#!/bin/sh
name="certs"
short_desc="SSL Certificates"
desc="This package contains /etc/ssl/cert.pem"
category="system"
version="20240115"
maintainer="ffqq@danwin1210.de"
www="https://hg.mozilla.org/releases/mozilla-release/file/default/security/nss/lib/ckfw/builtins/certdata.txt"
master_site="N/A" # accepted values: "url (sftp://, ftp://, http://, https://)", "N/A"
license_logic="single" # accepted values: single, and, or
licenses=("CA")

build_dependencies=("lang/perl5")
run_dependencies=("system/glibc" "lang/perl5" "security/openssl")

build_process() {
    mkdir -p $TAMANDUA_STAGE_DIR/etc/ssl
    curl -O https://anduin.linuxfromscratch.org/BLFS/other/certdata.txt
    chmod +x $TAMANDUA_FILES_DIR/*.{sh,pl}
    CONVERTSCRIPT=$TAMANDUA_FILES_DIR/make-cert.pl $TAMANDUA_FILES_DIR/make-ca.sh
    remove-expired-certs.sh certs
    install -d $TAMANDUA_STAGE_DIR/etc/ssl/certs
    cp -r certs/*.pem $TAMANDUA_STAGE_DIR/etc/ssl/certs
    install ca-bundle-*.crt $TAMANDUA_STAGE_DIR/etc/ssl/ca-bundle.crt
    ln -sv /etc/ssl/ca-bundle.crt $TAMANDUA_STAGE_DIR/etc/ssl/certs/ca-certificates.crt
}

# install scripts
# they will be run during pkg installation
post_install="c_rehash"