<feed xmlns='http://www.w3.org/2005/Atom'>
<title>buildroot/package/ca-certificates, branch 2016.05</title>
<subtitle>OpenPOWER buildroot sources</subtitle>
<id>https://git.raptorcs.com/git/buildroot/atom?h=2016.05</id>
<link rel='self' href='https://git.raptorcs.com/git/buildroot/atom?h=2016.05'/>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/'/>
<updated>2016-05-05T13:42:17+00:00</updated>
<entry>
<title>package/ca-certificates: depend on host-python or host-python3</title>
<updated>2016-05-05T13:42:17+00:00</updated>
<author>
<name>Martin Bark</name>
<email>martin@barkynet.com</email>
</author>
<published>2016-05-04T14:17:54+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=27f09940670723fb7cfe9e1f39b23fc4b047e5ae'/>
<id>urn:sha1:27f09940670723fb7cfe9e1f39b23fc4b047e5ae</id>
<content type='text'>
The ca-certificates build process runs a Python script that needs at
least Python 2.7. While Buildroot requires Python as a hard dependency
on the build system, we don't require Python &gt;= 2.7.

So in order to ensure that a Python &gt;= 2.7 is installed, this commit
makes the ca-certificates package depend either on host-python or
host-python3.

Fixes:

 http://autobuild.buildroot.net/results/a2a4fed293c836b9cf63ff2aaa463b0704dec07e/
 http://autobuild.buildroot.net/results/bbed4afa8e30382b8892062f31ba64cbb0ea14e4/
 http://autobuild.buildroot.net/results/1af5562be3c0d233cea81834a898f7ac6ae48271/

Cc: Arnout Vandecappelle (Essensium/Mind) &lt;arnout@mind.be&gt;
Signed-off-by: Martin Bark &lt;martin@barkynet.com&gt;
Reviewed-by: Arnout Vandecappelle (Essensium/Mind) &lt;arnout@mind.be&gt;
[Thomas: rewrite commit log.]
Signed-off-by: Thomas Petazzoni &lt;thomas.petazzoni@free-electrons.com&gt;
</content>
</entry>
<entry>
<title>package/ca-certificates: bump version to 20160104</title>
<updated>2016-02-25T11:24:31+00:00</updated>
<author>
<name>Martin Bark</name>
<email>martin@barkynet.com</email>
</author>
<published>2016-02-25T10:14:52+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=30e991a0826f862c0b9b6e61fc498ca7358ef1d8'/>
<id>urn:sha1:30e991a0826f862c0b9b6e61fc498ca7358ef1d8</id>
<content type='text'>
The following certificate authorities were added (+):
+ "CA WoSign ECC Root"
+ "Certification Authority of WoSign G2"
+ "Certinomis - Root CA"
+ "OISTE WISeKey Global Root GB CA"
+ "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5"
+ "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6"

The following certificate authorities were removed (-):
- "A-Trust-nQual-03"
- "Buypass Class 3 CA 1"
- "ComSign Secured CA"
- "Digital Signature Trust Co. Global CA 1"
- "Digital Signature Trust Co. Global CA 3"
- "SG TRUST SERVICES RACINE"
- "TC TrustCenter Class 2 CA II"
- "TC TrustCenter Universal CA I"
- "TURKTRUST Certificate Services Provider Root 1"
- "TURKTRUST Certificate Services Provider Root 2"
- "UTN DATACorp SGC Root CA"
- "Verisign Class 4 Public Primary Certification Authority - G3"

Signed-off-by: Martin Bark &lt;martin@barkynet.com&gt;
Signed-off-by: Peter Korsgaard &lt;peter@korsgaard.com&gt;
</content>
</entry>
<entry>
<title>package/ca-certificates: bump version to 20150426</title>
<updated>2015-06-09T20:42:16+00:00</updated>
<author>
<name>Martin Bark</name>
<email>martin@barkynet.com</email>
</author>
<published>2015-06-09T14:40:57+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=09071d4a039ef332bfaa148e1f210a18a8d5ee82'/>
<id>urn:sha1:09071d4a039ef332bfaa148e1f210a18a8d5ee82</id>
<content type='text'>
Signed-off-by: Martin Bark &lt;martin@barkynet.com&gt;
Signed-off-by: Thomas Petazzoni &lt;thomas.petazzoni@free-electrons.com&gt;
</content>
</entry>
<entry>
<title>package/ca-certificates: generate the bundle of certs</title>
<updated>2015-04-03T13:39:39+00:00</updated>
<author>
<name>Yann E. MORIN</name>
<email>yann.morin.1998@free.fr</email>
</author>
<published>2015-04-02T23:09:06+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=ea6b7bd5455e733c9fb006c7ed3103459b62d0fe'/>
<id>urn:sha1:ea6b7bd5455e733c9fb006c7ed3103459b62d0fe</id>
<content type='text'>
glib-networking wants to use the certificates bundle, not the individual
certificates.

Generating the bundle is usually done with update-ca-certificates, but
that does not support running out-of-tree.

Fortiunately, and as Gustavo put it, update-ca-certificates is jsut a
glorified 'cat'. It is supposed to be fed a config file stating which
certificate to add/remove to/from the bundle, otherwise nothing fancy
(Oh, yes, running hooks after updating the bundle).

Since we do not need any of this in Buidlroot, we jsut generate a bundle
with all certificates unconditionally.

Reported-by: Gustavo Zacarias &lt;gustavo@zacarias.com.ar&gt;
Signed-off-by: "Yann E. MORIN" &lt;yann.morin.1998@free.fr&gt;
Cc: Gustavo Zacarias &lt;gustavo@zacarias.com.ar&gt;
Acked-by: Gustavo Zacarias &lt;gustavo@zacarias.com.ar&gt;
Tested-by: Gustavo Zacarias &lt;gustavo@zacarias.com.ar&gt;
Signed-off-by: Thomas Petazzoni &lt;thomas.petazzoni@free-electrons.com&gt;
</content>
</entry>
<entry>
<title>package/ca-certificates: bump to 20141019, update snapshot date &amp; hash</title>
<updated>2014-10-25T09:26:30+00:00</updated>
<author>
<name>Karoly Kasza</name>
<email>kaszak@gmail.com</email>
</author>
<published>2014-10-23T14:48:35+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=ac09a36c70dc3e663481978e62c39ce8cc4f8f09'/>
<id>urn:sha1:ac09a36c70dc3e663481978e62c39ce8cc4f8f09</id>
<content type='text'>
Signed-off-by: Karoly Kasza &lt;kaszak@gmail.com&gt;
Signed-off-by: Thomas Petazzoni &lt;thomas.petazzoni@free-electrons.com&gt;
</content>
</entry>
<entry>
<title>package: remove the trailing slash sign from &lt;PKG&gt;_SITE variable</title>
<updated>2014-07-31T21:17:46+00:00</updated>
<author>
<name>Jerzy Grzegorek</name>
<email>jerzy.grzegorek@trzebnica.net</email>
</author>
<published>2014-07-31T08:46:58+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=c7f4b964718bc5a3329bb730f59e24091ecbc7a2'/>
<id>urn:sha1:c7f4b964718bc5a3329bb730f59e24091ecbc7a2</id>
<content type='text'>
Since the trailing slash is stripped from $($(PKG)_SITE) by pkg-generic.mk:

$(call DOWNLOAD,$($(PKG)_SITE:/=)/$($(PKG)_SOURCE))

so it is redundant.
This patch removes it from $(PKG)_SITE variable for BR consistency.

Signed-off-by: Jerzy Grzegorek &lt;jerzy.grzegorek@trzebnica.net&gt;
Signed-off-by: Thomas Petazzoni &lt;thomas.petazzoni@free-electrons.com&gt;
</content>
</entry>
<entry>
<title>package/ca-certificates: add tarball's hashes</title>
<updated>2014-07-04T21:40:55+00:00</updated>
<author>
<name>Yann E. MORIN</name>
<email>yann.morin.1998@free.fr</email>
</author>
<published>2014-07-03T19:36:23+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=0b2264d3d4a0c53917c6f64ae1d7e10b613e59de'/>
<id>urn:sha1:0b2264d3d4a0c53917c6f64ae1d7e10b613e59de</id>
<content type='text'>
ca-certificates contains sensitive security-related information,
and we want to ensure the archive that we download has not been
compromised.

Add the sha1 and sha256 hashes from Debian's packaging.

Signed-off-by: "Yann E. MORIN" &lt;yann.morin.1998@free.fr&gt;
Cc: Martin Bark &lt;martin@barkynet.com&gt;
Reviewed-by: Samuel Martin &lt;s.martin49@gmail.com&gt;
Signed-off-by: Peter Korsgaard &lt;peter@korsgaard.com&gt;
</content>
</entry>
<entry>
<title>package/ca-certificates: security bump to 20140223</title>
<updated>2014-03-26T10:00:19+00:00</updated>
<author>
<name>Yann E. MORIN</name>
<email>yann.morin.1998@free.fr</email>
</author>
<published>2014-03-25T17:56:52+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=1015a2e1f56566519d983acca34130ad4ee2f523'/>
<id>urn:sha1:1015a2e1f56566519d983acca34130ad4ee2f523</id>
<content type='text'>
Some new CA added, some removed.

Signed-off-by: "Yann E. MORIN" &lt;yann.morin.1998@free.fr&gt;
Cc: Gustavo Zacarias &lt;gustavo@zacarias.com.ar&gt;
Cc: Martin Bark &lt;martin@barkynet.com&gt;
Signed-off-by: Peter Korsgaard &lt;peter@korsgaard.com&gt;
</content>
</entry>
<entry>
<title>ca-certificates: new package</title>
<updated>2014-01-12T20:02:33+00:00</updated>
<author>
<name>Martin Bark</name>
<email>martin@barkynet.com</email>
</author>
<published>2014-01-10T15:39:44+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=beb24ce2b0abea2ac68bd86a0ac2162d98bda6cc'/>
<id>urn:sha1:beb24ce2b0abea2ac68bd86a0ac2162d98bda6cc</id>
<content type='text'>
CA certificates used for SSL based applications.  The package installs CA
certificates to /usr/share/ca-certificates and creates symbolic links under
/etc/ssl/certs.  For example, the existing libcurl package will use these
certificates for https urls.  Based on the debian ca-certifcates package.

[Peter: fixup comments as pointed out by Yann]
Signed-off-by: Martin Bark &lt;martin@barkynet.com&gt;
Signed-off-by: Peter Korsgaard &lt;peter@korsgaard.com&gt;
</content>
</entry>
</feed>
