|
|
|
@ -15,6 +15,11 @@ SLOT="0"
|
|
|
|
|
KEYWORDS="~alpha amd64 arm arm64 hppa ~ia64 ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 sparc x86 ~x64-cygwin ~amd64-linux ~x86-linux ~ppc-macos ~x64-macos ~sparc-solaris ~sparc64-solaris ~x64-solaris ~x86-solaris ~x86-winnt"
|
|
|
|
|
IUSE=""
|
|
|
|
|
|
|
|
|
|
# Зависимости
|
|
|
|
|
RDEPEND="
|
|
|
|
|
ca-certificates/ca-certificates
|
|
|
|
|
"
|
|
|
|
|
|
|
|
|
|
RESTRICT="bindist mirror strip"
|
|
|
|
|
|
|
|
|
|
S="${WORKDIR}"
|
|
|
|
@ -39,14 +44,8 @@ src_install() {
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
pkg_postinst() {
|
|
|
|
|
if [[ -d "/usr/local/share/ca-certificates" ]] ; then
|
|
|
|
|
# If the user has local certs, we need to rebuild again
|
|
|
|
|
# to include their stuff in the db.
|
|
|
|
|
# However it's too overzealous when the user has custom certs in place.
|
|
|
|
|
# --fresh is to clean up dangling symlinks
|
|
|
|
|
/usr/sbin/update-ca-certificates
|
|
|
|
|
elog Установка корневого сертификата в /etc/ssl/certs/ выполнено
|
|
|
|
|
fi
|
|
|
|
|
/usr/sbin/update-ca-certificates
|
|
|
|
|
elog Установка корневого сертификата в /etc/ssl/certs/ выполнено
|
|
|
|
|
|
|
|
|
|
# Установка для браузеров
|
|
|
|
|
# Создаём базу nssdb для системы
|
|
|
|
@ -61,7 +60,7 @@ pkg_postinst() {
|
|
|
|
|
|
|
|
|
|
for k in "${!massiv[@]}"; do
|
|
|
|
|
certutil -A -n "${k}" -t "CTu,Cu,Cu" -i /${CA}/${massiv[$k]} -d sql:${certdir};
|
|
|
|
|
elog Установка корневого сертификата в ${certdir} выполнено
|
|
|
|
|
elog Установка корневого сертификата \"${k}\" в ${certdir} выполнено
|
|
|
|
|
done
|
|
|
|
|
done
|
|
|
|
|
|
|
|
|
@ -78,24 +77,18 @@ pkg_prerm() {
|
|
|
|
|
|
|
|
|
|
for certDB in ${nssdir}
|
|
|
|
|
do
|
|
|
|
|
certdir=$(dirname ${certDB});
|
|
|
|
|
certdir=$(dirname ${certDB});
|
|
|
|
|
|
|
|
|
|
for k in "${!massiv[@]}"; do
|
|
|
|
|
certutil -D -n /${CA}"${k}" -d sql:${certdir};
|
|
|
|
|
elog Удаление корневого сертификата из ${certdir} выполнено
|
|
|
|
|
elog Удаление корневого сертификата \"${k}\" из ${certdir} выполнено
|
|
|
|
|
done
|
|
|
|
|
done
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
pkg_postrm() {
|
|
|
|
|
if [[ -d "/usr/local/share/ca-certificates" ]] ; then
|
|
|
|
|
# If the user has local certs, we need to rebuild again
|
|
|
|
|
# to include their stuff in the db.
|
|
|
|
|
# However it's too overzealous when the user has custom certs in place.
|
|
|
|
|
# --fresh is to clean up dangling symlinks
|
|
|
|
|
/usr/sbin/update-ca-certificates --fresh
|
|
|
|
|
elog Удаление корневого сертификата из /etc/ssl/certs/ выполнено
|
|
|
|
|
fi
|
|
|
|
|
/usr/sbin/update-ca-certificates --fresh
|
|
|
|
|
elog Удаление корневого сертификата из /etc/ssl/certs/ выполнено
|
|
|
|
|
|
|
|
|
|
# Удаляем файлы сертификатов
|
|
|
|
|
rm -f /usr/local/share/ca-certificates/${P}_{root}.crt
|