to opt out of installation of certs - mtree amendments for final destinations - infrastructure to fetch/update certs, along with instructions A follow-up commit will add a certctl(8) utility to give the user control over trust specifics. Another follow-up commit will actually commit the initial result of updatecerts. This work was done primarily by allanjude@, with minor contributions by myself. No objection from: secteam Relnotes: yes Differential Revision: https://reviews.freebsd.org/D16856 2019-10-02 01:05:29 +00:00
			`FILES+= ${TRUSTED_CERTS}`

			`cleancerts:`
			`@[ -z "${TRUSTED_CERTS}" ] \|\| rm ${TRUSTED_CERTS}`

			`.include <bsd.prog.mk>`