diff options
Diffstat (limited to 'abs/extra/nss/PKGBUILD')
| -rw-r--r-- | abs/extra/nss/PKGBUILD | 67 |
1 files changed, 45 insertions, 22 deletions
diff --git a/abs/extra/nss/PKGBUILD b/abs/extra/nss/PKGBUILD index 09c9d97..7a06cec 100644 --- a/abs/extra/nss/PKGBUILD +++ b/abs/extra/nss/PKGBUILD @@ -1,34 +1,35 @@ # $Id$ # Maintainer: Jan de Groot <jgc@archlinux.org> -pkgname=nss -pkgver=3.15.1 -pkgrel=1 +pkgbase=nss +pkgname=(nss ca-certificates-mozilla) +pkgver=3.17 +pkgrel=4 pkgdesc="Mozilla Network Security Services" arch=(i686 x86_64) url="http://www.mozilla.org/projects/security/pki/nss/" license=('MPL' 'GPL') -_nsprver=4.10 -depends=("nspr>=${_nsprver}" 'sqlite' 'zlib' 'sh') -makedepends=('perl') -options=('!strip' '!makeflags') -source=(ftp://ftp.mozilla.org/pub/security/nss/releases/NSS_${pkgver//./_}_RTM/src/${pkgname}-${pkgver}.tar.gz +_nsprver=4.10.7 +depends=("nspr>=${_nsprver}" 'sqlite' 'zlib' 'sh' 'p11-kit') +makedepends=('perl' 'python2') +options=('!strip' '!makeflags' 'staticlibs') +source=("ftp://ftp.mozilla.org/pub/security/nss/releases/NSS_${pkgver//./_}_RTM/src/${pkgbase}-${pkgver}.tar.gz" + certdata2pem.py + bundle.sh nss.pc.in nss-config.in - ssl-renegotiate-transitional.patch - add_spi+cacert_ca_certs.patch) -sha1sums=('1aa7c0ff8af7fb2c8b6e4886ae2291f4bfe0d5c0' - 'aa5b2c0aa38d3c1066d511336cf28d1333e3aebd' - 'cb744cc3e56b604e4754bc3c7d9f25bb9a0a136c' - '8a964a744ba098711b80c0d279a2993524e8eb92' - 'be6ef0f124f188ebb76f4d83e13466bdcfb27dd3') + ssl-renegotiate-transitional.patch) +sha256sums=('3b1abcd8f89211dda2cc739bfa76552d080f7ea80482ef2727b006548a7f0c81' + 'af13c30801a8a27623948206458432a4cf98061b75ff6e5b5e03912f93c034ee' + '045f520403f715a4cc7f3607b4e2c9bcc88fee5bce58d462fddaa2fdb0e4c180' + 'b9f1428ca2305bf30b109507ff335fa00bce5a7ce0434b50acd26ad7c47dd5bd' + 'e44ac5095b4d88f24ec7b2e6a9f1581560bd3ad41a3d198596d67ef22f67adb9' + '12df04bccbf674db1eef7a519a28987927b5e9c107b1dc386686f05e64f49a97') prepare() { - cd $pkgname-$pkgver + mkdir certs - # Add CAcert and spi-inc.org CA certificates. - # See http://wiki.cacert.org/NSSLib for how to generate - patch -Np1 -i ../add_spi+cacert_ca_certs.patch + cd nss-$pkgver # Adds transitional SSL renegotiate support - patch from Debian patch -Np3 -i ../ssl-renegotiate-transitional.patch @@ -36,12 +37,20 @@ prepare() { # Respect LDFLAGS sed -e 's/\$(MKSHLIB) -o/\$(MKSHLIB) \$(LDFLAGS) -o/' \ -i nss/coreconf/rules.mk + + ln -sr nss/lib/ckfw/builtins/certdata.txt ../certs/ + ln -sr nss/lib/ckfw/builtins/nssckbi.h ../certs/ } build() { - cd $pkgname-$pkgver/nss + cd certs + python2 ../certdata2pem.py + + cd .. + sh bundle.sh + cd nss-$pkgver/nss export BUILD_OPT=1 export NSS_USE_SYSTEM_SQLITE=1 export NSS_ENABLE_ECC=1 @@ -56,8 +65,8 @@ build() { make } -package() { - cd $pkgname-$pkgver +package_nss() { + cd nss-$pkgver install -d "$pkgdir"/usr/{bin,include/nss,lib/pkgconfig} NSS_VMAJOR=$(grep '#define.*NSS_VMAJOR' nss/lib/nss/nss.h | awk '{print $3}') @@ -94,4 +103,18 @@ package() { cd ../../public/nss install -t "$pkgdir/usr/include/nss" -m644 *.h + + rm "$pkgdir/usr/lib/libnssckbi.so" + ln -s pkcs11/p11-kit-trust.so "$pkgdir/usr/lib/libnssckbi.so" +} + +package_ca-certificates-mozilla() { + pkgdesc="Mozilla's set of trusted CA certificates" + depends=(ca-certificates-utils) + install=ca-certificates-mozilla.install + + local _certdir="$pkgdir/usr/share/ca-certificates/trust-source" + install -Dm644 ca-bundle.trust.crt "$_certdir/mozilla.trust.crt" + install -Dm644 ca-bundle.neutral-trust.crt "$_certdir/mozilla.neutral-trust.crt" + install -Dm644 ca-bundle.supplement.p11-kit "$_certdir/mozilla.supplement.p11-kit" } |