4ed49b4dcb
This setup will add the trusted certificates from the Mozilla NSS bundle to base. This commit includes: - CAROOT option to opt out of installation of certs - mtree amendments for final destinations - infrastructure to fetch/update certs, along with instructions A follow-up commit will add a certctl(8) utility to give the user control over trust specifics. Another follow-up commit will actually commit the initial result of updatecerts. This work was done primarily by allanjude@, with minor contributions by myself. No objection from: secteam Relnotes: yes Differential Revision: https://reviews.freebsd.org/D16856
13 lines
220 B
Makefile
13 lines
220 B
Makefile
# $FreeBSD$
|
|
|
|
BINDIR= /usr/share/certs/trusted
|
|
|
|
TRUSTED_CERTS!= ls ${.CURDIR}/*.pem 2> /dev/null || true
|
|
|
|
FILES+= ${TRUSTED_CERTS}
|
|
|
|
cleancerts:
|
|
@[ -z "${TRUSTED_CERTS}" ] || rm ${TRUSTED_CERTS}
|
|
|
|
.include <bsd.prog.mk>
|