chiark - git - mdw - termux-packages/blob - packages/ca-certificates/build.sh

   1 TERMUX_PKG_HOMEPAGE=https://curl.haxx.se/docs/caextract.html
   2 TERMUX_PKG_DESCRIPTION="Common CA certificates"
   3 TERMUX_PKG_VERSION=20180307
   4 TERMUX_PKG_PLATFORM_INDEPENDENT=yes
   5
   6 termux_step_make_install () {
   7         local CERTDIR=$TERMUX_PREFIX/etc/tls
   8         local CERTFILE=$CERTDIR/cert.pem
   9         # If the checksum has changed, it may be time to update the package version.
  10         local CERTFILE_SHA256=79ea479e9f329de7075c40154c591b51eb056d458bc4dff76d9a4b9c6c4f6d0b
  11
  12         mkdir -p $CERTDIR
  13
  14         termux_download https://curl.haxx.se/ca/cacert.pem \
  15                 $CERTFILE \
  16                 $CERTFILE_SHA256
  17         touch $CERTFILE
  18
  19         # Build java keystore which is split out into a ca-certificates-java subpackage:
  20         local KEYUTIL_JAR=$TERMUX_PKG_CACHEDIR/keyutil-0.4.0.jar
  21         termux_download \
  22                 https://github.com/use-sparingly/keyutil/releases/download/0.4.0/keyutil-0.4.0.jar \
  23                 $KEYUTIL_JAR \
  24                 18f1d2c82839d84949b1ad015343c509e81ef678c24db6112acc6c0761314610
  25
  26         local JAVA_KEYSTORE_DIR=$PREFIX/lib/jvm/openjdk-9/lib/security
  27         mkdir -p $JAVA_KEYSTORE_DIR
  28
  29         java -jar $KEYUTIL_JAR \
  30                 --import \
  31                 --new-keystore $JAVA_KEYSTORE_DIR/jssecacerts \
  32                 --password changeit \
  33                 --force-new-overwrite \
  34                 --import-pem-file $CERTFILE
  35 }