michael@3: ### Note that mkcabundle.pl is used to generate ca-bundle.crt
michael@3: ### before generating a source RPM, and is not used during the
michael@3: ### build.
michael@3: 
michael@3: %define pkidir %{_sysconfdir}/pki
michael@3: 
michael@3: Summary: The Mozilla CA root certificate bundle
michael@3: Name: ca-certificates
michael@3: Version: 2008
michael@3: Release: 11.3
michael@3: License: Public Domain
michael@3: Group: System/Base
michael@3: URL: http://www.mozilla.org/
michael@3: Source0: ca-bundle.crt
michael@3: Source1: generate-cacerts.pl
michael@3: Source2: mkcabundle.pl
michael@3: BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root
michael@3: BuildRequires: perl
michael@3: BuildArch: noarch
michael@3: 
michael@3: %description
michael@3: This package contains the set of CA certificates chosen by the
michael@3: Mozilla Foundation for use with the Internet PKI.
michael@3: 
michael@3: %prep
michael@3: rm -rf %{name}
michael@3: mkdir %{name}
michael@3: 
michael@3: %build
michael@3: pushd %{name}
michael@3:  %{__perl} %{SOURCE1} %{_bindir}/keytool %{SOURCE0} 
michael@3:  touch -r %{SOURCE0} cacerts
michael@3: popd
michael@3: 
michael@3: %install
michael@3: rm -rf $RPM_BUILD_ROOT
michael@3: 
michael@3: mkdir -p $RPM_BUILD_ROOT{%{pkidir}/tls/certs,%{pkidir}/java}
michael@3: 
michael@3: install -p -m 644 %{SOURCE0} $RPM_BUILD_ROOT%{pkidir}/tls/certs/ca-bundle.crt
michael@3: ln -s certs/ca-bundle.crt $RPM_BUILD_ROOT%{pkidir}/tls/cert.pem
michael@3: 
michael@3: # Install Java cacerts file.
michael@3: mkdir -p -m 700 $RPM_BUILD_ROOT%{pkidir}/java
michael@3: install -p -m 644 %{name}/cacerts $RPM_BUILD_ROOT%{pkidir}/java/
michael@3: 
michael@3: %clean
michael@3: rm -rf $RPM_BUILD_ROOT
michael@3: 
michael@3: %files
michael@3: %defattr(-,root,root,-)
michael@3: %dir %{pkidir}/java
michael@3: %config(noreplace) %{pkidir}/java/cacerts
michael@3: %dir %{pkidir}/tls
michael@3: %dir %{pkidir}/tls/certs
michael@3: %config(noreplace) %{pkidir}/tls/certs/ca-bundle.crt
michael@3: %{pkidir}/tls/cert.pem
michael@3: 
michael@3: %changelog
michael@3: * Sat Aug  8 2009 Anas Nashif <anas.nashif@intel.com> - 2008
michael@3: - Create .changes file
michael@3: * Mon Feb 23 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2008-8
michael@3: - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
michael@3: * Tue Oct 14 2008 Joe Orton <jorton@redhat.com> 2008-7
michael@3: - update to certdata.txt r1.49
michael@3: * Wed Jun 25 2008 Thomas Fitzsimmons <fitzsim@redhat.com> - 2008-6
michael@3: - Change generate-cacerts.pl to produce pretty aliases.
michael@3: * Mon Jun  2 2008 Joe Orton <jorton@redhat.com> 2008-5
michael@3: - include /etc/pki/tls/cert.pem symlink to ca-bundle.crt
michael@3: * Tue May 27 2008 Joe Orton <jorton@redhat.com> 2008-4
michael@3: - use package name for temp dir, recreate it in prep
michael@3: * Tue May 27 2008 Joe Orton <jorton@redhat.com> 2008-3
michael@3: - fix source script perms
michael@3: - mark packaged files as config(noreplace)
michael@3: * Tue May 27 2008 Joe Orton <jorton@redhat.com> 2008-2
michael@3: - add (but don't use) mkcabundle.pl
michael@3: - tweak description
michael@3: - use /usr/bin/keytool directly; BR java-openjdk
michael@3: * Tue May 27 2008 Joe Orton <jorton@redhat.com> 2008-1
michael@3: - Initial build (#448497)