rpm/ca-certificates
SHA256
1
0
Fork 0
forked from pool/ca-certificates
Code Pull Requests Activity

- add p11 kit header to set label of migrated certificates to the

Browse Source 
file name of the previous one (bnc#890205)

OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates?expand=0&rev=58
This commit is contained in:
Ludwig Nussel 2014-08-04 15:38:40 +00:00 committed by Git OBS Bridge
parent 6c1a22675f
commit e236524a63
2 changed files with 22 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
ca-certificates.changes
View File

@ -1,3 +1,9 @@
-------------------------------------------------------------------
Mon Aug 4 15:35:27 UTC 2014 - lnussel@suse.de
- add p11 kit header to set label of migrated certificates to the
file name of the previous one (bnc#890205)
-------------------------------------------------------------------
Wed Jul 30 11:45:54 UTC 2014 - lnussel@suse.de

17
ca-certificates.spec
View File

@ -99,7 +99,22 @@ if [ "$1" -ne 0 -a -d %{sslcerts} -a ! -L %{sslcerts} ]; then
read firstline < "$cert"
# skip package provided certificates (bnc#875647)
test "$firstline" != "# generated by openssl-certs, do not edit" || continue
cp -v -n "$cert" /etc/pki/trust/anchors/
# create a p11-kit header that set the label of
# the certificate to the file name. That ensures
# that the certificate gets the same name in
# /etc/ssl/certs as before
bn="${cert##*/}"
(
cat <<-EOF
# created by update-ca-certificates from
# /etc/ssl/certs/$bn
[p11-kit-object-v1]
class: certificate
label: "${bn%.pem}"
trusted: true
EOF
cat $cert
) > "/etc/pki/trust/$bn"
done
fi